Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: Xn2WNXYr42LBdYyyeSc3tKfxwq+yGAU60hLsmhsMOLk=
Subject key identifier: 78:5B:33:D1:10:79:BF:E1:C2:F3:46:A8:F0:74:02:8E:0D:EF:B4:BF
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 0197B74576B0CD194B73FBADCC32F5151876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 156F
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: 6v+HlntlB4+RQ2PVRtM+WfKc1Hc+sTW78bx3lLFdBGY=)
2: Wy1LhCK9kxP-C2UiE5R2K8JtffM.roa (hash: DYS7fnBaD9Os9bSnRtbqX/rsXfSVI5HQGNbOlzCHNGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:76:b0:cd:19:4b:73:fb:ad:cc:32:f5:15:18:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=785b33d11079bfe1c2f346a8f074028e0defb4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:f6:dc:02:4e:a7:6a:4b:06:79:39:34:cd:
01:6c:93:3b:68:3c:78:72:9f:5d:65:77:99:8f:26:
1b:32:bc:fb:fe:67:cb:10:14:f5:da:1b:77:8c:62:
62:72:6e:54:9f:fc:04:89:28:c8:44:84:a2:84:0b:
95:db:a9:f6:5e:23:6a:e2:ee:dd:05:01:3b:81:d3:
81:20:99:73:e7:3d:e0:91:77:b9:c3:c2:ab:73:f6:
4b:5b:be:30:e8:2d:ae:ed:32:2a:c4:f9:8f:8f:36:
1d:ff:ff:35:c4:34:c0:b7:51:3c:85:34:be:67:ea:
d3:8c:dd:d3:41:8b:58:24:d6:b1:b6:b4:1a:64:c0:
61:ac:a7:81:21:59:ff:14:db:54:e7:c3:10:46:2a:
90:ef:46:2e:24:59:bd:f6:99:07:0d:dd:1f:8f:d4:
0e:0b:86:d3:e0:0d:a3:fd:ca:b9:8c:c0:3a:08:2c:
8a:b6:cf:46:58:6b:75:a6:5d:98:19:83:c6:44:f3:
0f:a6:20:70:6e:56:b4:f9:8b:0a:a8:2e:34:0f:95:
04:09:ab:38:50:b2:41:71:20:e8:da:9c:ba:34:c3:
ec:e4:d2:c9:69:aa:ed:6c:ac:3c:a8:4c:3e:31:a2:
9b:45:72:24:5d:a2:9f:cc:88:ef:9c:bd:98:21:97:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5B:33:D1:10:79:BF:E1:C2:F3:46:A8:F0:74:02:8E:0D:EF:B4:BF
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:36:0f:7c:9b:d8:a2:b7:93:85:7d:14:ca:ad:3d:e3:aa:a2:
7f:ae:ad:5e:8f:81:71:f3:07:c9:f9:f9:a9:b6:a2:d6:3e:49:
81:bb:f2:e3:fe:6b:d8:47:ed:ca:0c:6d:7a:6c:3a:cf:46:f8:
fc:ea:cc:df:32:0b:0b:14:17:29:06:30:c6:e3:73:15:5e:db:
ce:64:e3:88:2a:6e:1d:66:36:03:04:49:c5:a4:7b:8e:64:09:
8c:a6:e0:8e:0c:dc:e8:75:2e:50:3d:e6:2a:2d:4f:17:a0:70:
27:e3:a0:06:0a:45:c5:cb:a3:4a:18:f5:dc:d8:ab:4b:9f:f4:
9e:29:6c:4d:b3:7f:9d:3c:43:54:89:62:e3:cc:cb:dd:88:2c:
09:96:a5:de:2a:b2:36:01:4e:42:68:76:b4:93:ef:92:10:1c:
fc:18:90:e4:28:27:15:b2:26:d2:bc:c2:a1:9b:6b:e4:8a:30:
82:5a:f4:45:21:0f:07:e1:b9:d2:cb:6c:0b:66:bc:4c:db:8f:
57:dc:14:a9:f6:88:50:08:9d:2a:00:db:b8:d8:bb:91:f9:5b:
25:84:18:e2:76:d9:56:b8:f5:60:ef:e9:a7:98:07:d5:a6:5d:
d6:d1:4e:6a:7d:77:07:2e:40:df:73:c7:73:00:7c:9a:fe:32:
bb:2b:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:53 2025 by rpki-client