Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: xASfvhJ2R5m5zpEbmrrtqPQco7Va/it+ueeNISIAMG8=
Subject key identifier: 0E:76:67:88:88:C3:A0:13:6F:76:2D:41:40:71:BE:98:37:E1:B5:02
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 0197B7EA4902BBB7F2CA53EFF1659594E91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 19:01:14 +0000
Manifest this update: Sat 28 Jun 2025 19:01:14 +0000
Manifest next update: Sun 29 Jun 2025 19:01:14 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: 2L+nZTauz4gjcqzZziuD6/zq4u2JyiiUqhx7K808E1E=)
2: yW1cS9Mx29vTOamtTRsFT6bLIXw.roa (hash: PZBuxnii3Pq+stD6k3qQUstIcPbrvHDexZJKpw32ONQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:49:02:bb:b7:f2:ca:53:ef:f1:65:95:94:e9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Jun 28 19:01:14 2025 GMT
Not After : Jun 29 19:01:14 2025 GMT
Subject: CN=0e76678888c3a0136f762d414071be9837e1b502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7e:9b:66:64:64:10:91:90:d3:d8:28:57:1a:
f5:5e:6d:2c:1b:6d:35:3b:84:8c:27:0b:e3:5a:d5:
74:73:57:24:c9:70:79:7f:ee:e2:cc:7a:0c:5f:54:
6a:ca:74:a0:41:1a:fc:be:52:d6:8b:86:05:4c:fe:
25:d3:ba:7f:a9:ad:9d:1b:39:6a:86:06:b0:48:30:
db:59:ef:df:2a:a3:6d:a3:2e:cb:b9:e0:63:8c:a8:
0e:74:ed:a7:5c:1f:7c:5f:10:da:77:f1:67:35:0d:
65:ef:7f:b0:f5:a2:ff:93:ce:1d:56:48:30:ab:e1:
2e:13:0e:68:e2:40:c0:aa:df:a7:54:fd:8d:1a:40:
e0:2b:e5:c9:bd:a7:83:e1:eb:8f:94:65:4e:8c:a5:
79:f4:68:ce:4c:24:88:2e:13:25:c8:d6:5d:87:76:
e8:01:50:02:f0:19:81:94:03:74:d3:74:59:23:f3:
45:77:05:38:57:32:7e:de:b9:15:6d:75:82:00:1a:
69:3e:d7:ec:d3:f4:23:20:64:b3:eb:70:d2:69:b4:
f9:4f:a9:bd:68:23:af:d3:72:48:3c:a1:02:5d:66:
61:ee:85:54:34:00:fc:ca:05:d7:a6:63:c5:40:24:
90:da:0c:a5:72:63:84:c2:1d:8a:29:61:83:73:d8:
df:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:76:67:88:88:C3:A0:13:6F:76:2D:41:40:71:BE:98:37:E1:B5:02
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cd:77:89:04:08:c3:ac:ae:64:b0:f4:cf:57:c5:42:14:c2:
c7:a5:f0:fb:f7:ea:15:05:65:78:1b:c1:1b:a5:64:17:6a:10:
f8:3f:ee:ba:58:5c:db:3c:27:db:91:5c:d2:78:03:24:07:93:
f9:db:3e:a2:00:6b:0f:02:ac:a1:c3:1a:71:01:fa:b8:b8:a4:
10:4d:c3:ef:d8:92:16:31:5d:6c:56:c3:e2:a9:33:d5:ef:dd:
6b:bc:e3:03:18:29:1f:a5:66:e7:2d:2a:82:a4:c9:4c:b0:32:
be:da:92:ed:02:25:81:5c:1a:ef:fe:99:62:ad:bd:6f:3a:ca:
3e:99:b2:61:ad:54:68:9f:78:d5:8b:be:a5:00:8c:2d:48:e6:
7d:e4:54:a0:bd:c8:6e:81:76:43:04:7a:ae:d1:7c:f8:b0:7e:
06:f1:94:18:1d:19:61:44:31:6b:b1:69:fd:c8:58:e5:56:56:
58:40:5f:8e:65:d9:95:09:21:2e:2b:73:ba:1b:12:ee:e3:73:
73:73:85:3c:f5:a8:1a:33:08:55:c3:d1:4b:ec:d8:96:1b:66:
95:1a:87:22:fa:9d:0b:d8:df:47:5f:5d:5c:1d:0f:f1:04:6b:
17:32:d0:73:32:21:23:86:69:95:dd:00:eb:e2:97:06:c2:93:
b8:88:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:56 2025 by rpki-client