Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: zHj2yRrEIBYIUPIn1qnStev/AUcYrjTFbRW0VC3UweY=
Subject key identifier: 11:6F:3C:1B:98:68:5F:6E:D5:23:63:E8:CF:73:CA:61:E6:A0:16:74
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 01969D5106A41DBDF34F12F96F1CC675F8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 14DD
Signing time: Sun 04 May 2025 22:00:55 +0000
Manifest this update: Sun 04 May 2025 22:00:55 +0000
Manifest next update: Mon 05 May 2025 22:00:55 +0000
Files and hashes: 1: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: y8FvVBr7YOjS5QOh0/+Jr1YvdeR2ueSMTj+6V7ayeMc=)
2: Wy1LhCK9kxP-C2UiE5R2K8JtffM.roa (hash: DYS7fnBaD9Os9bSnRtbqX/rsXfSVI5HQGNbOlzCHNGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:51:06:a4:1d:bd:f3:4f:12:f9:6f:1c:c6:75:f8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: May 4 22:00:55 2025 GMT
Not After : May 5 22:00:55 2025 GMT
Subject: CN=116f3c1b98685f6ed52363e8cf73ca61e6a01674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:7c:7a:5d:13:93:25:5a:ee:0d:8a:7e:f4:
ee:d8:72:27:fb:f3:2b:b0:e5:eb:76:02:01:23:3d:
78:7f:c8:e6:58:f4:04:df:7c:0d:82:75:9e:75:98:
99:83:f8:58:6e:ff:12:00:7e:2b:73:4c:2c:bc:6a:
49:cb:ea:20:4e:73:8c:1f:56:f3:b9:d3:56:7b:97:
1d:73:78:a6:6e:c4:3a:5c:90:8e:ff:f9:bd:67:78:
88:86:d3:43:90:02:e2:5f:e7:db:9c:19:8c:97:83:
ed:7e:05:95:9b:6e:22:6c:08:c3:08:3c:84:c8:ce:
60:f1:15:7f:e4:45:01:13:e2:45:d2:ed:4a:9c:a2:
d2:a0:72:cd:c5:33:72:81:ac:3d:f7:2f:52:68:65:
22:a8:33:6e:d4:11:61:3c:93:5f:f0:89:21:aa:c8:
75:95:a8:2f:ba:43:73:1b:a4:33:e9:79:ed:11:05:
4c:41:9b:3f:25:4e:c6:d1:2c:6d:93:13:ed:c7:7d:
8e:36:b6:20:96:de:5c:b1:83:e3:aa:0e:6f:6b:d4:
35:b6:8e:26:99:2a:ce:b4:fe:f6:7c:ad:43:58:9f:
7f:1d:14:dd:df:3c:52:33:bd:18:eb:b2:67:72:4c:
e3:11:81:e7:fe:16:89:cf:10:27:db:7a:f2:cb:69:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6F:3C:1B:98:68:5F:6E:D5:23:63:E8:CF:73:CA:61:E6:A0:16:74
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:71:6a:a0:1d:7c:8d:f1:da:ae:3a:3e:e1:ad:79:ea:f3:a5:
b7:91:f9:33:4e:8a:18:23:e4:37:1c:64:13:2d:81:3e:6f:62:
d9:d4:a1:b7:56:f8:a1:28:1b:5f:a1:f1:a8:44:c9:4a:b6:9f:
52:2b:2b:55:24:5b:c7:76:bd:3a:8d:67:3f:20:97:d5:f6:b5:
01:8f:eb:45:c0:39:9f:48:39:e2:b2:9b:a1:e7:93:9c:7b:22:
b1:96:46:fc:85:6f:3b:ca:32:6d:02:3f:be:1f:12:b4:f7:37:
25:76:c7:46:cb:b3:94:ae:90:3d:c8:85:2c:ac:84:bb:1e:e8:
3e:95:d8:c7:12:d6:f7:80:f5:45:0c:a4:b5:e0:e9:72:ce:70:
b2:f3:40:67:95:08:7e:f1:24:03:ca:c1:a5:a0:11:a6:be:f3:
73:f9:5d:06:92:12:94:6c:11:e7:b4:60:d8:49:78:1f:8b:a8:
12:d4:53:62:a6:ac:2e:77:f0:96:12:16:f0:42:b7:ad:55:01:
48:4f:d9:de:b2:e6:a8:4e:ad:84:46:de:57:59:a2:cf:8f:f8:
ec:71:c1:8b:1d:01:fd:fb:91:18:ca:d0:36:d9:8b:cd:ca:18:
c7:31:c6:84:59:65:77:44:9f:19:b5:84:02:fd:5c:b7:66:a2:
d5:2f:c2:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadUQakHb3zTxL5bxzGdfjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGE3MDJmNjc3ZjMzNmQ5YjNlMzZjMzg0ZWJjOGM5ZmQ4
ODU5ZjQwHhcNMjUwNTA0MjIwMDU1WhcNMjUwNTA1MjIwMDU1WjAzMTEwLwYDVQQD
EygxMTZmM2MxYjk4Njg1ZjZlZDUyMzYzZThjZjczY2E2MWU2YTAxNjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDt8el0TkyVa7g2KfvTu2HIn+/Mr
sOXrdgIBIz14f8jmWPQE33wNgnWedZiZg/hYbv8SAH4rc0wsvGpJy+ogTnOMH1bz
udNWe5cdc3imbsQ6XJCO//m9Z3iIhtNDkALiX+fbnBmMl4PtfgWVm24ibAjDCDyE
yM5g8RV/5EUBE+JF0u1KnKLSoHLNxTNygaw99y9SaGUiqDNu1BFhPJNf8Ikhqsh1
lagvukNzG6Qz6XntEQVMQZs/JU7G0SxtkxPtx32ONrYglt5csYPjqg5va9Q1to4m
mSrOtP72fK1DWJ9/HRTd3zxSM70Y67JnckzjEYHn/haJzxAn23ryy2mwuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFvPBuYaF9u1SNj6M9zymHmoBZ0MB8GA1UdIwQY
MBaAFApKcC9nfzNtmz42w4TryMn9iFn0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2twd0wyZF9NMjJiUGpiRGhPdkl5ZjJJV2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kYTViMzItMjBhNy00ZTBhLWI4MzQt
ZWYzMTcxNTYxMWFhLzEvQ2twd0wyZF9NMjJiUGpiRGhPdkl5ZjJJV2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kYTViMzItMjBhNy00ZTBhLWI4MzQtZWYzMTcxNTYxMWFh
LzEvQ2twd0wyZF9NMjJiUGpiRGhPdkl5ZjJJV2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXFqoB18
jfHarjo+4a156vOlt5H5M06KGCPkNxxkEy2BPm9i2dSht1b4oSgbX6HxqETJSraf
UisrVSRbx3a9Oo1nPyCX1fa1AY/rRcA5n0g54rKboeeTnHsisZZG/IVvO8oybQI/
vh8StPc3JXbHRsuzlK6QPciFLKyEux7oPpXYxxLW94D1RQykteDpcs5wsvNAZ5UI
fvEkA8rBpaARpr7zc/ldBpISlGwR57Rg2El4H4uoEtRTYqasLnfwlhIW8EK3rVUB
SE/Z3rLmqE6thEbeV1miz4/47HHBix0B/fuRGMrQNtmLzcoYxzHGhFlld0SfGbWE
Av1ct2ai1S/C4A==
-----END CERTIFICATE-----
Generated at Mon May 5 07:09:22 2025 by rpki-client