Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: xVnEuLpvkCvF5wZXTF6JfV1diRJNDsEG+R0BOqVWIWA=
Subject key identifier: 82:13:E1:8B:4C:0F:D8:6E:8B:42:81:62:56:9B:C8:A7:BE:97:65:DD
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 0197B6A207252883306D52BFFC4D8C63100F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 13:02:41 +0000
Manifest this update: Sat 28 Jun 2025 13:02:41 +0000
Manifest next update: Sun 29 Jun 2025 13:02:41 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: sWeVanNbP29a2+GTmx5kGu7f4E9ZHUluYrI0ykteHA8=)
2: yZFI1jyAbYGjSENB6hUDCl2gHYc.roa (hash: o5YM8CJqE4i9ckicmaW3HRH+ncpAlffTwVokUmcC09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:07:25:28:83:30:6d:52:bf:fc:4d:8c:63:10:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Jun 28 13:02:41 2025 GMT
Not After : Jun 29 13:02:41 2025 GMT
Subject: CN=8213e18b4c0fd86e8b428162569bc8a7be9765dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:23:4f:fc:ce:21:90:ef:c7:3f:18:cb:3c:d5:
ba:60:12:1c:c2:f8:7f:56:09:c6:c9:a3:15:92:19:
dd:07:85:e9:dd:89:b6:e6:16:83:0a:ed:ce:14:3c:
66:b0:a8:26:a9:f2:ed:9e:6a:6d:92:c0:1f:78:de:
f9:40:ce:e3:70:08:96:67:6e:7c:8e:e8:94:f4:87:
18:96:06:d0:a1:63:00:7d:df:44:1b:99:be:ea:5d:
ca:38:22:0e:aa:d2:cb:48:fc:87:69:46:3d:99:47:
ac:60:c4:4d:0d:a5:64:59:57:8a:8d:d8:f1:48:7d:
0c:b0:83:29:7e:de:db:42:c8:28:a5:eb:c9:12:5b:
c4:7d:85:1f:d8:4c:9e:36:b6:ed:59:d4:e9:2b:88:
8a:82:f7:71:08:f7:41:48:9e:b9:e5:f9:aa:7e:b8:
28:8b:b5:19:4f:60:e6:97:79:49:a5:87:9b:51:99:
95:6d:21:8d:77:67:9d:6d:20:47:88:50:dd:5f:3f:
72:78:b3:0b:a0:40:ba:fb:e7:68:35:be:20:0a:3f:
2c:0f:3a:1b:c1:a5:76:46:e5:15:bf:95:ef:1c:28:
ec:b3:46:80:ac:f0:f4:5a:55:eb:2b:6e:2b:3f:8d:
34:77:9e:08:ad:75:ab:95:1d:14:a4:b4:42:cb:d4:
29:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:13:E1:8B:4C:0F:D8:6E:8B:42:81:62:56:9B:C8:A7:BE:97:65:DD
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f3:9b:2e:cd:a6:8d:a2:4e:73:b9:fa:55:7e:88:00:c7:93:
8c:bb:77:3b:4a:8a:a3:61:ef:8d:29:73:f8:99:a1:a3:66:aa:
6c:11:55:a1:f3:1e:7d:5f:95:37:cb:d9:ec:11:07:2a:75:40:
02:df:52:73:48:24:5d:e1:b8:8e:f1:96:86:5e:99:49:e8:30:
a3:fc:23:13:bd:3e:cf:fc:08:82:84:79:3e:b8:cf:54:ef:ce:
b6:96:87:a8:70:8c:92:46:d0:cc:18:04:df:77:8c:8f:57:ee:
40:a7:16:84:c1:e3:f2:d1:18:cf:f7:c8:9b:0e:22:f6:bc:b4:
dd:66:0e:88:f3:d3:ea:24:27:02:ce:31:9f:a1:75:2d:dc:f5:
2f:e3:10:67:d0:36:8f:92:22:fe:b4:2b:9b:9c:cc:0e:8b:5e:
5c:7a:6f:14:30:d5:c6:10:97:82:27:12:6e:7b:15:6f:da:ca:
ba:f3:33:8b:c9:c5:e4:5d:ff:8f:e1:37:2b:1d:79:df:9d:af:
cb:2b:c4:f0:b6:8a:ef:c8:78:c5:37:9e:e2:6e:c9:65:b3:f2:
2d:56:6f:36:aa:bf:58:6a:90:db:48:73:08:c5:27:c5:0c:c8:
b5:e7:4a:4d:c9:19:f5:12:c4:d8:6b:dd:16:7b:c7:f3:b0:8b:
c3:15:d6:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ogclKIMwbVK//E2MYxAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGE4NjFkN2MxNGI0Y2E1ZTZkMWM3ZDYwYWFlZWIzMmVh
OGVmNjEwHhcNMjUwNjI4MTMwMjQxWhcNMjUwNjI5MTMwMjQxWjAzMTEwLwYDVQQD
Eyg4MjEzZTE4YjRjMGZkODZlOGI0MjgxNjI1NjliYzhhN2JlOTc2NWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CNP/M4hkO/HPxjLPNW6YBIcwvh/
VgnGyaMVkhndB4Xp3Ym25haDCu3OFDxmsKgmqfLtnmptksAfeN75QM7jcAiWZ258
juiU9IcYlgbQoWMAfd9EG5m+6l3KOCIOqtLLSPyHaUY9mUesYMRNDaVkWVeKjdjx
SH0MsIMpft7bQsgopevJElvEfYUf2EyeNrbtWdTpK4iKgvdxCPdBSJ655fmqfrgo
i7UZT2Dml3lJpYebUZmVbSGNd2edbSBHiFDdXz9yeLMLoEC6++doNb4gCj8sDzob
waV2RuUVv5XvHCjss0aArPD0WlXrK24rP400d54IrXWrlR0UpLRCy9Qp0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIT4YtMD9hui0KBYlabyKe+l2XdMB8GA1UdIwQY
MBaAFApKhh18FLTKXm0cfWCq7rMuqO9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2It
OTRkYmYzZmQwZTJkLzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2ItOTRkYmYzZmQwZTJk
LzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPObLs2m
jaJOc7n6VX6IAMeTjLt3O0qKo2HvjSlz+Jmho2aqbBFVofMefV+VN8vZ7BEHKnVA
At9Sc0gkXeG4jvGWhl6ZSegwo/wjE70+z/wIgoR5PrjPVO/OtpaHqHCMkkbQzBgE
33eMj1fuQKcWhMHj8tEYz/fImw4i9ry03WYOiPPT6iQnAs4xn6F1Ldz1L+MQZ9A2
j5Ii/rQrm5zMDoteXHpvFDDVxhCXgicSbnsVb9rKuvMzi8nF5F3/j+E3Kx15352v
yyvE8LaK78h4xTee4m7JZbPyLVZvNqq/WGqQ20hzCMUnxQzItedKTckZ9RLE2Gvd
FnvH87CLwxXWzw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:11 2025 by rpki-client