Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: GyAVW3m25ABfiXQxPMIcykceqbdV7byA8s5F53PNvYg=
Subject key identifier: 36:4B:39:A2:39:F9:AC:F8:96:E5:21:94:C5:52:AF:E0:A3:AC:26:AF
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 0197B77C7EE731EB68291A2AC385B79D2C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 14F6
Signing time: Sat 28 Jun 2025 17:01:18 +0000
Manifest this update: Sat 28 Jun 2025 17:01:18 +0000
Manifest next update: Sun 29 Jun 2025 17:01:18 +0000
Files and hashes: 1: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (hash: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: sGUdqZ+b3HDfUTvjtVk/mvqsf0Fp/PN4BjOzfgsKasA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7e:e7:31:eb:68:29:1a:2a:c3:85:b7:9d:2c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Jun 28 17:01:18 2025 GMT
Not After : Jun 29 17:01:18 2025 GMT
Subject: CN=364b39a239f9acf896e52194c552afe0a3ac26af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:52:48:48:d9:ef:58:88:ca:d1:fb:32:28:
d2:13:6f:f3:ef:aa:98:1a:e9:bd:68:32:fc:98:19:
8c:ee:cc:49:eb:6a:fa:3b:2f:44:fc:18:64:44:40:
8f:97:22:ad:38:b7:77:3a:2c:d4:60:7c:35:d8:5b:
4e:77:d2:e5:e2:c9:77:cd:95:4e:b8:29:06:05:49:
1e:38:60:25:e6:38:bb:2a:42:22:c8:06:30:0a:fa:
71:ba:0c:82:24:a5:96:d1:fd:7f:a3:cf:f0:d2:cd:
ee:e5:f9:fd:4b:fa:68:55:40:1d:12:8d:73:07:b9:
83:94:31:ba:18:54:af:04:14:1c:f0:42:89:f9:31:
76:65:69:08:ac:70:b2:cf:73:36:16:8d:f8:b2:cd:
ba:7d:ba:f7:2f:5a:72:f7:c7:79:d1:d1:40:27:07:
ab:92:73:72:bf:d0:b0:74:20:6d:a3:73:5f:06:7e:
89:ad:f9:12:9e:0f:39:a4:05:88:71:f4:77:4f:d1:
e2:04:61:e5:21:74:56:c9:76:ba:2a:06:7a:33:a9:
10:29:69:58:1f:c7:db:f1:7b:46:fe:dc:3e:fb:92:
a7:e2:72:03:9a:88:42:05:38:49:f0:57:66:55:21:
6b:c5:8e:fe:a1:fc:74:dc:5a:68:e1:12:ee:42:f8:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4B:39:A2:39:F9:AC:F8:96:E5:21:94:C5:52:AF:E0:A3:AC:26:AF
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:76:b3:8d:e2:97:6b:24:bc:cd:58:dc:f6:fb:6c:e6:55:8b:
f9:01:15:1b:74:44:b0:8d:fe:67:06:4c:0e:cf:f9:5b:0c:da:
7b:b9:09:47:2c:b1:b2:89:54:de:62:f2:48:db:03:cd:c4:ab:
20:07:bb:58:ca:e5:f4:4e:d5:04:c5:a9:46:cc:0f:f5:02:19:
b6:de:66:88:00:f6:18:4b:20:55:53:f6:f2:42:ee:a7:60:77:
a1:c2:ae:15:12:09:6a:9d:bc:65:58:d7:7a:59:1b:ae:0f:45:
81:de:cf:52:03:57:5b:6f:e6:3b:ab:07:6e:04:1b:5a:3d:a4:
bd:26:da:b8:47:e3:ee:27:44:c9:0e:af:2d:3a:1d:cb:9f:60:
25:76:59:e2:27:ef:57:56:16:f7:9e:d3:c5:95:6b:04:fe:55:
36:96:6e:ea:5e:f1:8d:e6:96:3a:aa:7a:c8:5b:e3:45:55:4a:
1c:2c:69:3d:f8:f7:83:af:c5:8a:c7:5e:3f:3b:52:21:10:6a:
d4:57:5d:fe:24:b3:08:70:ed:91:4d:79:0d:cc:2e:c1:83:d5:
e3:62:40:88:3d:6c:de:b1:18:9c:60:32:ba:07:89:66:46:0e:
d4:a0:b5:4a:82:ab:1a:99:0f:82:fe:3a:74:00:36:9d:af:32:
71:fe:ab:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:21 2025 by rpki-client