Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
File: ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json)
Hash identifier: O0SLI32Xn1dUSOYZB/L4GKSos8snpAjaYoRADwRPbaA=
Subject key identifier: 86:BE:75:26:4A:95:DD:56:DA:06:0D:24:08:C4:19:60:51:E7:C8:E8
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Certificate issuer: /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial: 0197B6D74F0D0AB650EC42C970085ED40E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
Manifest number: 0819
Signing time: Sat 28 Jun 2025 14:00:53 +0000
Manifest this update: Sat 28 Jun 2025 14:00:53 +0000
Manifest next update: Sun 29 Jun 2025 14:00:53 +0000
Files and hashes: 1: XeS-j2IYyupPYwAd3k1rQhL0Pjk.roa (hash: LaZnavonJdxkwg+OL44y91TnIY6G41jXIPEjOAmHc4s=)
2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: aOIGwOD6Q+svy0YK/Muxl4rX2GTN3zKCmHU6naCUMbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4f:0d:0a:b6:50:ec:42:c9:70:08:5e:d4:0e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Validity
Not Before: Jun 28 14:00:53 2025 GMT
Not After : Jun 29 14:00:53 2025 GMT
Subject: CN=86be75264a95dd56da060d2408c4196051e7c8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ee:53:8c:56:a3:0d:3f:c4:cb:6b:7c:dc:84:
9c:fb:8f:40:45:fc:f9:66:9a:3c:ea:07:58:42:61:
da:d4:6b:03:3d:6f:6b:57:83:23:a9:4f:b1:e3:64:
85:46:ed:73:de:b3:7f:69:ea:76:94:18:4d:dc:c9:
79:cd:bc:d2:c1:b5:de:dd:c7:e3:74:85:c1:b5:9c:
42:49:92:bd:c4:65:5e:4a:c8:d2:06:2d:22:ad:b6:
d3:34:2d:22:86:e6:47:26:d6:3c:80:86:4f:ec:02:
01:20:b1:c1:47:d8:57:d9:4e:56:3c:dd:60:6d:7b:
db:4a:33:d1:9f:9f:44:2e:2f:fd:8a:a3:2e:72:c2:
27:02:6e:d4:73:e0:89:0a:35:9e:e8:43:fb:49:1d:
56:56:e2:1e:71:60:d7:ff:da:b5:e9:03:d0:a8:34:
38:b4:01:2b:79:37:27:b8:79:99:9a:a0:ad:89:e9:
80:99:fa:30:54:86:94:b9:30:83:5b:c1:28:cf:5a:
34:65:3b:1e:6b:6e:fd:03:8c:4c:a5:3b:f2:52:5a:
35:7c:e1:f0:10:95:85:1e:d8:13:c0:9e:af:58:67:
ac:7c:36:27:a7:25:d8:71:1d:7d:41:6c:4d:6b:c8:
21:60:96:f3:11:1e:3b:cf:bd:5f:2a:f8:c9:ac:74:
76:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BE:75:26:4A:95:DD:56:DA:06:0D:24:08:C4:19:60:51:E7:C8:E8
X509v3 Authority Key Identifier:
keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e8:4b:1c:77:10:d0:7f:87:35:3c:6e:6c:63:8c:91:e2:9a:
11:4a:2e:ee:04:35:b5:44:c2:ee:91:15:dc:7f:ee:dc:2d:18:
8a:e7:58:8a:5a:8a:08:ef:b6:2f:40:e9:bc:9b:e4:42:ef:28:
74:f4:11:e0:12:f8:b5:20:08:35:f2:d9:97:78:1c:64:11:98:
e3:ef:d7:0b:00:ba:4a:5c:f8:a8:2e:f3:3b:b4:da:9d:ff:05:
f4:e5:69:af:ce:e7:ba:6f:ba:6c:3e:2c:43:a4:a8:6c:46:31:
70:74:97:90:d5:df:6c:95:de:c9:1c:f4:92:8f:03:b0:8e:8f:
02:f3:57:1b:f4:f0:ff:cf:eb:c2:e6:ab:1c:9c:12:97:fd:03:
1e:ae:44:0f:79:a8:5f:7b:a8:70:fd:0f:b3:07:db:13:40:36:
08:85:d4:b1:fe:ae:25:35:ad:84:c0:1c:e7:95:e5:90:9c:6a:
61:4c:1a:e6:7a:3a:e4:c6:7d:53:24:70:b7:de:15:7a:65:91:
e4:fa:86:ca:a1:d9:51:8d:a9:7b:fa:56:5d:14:c7:22:ea:57:
79:fe:61:99:93:2b:40:83:b6:47:e7:60:79:e9:2d:82:27:ab:
49:c3:72:05:d6:b6:27:ee:7f:59:12:86:06:d8:b5:58:e7:bc:
6e:64:01:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:27 2025 by rpki-client