Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: YmykKkFBAtBITKlPM/HuB0JWZGcTzCGlT5DSzUfDOFc=
Subject key identifier: 71:FC:13:AF:34:93:5D:56:0B:CF:89:6D:CD:31:76:71:51:E0:83:6F
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 0196B58FBF3D1D7B2B853329B248EF834CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 1537
Signing time: Fri 09 May 2025 15:00:18 +0000
Manifest this update: Fri 09 May 2025 15:00:18 +0000
Manifest next update: Sat 10 May 2025 15:00:18 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: JpIk44em47cJesmzTV8hmD03pOP1UnXshQ7LfyEyuAc=)
2: yZFI1jyAbYGjSENB6hUDCl2gHYc.roa (hash: o5YM8CJqE4i9ckicmaW3HRH+ncpAlffTwVokUmcC09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:8f:bf:3d:1d:7b:2b:85:33:29:b2:48:ef:83:4c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: May 9 15:00:18 2025 GMT
Not After : May 10 15:00:18 2025 GMT
Subject: CN=71fc13af34935d560bcf896dcd31767151e0836f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:3c:e0:fd:15:17:96:be:30:a5:e8:7b:2e:
e2:2f:c8:20:a7:12:23:a6:1f:f6:95:86:70:45:cd:
8f:bb:61:e7:11:00:4e:45:95:28:12:1e:d7:d8:fa:
72:37:4f:9a:e8:17:db:60:27:4a:6a:c4:9d:9e:78:
75:c8:7f:b9:9c:d7:c6:ec:d6:2b:a5:7f:9a:7d:7f:
86:93:26:d3:ee:40:7a:b3:5b:97:60:0e:60:09:60:
7e:10:a7:9e:2c:4f:63:8b:42:c5:ae:8d:83:5b:fe:
a8:4b:f4:ee:9e:bc:bf:85:34:5b:7f:1b:a6:51:6f:
e3:42:e2:df:0d:24:9c:dc:79:a6:b0:ad:e4:da:bf:
64:7d:de:7f:2d:38:39:9d:80:ab:c4:f7:54:ce:11:
04:91:32:5e:05:56:e9:e2:b0:b0:ed:8e:bc:42:cb:
44:e1:54:15:bc:d5:b5:79:5a:04:43:7e:03:4d:bf:
a3:f7:9e:9e:db:9f:24:45:cf:da:0f:a3:ba:21:17:
ec:e8:cb:bd:cb:ac:23:d0:d4:e0:83:36:00:c0:0c:
5a:46:19:ac:4e:b3:2c:dc:80:a3:2a:eb:34:26:59:
e5:cb:19:e7:36:61:86:52:62:18:f3:3d:7a:c6:d4:
bc:32:05:7e:c1:cb:9f:a0:97:c7:a3:fd:03:e8:1e:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FC:13:AF:34:93:5D:56:0B:CF:89:6D:CD:31:76:71:51:E0:83:6F
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ff:3b:6a:39:60:c4:b0:db:91:11:24:10:08:51:02:d7:aa:
11:cc:a1:be:59:73:f0:0d:b5:eb:37:7f:51:c1:45:ca:57:f0:
3a:a6:5c:89:d3:42:6f:dc:d9:db:24:6b:ee:47:d1:af:95:be:
d0:f8:e1:e9:b7:38:07:b7:f0:99:d6:5d:35:7a:97:03:d0:8d:
bf:06:a6:2f:2b:84:41:f1:16:ff:33:4e:9b:9c:f4:86:e3:c3:
77:33:21:00:18:11:2c:ef:14:5b:bb:79:8b:6c:0a:da:ce:1f:
ff:2f:47:a2:6f:b0:c9:d6:4b:27:c4:43:92:a5:79:63:e1:cb:
f8:6a:fb:33:05:34:08:2a:93:6d:07:79:8d:9b:5c:0c:62:f3:
ec:c3:32:25:14:12:f8:6c:6d:3b:2d:05:39:da:19:8c:b9:1c:
e9:cc:ab:26:5e:79:89:d9:1a:ef:1f:cc:0f:97:ee:eb:4e:84:
b9:43:3a:c2:c8:b2:ac:73:fe:d1:0c:8c:90:60:81:fb:2e:ef:
37:1f:73:d0:62:52:16:4c:05:38:d8:0e:57:56:ea:b5:ce:49:
79:03:b4:d4:e6:61:12:d8:41:d1:86:ed:52:35:15:d3:2b:fd:
7b:24:03:87:1c:32:5e:dc:24:fd:a7:bb:3a:d8:20:e5:7d:2b:
18:47:82:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1j789HXsrhTMpskjvg0z2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGE4NjFkN2MxNGI0Y2E1ZTZkMWM3ZDYwYWFlZWIzMmVh
OGVmNjEwHhcNMjUwNTA5MTUwMDE4WhcNMjUwNTEwMTUwMDE4WjAzMTEwLwYDVQQD
Eyg3MWZjMTNhZjM0OTM1ZDU2MGJjZjg5NmRjZDMxNzY3MTUxZTA4MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqk84P0VF5a+MKXoey7iL8ggpxIj
ph/2lYZwRc2Pu2HnEQBORZUoEh7X2PpyN0+a6BfbYCdKasSdnnh1yH+5nNfG7NYr
pX+afX+GkybT7kB6s1uXYA5gCWB+EKeeLE9ji0LFro2DW/6oS/Tunry/hTRbfxum
UW/jQuLfDSSc3HmmsK3k2r9kfd5/LTg5nYCrxPdUzhEEkTJeBVbp4rCw7Y68QstE
4VQVvNW1eVoEQ34DTb+j956e258kRc/aD6O6IRfs6Mu9y6wj0NTggzYAwAxaRhms
TrMs3ICjKus0JlnlyxnnNmGGUmIY8z16xtS8MgV+wcufoJfHo/0D6B69EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHH8E680k11WC8+Jbc0xdnFR4INvMB8GA1UdIwQY
MBaAFApKhh18FLTKXm0cfWCq7rMuqO9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2It
OTRkYmYzZmQwZTJkLzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2ItOTRkYmYzZmQwZTJk
LzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgP87ajlg
xLDbkREkEAhRAteqEcyhvllz8A216zd/UcFFylfwOqZcidNCb9zZ2yRr7kfRr5W+
0Pjh6bc4B7fwmdZdNXqXA9CNvwamLyuEQfEW/zNOm5z0huPDdzMhABgRLO8UW7t5
i2wK2s4f/y9Hom+wydZLJ8RDkqV5Y+HL+Gr7MwU0CCqTbQd5jZtcDGLz7MMyJRQS
+GxtOy0FOdoZjLkc6cyrJl55idka7x/MD5fu606EuUM6wsiyrHP+0QyMkGCB+y7v
Nx9z0GJSFkwFONgOV1bqtc5JeQO01OZhEthB0YbtUjUV0yv9eyQDhxwyXtwk/ae7
Otgg5X0rGEeCVg==
-----END CERTIFICATE-----
Generated at Fri May 9 16:38:15 2025 by rpki-client