Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: 1qolwUQ8y2nkPR4ShSi8PibI494imsmUA2TORs0wUOw=
Subject key identifier: 69:98:4D:32:6E:34:AE:B7:C3:C2:1A:F5:41:35:04:EE:99:B7:4E:AC
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 0196C26FB54E011DD3FE2C9F1906D6E398D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 147A
Signing time: Mon 12 May 2025 03:00:22 +0000
Manifest this update: Mon 12 May 2025 03:00:22 +0000
Manifest next update: Tue 13 May 2025 03:00:22 +0000
Files and hashes: 1: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: 5D9Y5etQLrmnvDrOAFqXhOVw+y0XCTki8uIIgTi5He0=)
2: hML-Tag6b9qlpG18VlhLUkClkKg.roa (hash: LEX7BjdOFqa/vQo+qGyu7UsdS3xFcEis6fY7DeQDRek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:b5:4e:01:1d:d3:fe:2c:9f:19:06:d6:e3:98:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: May 12 03:00:22 2025 GMT
Not After : May 13 03:00:22 2025 GMT
Subject: CN=69984d326e34aeb7c3c21af5413504ee99b74eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:12:1f:f3:b3:9e:08:b1:82:1b:56:5c:04:
85:0f:35:78:8d:2d:e9:dd:7f:5c:72:62:c5:fd:25:
8d:66:38:21:48:ab:eb:c8:94:ef:4c:e3:0f:0a:65:
7f:19:51:51:92:c4:cd:e5:ca:37:05:9f:35:db:3f:
a1:09:df:54:bc:f5:d8:57:fc:3d:a3:0c:73:10:ff:
3f:84:2a:c0:d3:cf:a6:44:2b:58:ef:36:11:4d:60:
ba:22:7d:97:8a:ff:ab:f5:aa:73:98:71:d8:f8:66:
32:23:a2:e7:7f:86:f3:2b:53:3c:bb:d0:35:8d:40:
98:62:da:c2:5d:e2:d6:a6:1e:38:41:e6:15:c7:ee:
14:12:0b:dd:4d:a9:8f:6f:d7:29:b9:dc:70:6d:a0:
ab:ea:9a:31:af:75:74:a0:e6:cd:a7:77:e4:8c:76:
92:c9:e9:07:ed:58:b5:13:da:9a:86:6d:69:1a:7e:
34:d1:3f:7e:c2:54:e5:d3:d5:2a:5a:d4:27:22:a3:
00:22:63:8b:cb:de:de:fc:18:cb:c8:ec:79:3f:75:
ad:c0:ad:34:50:17:a7:ef:7d:70:d9:c4:69:4f:35:
59:c2:95:21:14:0f:ca:9a:e5:f6:10:52:03:2f:05:
13:55:63:48:41:84:13:b4:3c:3f:34:7f:ea:b3:65:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:98:4D:32:6E:34:AE:B7:C3:C2:1A:F5:41:35:04:EE:99:B7:4E:AC
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f9:92:45:e1:a4:a4:cd:a8:9e:a4:94:a9:f8:f0:2c:3f:c1:
ab:71:f7:99:b8:e1:21:be:06:82:53:1e:e4:a4:c8:08:e7:66:
c0:1a:9d:88:af:ff:73:2d:2b:d2:f2:2a:41:9f:12:a1:37:99:
ba:ab:12:eb:d0:55:a6:63:a7:85:69:0c:d1:a0:d5:08:5f:a2:
a2:9b:10:cb:28:c0:cf:5f:05:69:38:3b:b2:87:13:66:96:1a:
53:fe:64:ae:0d:4e:c2:1b:78:f5:cf:60:10:ee:39:ce:d2:ad:
a9:97:01:bb:c5:4c:a9:fe:f3:76:ef:6e:d6:5a:d4:04:58:63:
d9:87:59:3a:cb:4a:9d:f0:04:c1:80:93:fe:24:2a:20:a2:71:
69:68:36:cd:c1:42:3a:02:f6:cf:dc:b0:0c:69:d1:fe:e0:04:
b8:71:95:f8:4e:9d:37:47:47:10:ae:36:ae:c8:c3:92:b3:af:
85:20:e7:5b:10:d9:ed:4a:cf:ef:44:aa:4e:49:50:40:40:21:
22:f9:a5:54:85:1c:87:db:bb:6a:64:bf:90:b3:80:70:eb:a4:
82:f3:28:2b:41:da:cc:49:4a:f6:b5:f7:60:08:f5:d3:60:75:
54:6e:3a:fa:70:a2:9f:b0:05:8e:6d:05:43:f1:bb:c0:77:82:
c3:f1:f4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:38:28 2025 by rpki-client