Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: m2jSad2zAUjA4s+5FuLxRj2vHlTz7CkuaoiHmeEvhQY=
Subject key identifier: 0C:EE:0B:15:C2:E8:AD:0E:87:3D:B4:81:ED:52:5E:81:A8:F5:1A:36
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 0196C04AE07CFFB5D540E9262557EFE55100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 1476
Signing time: Sun 11 May 2025 17:00:54 +0000
Manifest this update: Sun 11 May 2025 17:00:54 +0000
Manifest next update: Mon 12 May 2025 17:00:54 +0000
Files and hashes: 1: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (hash: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: HGEPVr1Vs2yWlPZVyo1407LmIfbR3Zj1+U9mU72Zmsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:e0:7c:ff:b5:d5:40:e9:26:25:57:ef:e5:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: May 11 17:00:54 2025 GMT
Not After : May 12 17:00:54 2025 GMT
Subject: CN=0cee0b15c2e8ad0e873db481ed525e81a8f51a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:08:69:dc:21:61:a4:48:7a:74:c1:39:97:
f4:54:63:bd:c3:6f:bb:ca:c1:a3:26:d8:79:91:f2:
a6:e7:b2:af:07:97:ed:6c:18:2c:0f:4a:4e:02:41:
a2:4c:43:b0:ec:54:41:67:5e:a2:bd:20:9a:da:ea:
c5:18:da:0a:30:0e:f2:b8:fd:6a:04:2f:5f:0a:73:
ed:61:78:44:24:47:2c:18:92:e4:aa:5c:fc:64:0c:
de:36:2a:66:1f:88:e2:e7:ae:7c:90:bf:0c:17:68:
93:23:4b:45:ac:45:51:ec:48:94:8e:89:fc:9a:22:
33:2e:d5:74:8e:96:70:43:9f:5a:f7:ee:ef:73:50:
9c:eb:a6:3e:db:82:46:cf:2a:a9:26:20:fd:86:d6:
0d:51:17:d0:ce:59:c8:f8:7d:06:d0:27:fa:31:c8:
c5:3d:f7:f7:69:f6:33:5f:a8:f8:69:79:d9:dc:a2:
d0:2e:b9:a1:0f:18:7b:15:b7:a6:7a:d8:87:96:c6:
d8:fe:5e:84:ad:bf:aa:19:7d:f7:c0:1a:eb:c4:04:
44:61:c2:f9:e6:3b:fb:05:62:50:e7:4f:d9:4d:d9:
fe:8d:ae:94:b4:0e:42:c5:1b:51:8a:f4:94:f4:df:
df:d6:29:94:46:2c:bf:97:62:dd:8f:4d:d1:6d:d4:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EE:0B:15:C2:E8:AD:0E:87:3D:B4:81:ED:52:5E:81:A8:F5:1A:36
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:40:7e:a2:aa:f1:2f:bc:47:7d:8e:f2:10:24:30:2e:aa:f4:
fd:23:8b:2c:f6:77:24:a0:d2:01:2e:e2:d0:e8:8a:f7:78:04:
8e:a2:cb:7f:e4:d0:a9:73:f4:59:c7:24:85:09:77:83:f1:cf:
03:33:c4:e2:fc:10:f9:66:ad:9a:e4:1b:92:47:89:24:de:00:
1e:7e:2f:51:67:ed:35:3a:e9:ea:d6:c0:1c:f3:a1:24:e5:56:
11:04:66:0b:c4:d3:46:04:d7:a2:0f:f0:76:7b:35:de:27:c9:
e8:20:98:0f:84:ca:22:04:8a:0b:bb:7b:31:72:5a:05:86:26:
48:98:d1:1a:e7:4a:c4:61:17:de:9b:71:cc:b6:a4:ff:5b:62:
7d:d7:0c:06:42:27:6b:d2:c2:b5:4e:74:7f:10:aa:6d:28:6c:
31:0d:f1:29:c0:37:28:b5:2e:84:d8:3e:e2:dc:d6:bb:0f:c1:
91:bc:e2:2f:95:67:71:98:be:ab:97:ef:c4:51:f9:a6:83:3c:
6c:b5:6f:f7:54:b0:77:7f:87:18:c2:e0:2e:52:6d:e5:06:e2:
b8:7d:2b:2b:73:5d:92:7d:48:07:f9:ac:c6:57:ea:af:a3:4a:
eb:d7:2d:dd:3f:d0:78:3a:db:bd:5e:e0:23:bd:d5:f2:6b:9e:
93:aa:21:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:17:29 2025 by rpki-client