Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: HdYED7fuIDi47evq6gWZJhE0UYFOrEfP9MGQp64y7/U=
Subject key identifier: 82:D3:2E:12:9C:01:6E:3B:EC:D5:8A:80:F2:86:38:F4:D4:C1:C1:7B
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 01965011996D9DAA520BD347FF1F14F0857C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 0EEF
Signing time: Sat 19 Apr 2025 22:00:52 +0000
Manifest this update: Sat 19 Apr 2025 22:00:52 +0000
Manifest next update: Sun 20 Apr 2025 22:00:52 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: GeE9IfILpQl2XZd8uygVA4/V39NoPpDIFc43NlNQz1I=)
2: ivGsGxEIaQg3eTWW5YQRIPtIuDY.roa (hash: l2FcCUkM86hTAWJrLWFUiZXNcITlcUDIimETJwhAOes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:99:6d:9d:aa:52:0b:d3:47:ff:1f:14:f0:85:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Apr 19 22:00:52 2025 GMT
Not After : Apr 20 22:00:52 2025 GMT
Subject: CN=82d32e129c016e3becd58a80f28638f4d4c1c17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:47:f3:a5:93:9b:4d:73:1f:30:44:06:f6:
6d:34:04:8e:9d:79:f4:f4:8f:08:78:1c:22:fb:2e:
12:29:eb:de:9d:19:b6:83:f2:25:6d:74:d8:a9:05:
bc:af:0c:87:8f:ee:fc:c3:28:4f:69:8f:13:1c:66:
f1:63:cb:47:7d:76:fe:72:39:f8:19:8f:f1:88:c6:
0e:46:43:30:ab:bb:6b:59:16:0c:9a:a1:78:b1:4b:
62:e6:cf:a8:c7:76:71:2d:a2:44:6d:a0:96:be:cc:
70:2c:6b:56:e9:8e:40:a2:12:64:8c:76:ad:8e:b9:
25:cc:f8:cc:e7:4b:b6:4c:5a:0e:cc:70:8f:cb:15:
af:e9:c8:ca:f6:2b:58:3a:22:4a:7a:29:88:24:ec:
49:6e:a2:dc:80:09:01:10:cd:fc:4a:76:29:7c:20:
22:69:76:4f:c1:45:5a:f6:89:7b:52:b3:f4:b6:3e:
46:98:68:2b:ed:b2:b6:ab:3e:15:3f:53:50:1f:b6:
41:4f:0c:3d:7a:1a:c2:89:1c:3a:3d:d4:1a:3d:60:
99:fe:d1:cc:ef:68:63:89:7d:ad:15:59:0c:c2:3f:
d7:5b:15:5a:c9:38:7c:77:37:7c:03:ce:39:12:ad:
4a:e7:9c:35:fb:5d:e0:72:65:25:f1:5c:a4:66:9c:
74:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D3:2E:12:9C:01:6E:3B:EC:D5:8A:80:F2:86:38:F4:D4:C1:C1:7B
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:88:69:e1:98:1d:12:2e:fe:cb:a2:bb:bc:58:79:85:69:5c:
92:cf:c3:61:8a:8e:27:63:21:c3:28:fd:91:90:d0:7d:49:5c:
e7:6b:a7:4e:3d:ea:fc:d1:4d:9b:88:db:ac:19:ef:32:8b:2a:
b2:62:d4:11:6f:39:c5:b8:31:f2:22:23:83:1e:3d:66:2c:55:
50:41:2c:d2:55:d5:58:7d:2e:52:19:ac:d1:c5:80:8f:fc:f7:
fa:22:d0:69:e5:5e:46:b0:9f:98:60:30:86:89:ed:70:18:30:
e8:e6:cf:2e:1a:0e:c8:26:d0:c3:a7:72:93:65:fc:df:a0:c6:
fa:a9:e3:94:91:31:04:ce:66:55:3d:d3:21:fa:b7:6a:c1:48:
8b:7f:de:00:db:15:8e:1f:a4:1f:82:f4:21:47:77:eb:fc:f2:
06:67:da:66:59:4f:c2:25:93:aa:23:0c:e5:f9:25:06:26:bc:
1c:4f:83:1c:55:74:d2:25:af:56:bb:55:2f:ba:b8:fb:8b:fc:
68:b0:7c:c0:c4:d2:e7:b8:ba:88:ea:61:05:e7:93:f9:17:35:
25:ae:4f:e5:4d:23:67:4e:a3:3e:47:ab:ca:4f:a6:1f:25:0b:
12:61:4f:46:9b:27:a6:15:34:e2:8f:10:7b:7f:d8:16:fb:48:
10:3f:7f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:24 2025 by rpki-client