Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
File: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json)
Hash identifier: eguSJov6+y3eaVG02gaYMpKe5Ec4mQ/nbzQI6EpV6GY=
Subject key identifier: AB:E4:EE:AC:06:0B:DD:A2:DF:53:60:CE:7A:FB:B0:3F:86:83:64:6C
Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Certificate serial: 0197B9D8AD883C7CCCF9CA41CDC10020CE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
Manifest number: 120F
Signing time: Sun 29 Jun 2025 04:01:14 +0000
Manifest this update: Sun 29 Jun 2025 04:01:14 +0000
Manifest next update: Mon 30 Jun 2025 04:01:14 +0000
Files and hashes: 1: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: 6DAkWHxpG1hhp0j9Zcyl6yrAD/S403Wc2g26QUwkRwg=)
2: h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa (hash: h0MwBLTN+JJQsx/mfZTZMMTWn2GxCEc+/y4Gt6r0rFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:ad:88:3c:7c:cc:f9:ca:41:cd:c1:00:20:ce:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Validity
Not Before: Jun 29 04:01:14 2025 GMT
Not After : Jun 30 04:01:14 2025 GMT
Subject: CN=abe4eeac060bdda2df5360ce7afbb03f8683646c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:a7:63:d4:3b:a8:14:37:aa:27:81:a9:26:
4c:9e:c6:92:ea:4d:b2:47:26:9b:67:04:ba:e4:13:
56:bf:21:c9:35:f4:a0:19:86:6b:d2:56:6d:f5:74:
20:14:fb:56:0e:1e:60:85:90:6f:87:5b:88:6d:6e:
c7:86:e4:c6:2e:ea:ef:20:07:2a:7c:de:81:d5:a2:
49:5e:73:2d:c0:dd:f6:85:93:5b:5d:63:7a:86:9b:
b5:c6:e5:22:4d:37:91:2b:08:e6:9e:a9:4d:ae:ce:
ba:34:0a:aa:a5:9b:7a:18:8c:71:91:06:89:a7:cc:
e3:c8:a5:5f:91:13:db:50:81:c2:be:2d:6f:47:85:
37:0c:8a:1b:3e:0f:ca:64:85:2b:20:8e:1d:f1:0e:
d7:5b:22:7f:b1:e6:b9:53:28:8a:c4:3d:5d:af:23:
13:b5:d0:68:cf:a3:a8:eb:78:b1:8f:e6:54:44:9f:
21:82:36:8b:f5:11:a6:62:9d:ad:6d:1a:ad:63:22:
e0:0c:ee:ef:90:23:d6:80:10:73:d6:d8:5f:e4:4d:
52:2c:29:dd:ed:8d:a4:67:25:4a:45:13:84:30:d6:
22:8d:83:78:fe:ae:34:39:f4:51:f2:fd:e4:93:ee:
c0:39:de:c9:a3:04:44:e7:67:72:c9:b9:3f:a7:88:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E4:EE:AC:06:0B:DD:A2:DF:53:60:CE:7A:FB:B0:3F:86:83:64:6C
X509v3 Authority Key Identifier:
keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7e:ed:13:ad:91:f4:53:2c:34:c5:c9:f7:51:01:66:13:41:
48:c6:2c:eb:10:4a:2e:42:0a:51:ec:80:40:1e:3b:f0:eb:bc:
15:d4:d3:10:01:c7:a9:2e:68:5a:b2:a3:b5:2a:ca:13:99:62:
33:37:b1:58:dd:a5:15:c4:2f:61:5f:50:90:ff:96:ed:bf:a6:
3d:b1:f6:37:43:75:40:11:94:a6:9c:7c:52:d0:8a:6a:cf:a8:
57:f0:c6:46:13:fa:d7:e8:b7:16:b9:d3:11:5d:df:9a:7f:b6:
b8:08:88:61:84:75:57:d4:21:97:dd:36:91:23:74:87:5b:12:
4e:3c:a1:6a:4a:5c:fb:cd:c7:60:87:de:6b:3a:22:ae:ef:18:
9e:f7:57:9d:a8:21:93:47:52:62:9a:ea:9e:74:30:72:2c:97:
96:86:18:3b:de:7b:d6:65:ae:a6:08:75:30:2b:e1:02:ad:2d:
44:b5:bd:7a:5d:7d:fb:e1:7d:f5:7a:e6:d8:fd:7a:67:70:b1:
db:d2:7d:7f:07:19:49:0b:61:04:c8:5d:17:c2:40:96:83:27:
d2:bc:bf:ab:09:06:30:bd:8b:99:42:93:56:21:73:30:59:41:
86:aa:13:7f:ab:83:b8:bd:14:f3:0d:70:8a:5f:bd:98:2f:4f:
8e:93:d8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:03:36 2025 by rpki-client