Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: kPAHZUujm2d+kMxuSs9VDDubmMnpR7bE3tAIJRJg59w=
Subject key identifier: A9:E0:04:76:25:98:FA:A3:87:23:12:2B:4D:EB:95:9B:FF:37:FB:32
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 0197B74556FD73F22D995B815BEC2EE606CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 1454
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: sc0NBbF3f2jgk/vvKznkAdXr81W7+sIovUyPs8tDy4w=)
2: OH2h9N_hyzRLLEO1xxz2pS01OI8.roa (hash: KX0d4zyKelEiSPA5pJcqywoIBRSpP8vuqYcvjW39t40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:56:fd:73:f2:2d:99:5b:81:5b:ec:2e:e6:06:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=a9e004762598faa38723122b4deb959bff37fb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:08:c1:22:12:cf:09:76:54:6c:aa:8b:95:
8c:e8:d9:60:42:44:88:95:f1:fc:27:f8:ef:65:a7:
4d:87:25:a4:db:da:0e:c6:ef:cf:30:86:82:9d:c5:
95:44:29:2b:4f:63:f7:ae:39:1a:9c:f3:71:41:82:
78:64:14:e0:a4:45:c2:41:c4:f2:93:9c:d7:2c:cd:
0f:28:70:33:47:7d:64:88:5f:5e:3c:08:8c:b7:74:
d8:1d:d8:06:43:c4:20:ba:5d:1d:38:6a:81:15:55:
5e:cd:5c:bc:2a:44:44:4e:1b:05:8f:fa:20:62:16:
a4:a8:3b:40:4b:c1:08:2d:5a:85:18:fc:55:5a:cd:
d1:bc:45:fb:62:f8:41:88:9c:81:45:7e:94:c6:e6:
9c:83:8b:0a:d0:36:a4:bd:9f:2b:92:40:43:86:1c:
87:94:dd:36:d6:5c:67:e1:6a:25:7b:3e:35:14:b9:
4c:89:44:16:dc:51:de:d6:b3:8b:ff:a1:79:b9:ad:
4c:59:f8:85:88:02:3d:23:72:6d:7b:0c:d8:f7:6c:
ad:f8:ea:d1:18:cf:7c:d9:5f:0f:df:07:90:2c:3a:
8e:a5:92:0a:2c:34:00:6c:bc:8e:51:2c:49:0c:f1:
1c:af:a8:ac:76:32:6d:d0:23:5a:cf:be:3c:17:96:
63:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E0:04:76:25:98:FA:A3:87:23:12:2B:4D:EB:95:9B:FF:37:FB:32
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:5a:1c:a7:67:64:c1:f1:49:d1:8e:34:bb:a1:d3:6c:df:db:
46:b3:bc:ff:89:c2:9f:f6:c7:ba:b0:26:0b:c8:6d:31:cf:11:
c6:e1:c5:e5:52:86:95:a8:a6:30:4a:0e:1b:09:de:e6:33:cf:
97:c8:8f:65:c0:4a:d0:57:c8:7c:8f:94:6e:e1:8b:43:9f:3e:
8c:aa:e4:59:1c:be:59:63:ff:23:f6:96:d8:89:9d:b7:a4:09:
b7:13:4a:71:20:08:21:3a:61:00:2d:ca:43:8e:8d:63:44:b6:
8d:4b:5d:ae:91:a7:a9:23:4e:45:87:81:f2:6f:ce:4b:df:27:
dd:dc:44:34:cd:91:28:5c:2f:4c:7e:82:4b:b1:a7:2d:fd:a8:
1f:8e:b1:30:a5:65:33:8d:47:c4:13:11:3e:ae:9a:86:04:d1:
53:0c:0c:aa:f2:19:c3:f4:86:db:7e:ba:c5:f7:f7:b4:20:74:
33:16:7a:82:b3:e5:5b:75:2e:99:3f:f5:63:00:18:81:0b:d5:
97:37:c4:6d:43:4c:66:6a:55:7e:37:c0:de:f9:63:41:93:20:
d8:3b:73:45:ee:63:ca:75:96:bc:c1:8a:b3:ca:7c:90:0d:cc:
97:ed:db:8e:c3:a9:8b:fe:9f:d8:4c:01:a1:68:3a:31:ca:d0:
00:cf:3b:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RVb9c/ItmVuBW+wu5gbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDJhZTZlOTYxODBmMDNiN2NhNmQ5NzQyNzUxNmU0YzA3
ZjZlMmIwHhcNMjUwNjI4MTYwMTA0WhcNMjUwNjI5MTYwMTA0WjAzMTEwLwYDVQQD
EyhhOWUwMDQ3NjI1OThmYWEzODcyMzEyMmI0ZGViOTU5YmZmMzdmYjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQcIwSISzwl2VGyqi5WM6NlgQkSI
lfH8J/jvZadNhyWk29oOxu/PMIaCncWVRCkrT2P3rjkanPNxQYJ4ZBTgpEXCQcTy
k5zXLM0PKHAzR31kiF9ePAiMt3TYHdgGQ8Qgul0dOGqBFVVezVy8KkREThsFj/og
YhakqDtAS8EILVqFGPxVWs3RvEX7YvhBiJyBRX6Uxuacg4sK0DakvZ8rkkBDhhyH
lN021lxn4Wolez41FLlMiUQW3FHe1rOL/6F5ua1MWfiFiAI9I3JtewzY92yt+OrR
GM982V8P3weQLDqOpZIKLDQAbLyOUSxJDPEcr6isdjJt0CNaz748F5ZjVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKngBHYlmPqjhyMSK03rlZv/N/syMB8GA1UdIwQY
MBaAFApCrm6WGA8Dt8ptl0J1FuTAf24rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEt
YjQxOTJhYzYzOGM5LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEtYjQxOTJhYzYzOGM5
LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslocp2dk
wfFJ0Y40u6HTbN/bRrO8/4nCn/bHurAmC8htMc8RxuHF5VKGlaimMEoOGwne5jPP
l8iPZcBK0FfIfI+UbuGLQ58+jKrkWRy+WWP/I/aW2Imdt6QJtxNKcSAIITphAC3K
Q46NY0S2jUtdrpGnqSNORYeB8m/OS98n3dxENM2RKFwvTH6CS7GnLf2oH46xMKVl
M41HxBMRPq6ahgTRUwwMqvIZw/SG2366xff3tCB0MxZ6grPlW3UumT/1YwAYgQvV
lzfEbUNMZmpVfjfA3vljQZMg2DtzRe5jynWWvMGKs8p8kA3Ml+3bjsOpi/6f2EwB
oWg6McrQAM87UQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:19 2025 by rpki-client