Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: 7PzOhK0c+wwCutNForwsAmjfuKWP7QbsQEgJ2m2zU9M=
Subject key identifier: 91:53:D0:BD:A6:1E:A3:39:3E:B2:2F:0B:6C:1C:FE:1E:0F:D1:93:19
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 019749311392F1AF21AC3407F0CB4F832509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 0F73
Signing time: Sat 07 Jun 2025 07:00:42 +0000
Manifest this update: Sat 07 Jun 2025 07:00:42 +0000
Manifest next update: Sun 08 Jun 2025 07:00:42 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: Zop1QcBSXdukAPnZotJQDMdHm59ZLF2ejejroeusEIA=)
2: ZzkiDwtBZqtMUNkcvV7d7s_Jt5k.roa (hash: pTGPYQviSOj1ZFFzCCHZK/34uo5urkjZrgwZdrFPiTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:13:92:f1:af:21:ac:34:07:f0:cb:4f:83:25:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Jun 7 07:00:42 2025 GMT
Not After : Jun 8 07:00:42 2025 GMT
Subject: CN=9153d0bda61ea3393eb22f0b6c1cfe1e0fd19319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:e2:82:99:0d:a6:39:65:c2:63:1a:c6:cb:
c7:9f:3a:9e:94:f2:db:f2:29:c4:35:2b:6a:4c:fc:
03:5c:1e:9c:03:ab:7f:43:be:1e:80:f4:b9:e3:5e:
6b:99:9e:77:69:35:30:0a:09:e2:e3:0e:26:15:fd:
00:71:f7:0d:8b:cf:fc:4d:b4:72:58:8e:02:c9:bb:
83:ec:82:ed:1f:bd:2c:62:6c:e8:05:c4:fb:5e:f9:
0b:9e:50:eb:da:63:c2:12:4d:80:40:23:66:f0:d1:
99:ec:e2:d7:29:7c:7d:64:ac:83:86:c5:15:d8:35:
9f:4c:29:cb:81:c6:f2:4e:16:3f:d2:d9:98:f3:d8:
2f:ca:30:30:86:54:fb:bd:06:c6:81:49:58:9d:a0:
17:47:a1:b6:70:80:1e:64:b5:5f:96:91:17:4f:18:
02:70:fa:bf:4f:1c:37:3e:6e:fc:e4:cf:da:7f:36:
85:aa:da:54:37:bb:c0:90:71:d1:01:cb:d0:8d:2f:
18:6d:6d:6c:f6:13:c8:51:2b:63:4e:e2:df:b7:2e:
66:45:0b:ca:52:88:6f:3f:17:c6:d6:d1:5c:87:67:
32:cd:e4:31:b6:40:ff:33:c9:0f:7f:01:80:a2:31:
5e:a4:af:a8:3a:52:ba:13:15:7b:8c:c3:1d:b4:48:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:53:D0:BD:A6:1E:A3:39:3E:B2:2F:0B:6C:1C:FE:1E:0F:D1:93:19
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:df:03:be:37:74:95:a0:2b:67:44:ff:43:93:94:0b:03:ce:
44:16:8d:64:96:aa:62:6d:51:3d:70:87:2a:15:61:9c:8d:3b:
29:1e:96:fe:bd:6b:61:59:4e:8d:fe:34:49:42:0d:57:84:55:
54:4b:80:e2:63:c4:61:ae:d1:47:6d:f5:cf:51:19:7a:98:e2:
b0:89:ec:05:c9:b2:7a:09:bf:89:99:c4:ec:b7:b9:02:40:13:
e3:27:93:9e:50:22:69:78:ad:3e:15:2e:7a:67:3b:9e:53:f1:
60:81:3f:ef:39:6d:f3:86:cb:46:df:09:65:08:3f:14:cb:c2:
29:1e:07:df:fd:57:4d:d7:f3:09:f3:63:10:05:4a:9a:3a:71:
c2:58:0d:b0:6a:45:85:11:b1:87:f6:28:b1:66:e5:db:86:bb:
97:3f:24:a6:1a:38:6a:f1:55:8e:3e:74:c6:2e:86:e5:7e:ec:
92:62:32:1d:2c:96:8a:13:f6:3e:23:ca:06:75:d2:5c:dc:71:
61:17:94:9c:3f:53:dd:9f:6f:9e:41:12:42:98:57:2f:f9:2e:
c3:57:21:42:1e:61:1b:17:fa:97:01:1d:e2:1e:c4:02:3f:13:
23:ee:84:91:f8:6d:65:10:b0:be:67:f9:df:8d:fe:88:10:4f:
cc:4a:95:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:36 2025 by rpki-client