Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: cJVtCOofL71KkTsIgDZGEjEL7+9KV4zH9co1b5kwSN8=
Subject key identifier: 25:89:6E:4E:C2:19:D4:F4:5A:C2:6E:06:30:A3:29:91:FD:78:F8:CC
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 0197D4AB211DAE9C767B6E9B6752DE53E424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 1508
Signing time: Fri 04 Jul 2025 09:01:14 +0000
Manifest this update: Fri 04 Jul 2025 09:01:14 +0000
Manifest next update: Sat 05 Jul 2025 09:01:14 +0000
Files and hashes: 1: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: GKNrT+Ki4796UYzY95MBZoy2uVU/LpPiD1FU1r+S3Fw=)
2: hML-Tag6b9qlpG18VlhLUkClkKg.roa (hash: LEX7BjdOFqa/vQo+qGyu7UsdS3xFcEis6fY7DeQDRek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:ab:21:1d:ae:9c:76:7b:6e:9b:67:52:de:53:e4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Jul 4 09:01:14 2025 GMT
Not After : Jul 5 09:01:14 2025 GMT
Subject: CN=25896e4ec219d4f45ac26e0630a32991fd78f8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4b:d6:a6:a8:54:83:d1:28:a5:cd:f9:2b:07:
ee:90:bf:62:bd:fb:0d:7c:37:d7:58:19:3f:f4:e1:
40:08:52:2c:4a:13:90:38:72:cd:fb:15:22:ab:a4:
97:34:45:d8:38:26:0d:ba:a6:f1:7d:c3:75:f5:f3:
3b:e6:11:6e:ef:db:87:86:d1:fe:84:0d:53:09:c9:
3e:67:da:7f:61:0e:9a:0b:0e:32:eb:03:07:1e:4c:
55:25:87:bc:3f:32:3a:d7:36:f1:2d:71:b1:01:d7:
b6:bd:13:10:38:68:fe:21:1a:c0:d3:c1:bb:ef:1e:
f5:e5:29:da:1b:bc:8b:82:ca:ca:bb:3a:dd:b6:8b:
f6:d1:1d:e7:75:a1:0e:ec:39:b1:c7:43:14:df:a8:
dc:2c:c0:71:7a:2f:8d:cb:7d:2d:28:8e:7f:80:d1:
ab:69:e5:d0:ea:3b:6f:e6:5e:d5:8c:9d:2c:c4:19:
81:54:71:b9:a4:6c:77:db:ac:b2:d9:77:c3:95:6d:
5d:1f:f6:6a:0b:73:64:70:d5:88:22:86:60:94:46:
38:4e:ce:34:62:d2:cf:be:44:8e:df:10:2c:14:94:
cd:00:da:35:fe:03:e3:8b:b1:bd:55:e5:dc:25:27:
a0:a3:d0:16:91:98:c0:41:c8:db:0d:fa:4e:a2:f6:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:89:6E:4E:C2:19:D4:F4:5A:C2:6E:06:30:A3:29:91:FD:78:F8:CC
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8d:23:58:c1:ee:2d:d0:21:6c:93:cd:4a:9d:83:05:30:fa:
d1:53:66:1f:e6:0e:42:e2:38:9f:87:16:3d:c8:4a:71:92:2b:
0b:31:16:77:bb:0d:bc:98:36:06:66:45:0b:d9:d6:3c:46:74:
95:1a:8e:92:33:66:dc:18:be:f8:8d:e3:7b:36:34:4c:c0:fc:
ea:76:cf:75:44:36:07:e7:0d:36:a0:60:22:7b:d3:e8:5c:7b:
8a:9e:e8:95:03:10:f0:cc:bc:8a:45:29:2f:7d:cb:db:51:41:
e3:e5:ca:d3:e9:fe:5f:fb:cd:73:3e:7d:70:fc:e8:18:5d:ae:
d8:5b:69:5f:ff:79:44:5b:72:b9:f7:e4:71:b7:a0:2e:c3:80:
9a:14:52:8f:fc:bd:c1:c5:07:5e:7d:bd:24:66:a2:2a:d1:15:
0b:44:06:98:64:8d:fa:b6:61:9a:67:2a:d6:8c:46:83:a1:63:
02:f9:87:c6:09:f0:3f:d6:e7:49:34:26:2b:8e:d6:e1:b2:ee:
99:21:16:79:18:ec:fa:ed:43:d0:da:c3:67:6b:0d:41:ca:89:
72:49:bb:58:f8:e5:65:75:c7:b8:24:d4:94:04:b0:6d:44:b2:
ef:3d:90:11:5f:73:b6:de:6e:0d:58:f1:50:f7:b5:52:77:c1:
1d:bd:9e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:58:25 2025 by rpki-client