Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
File: ckWEKSHz0CDU2AReUrsQ_PV-r28.mft (raw, json)
Hash identifier: r/Jy+h169D34o/LwJtdbUtX7XB7SEawxtL+7fnKkn4k=
Subject key identifier: 7F:BE:29:90:B7:9E:44:E6:C0:1B:AD:05:D2:E0:C1:4E:66:37:9B:6B
Authority key identifier: 72:45:84:29:21:F3:D0:20:D4:D8:04:5E:52:BB:10:FC:F5:7E:AF:6F
Certificate issuer: /CN=7245842921f3d020d4d8045e52bb10fcf57eaf6f
Certificate serial: 0197B70E859916A67570359AA007CDE539CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
Manifest number: 0F31
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: ckWEKSHz0CDU2AReUrsQ_PV-r28.crl (hash: PpHqBSWygtk3C7imcF3sK6dVj5+nbCPZcrAFtVbWMhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:85:99:16:a6:75:70:35:9a:a0:07:cd:e5:39:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7245842921f3d020d4d8045e52bb10fcf57eaf6f
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=7fbe2990b79e44e6c01bad05d2e0c14e66379b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:38:0f:28:2b:81:8d:49:2a:07:f3:2c:80:
95:0f:45:11:68:84:30:13:e9:1a:4a:db:fe:a8:e5:
93:5c:27:eb:39:61:43:0e:cd:4b:69:52:09:6f:42:
39:ae:9e:a5:67:c9:1c:cb:75:55:11:e2:34:45:6e:
59:f2:bd:1b:da:51:c9:f2:4c:80:4c:1f:8e:a1:8f:
03:52:e7:5a:9e:3b:66:82:b0:af:e3:36:60:f0:0c:
3e:fe:13:16:1a:1f:31:e0:32:ef:0f:26:68:c8:9d:
64:ff:30:7d:2c:38:c0:9b:5a:c6:cf:bd:32:fb:41:
f5:84:d4:85:df:03:cd:3b:03:60:77:85:83:be:bd:
ea:2d:a6:05:3a:70:a7:1f:32:f7:7a:ad:2d:64:f4:
0f:2e:55:4f:00:99:7b:cb:bd:03:fe:5d:da:41:13:
79:0c:50:a5:c7:0c:e2:99:5b:a2:10:e1:93:48:b1:
a0:94:ae:29:fa:b2:81:9f:25:7a:2e:d2:65:82:9d:
a9:0b:5f:f1:a7:c8:69:d6:9b:75:54:1c:d9:af:31:
60:2f:c2:ae:79:52:b4:7f:0d:ed:3b:f2:b6:7e:d8:
81:c3:89:7e:1d:cc:80:44:a8:92:21:b8:26:4a:48:
3a:54:3d:02:ab:17:f2:74:aa:8d:d8:49:02:b0:41:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BE:29:90:B7:9E:44:E6:C0:1B:AD:05:D2:E0:C1:4E:66:37:9B:6B
X509v3 Authority Key Identifier:
keyid:72:45:84:29:21:F3:D0:20:D4:D8:04:5E:52:BB:10:FC:F5:7E:AF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4b:a9:8e:c2:05:fd:f3:8d:f3:a7:7e:da:ea:90:eb:53:f7:
e3:40:33:4f:9b:39:af:12:e7:29:94:bd:45:e7:54:f9:74:85:
a1:8c:b3:40:cd:89:49:d4:2a:db:a3:75:b6:86:92:ee:4a:14:
77:8b:da:bf:1e:0b:ec:b6:f8:96:d8:d9:07:e8:ad:7c:6c:42:
91:cc:11:4d:92:4f:41:27:66:fd:d4:52:51:0b:1d:25:f5:a0:
89:50:6e:9f:8a:c1:2f:3e:86:3a:51:05:ce:a3:2c:09:0d:f2:
97:0a:fc:ed:76:0d:ed:3c:37:11:22:a6:dd:c4:fc:7b:e4:09:
6e:38:2e:62:30:ee:29:4e:93:e8:04:a6:da:34:18:1e:81:52:
99:5d:c5:d2:42:4b:e0:8e:77:25:14:8e:2a:9d:bb:56:4f:56:
c1:1c:a0:38:43:75:49:2e:7e:62:54:8b:f5:ec:05:ef:68:78:
5f:3e:ca:e4:f4:c5:86:5f:a0:05:46:ba:a3:6b:46:ac:1c:07:
86:58:71:b2:1b:d8:3b:59:c0:75:7a:3e:1f:a0:cc:03:a2:e8:
cb:3d:f2:87:cf:3c:51:83:ec:57:12:8f:b8:b8:2d:c9:ec:dd:
52:35:ee:8e:c8:ca:d9:55:65:78:48:c9:d0:06:06:7d:d2:04:
83:d3:12:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:34 2025 by rpki-client