Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft (raw, json)
Hash identifier: nKqAXdWxH2Qg8GTRgILLjpTpRKdDJN+Qs3P1jvP8fY0=
Subject key identifier: 43:7D:81:60:BB:2E:33:17:69:66:D9:89:CB:AF:B8:C5:A8:68:FB:4E
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 0196D32C96A157F8B55ADB6603B89EDA6F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
Manifest number: 1541
Signing time: Thu 15 May 2025 09:00:36 +0000
Manifest this update: Thu 15 May 2025 09:00:36 +0000
Manifest next update: Fri 16 May 2025 09:00:36 +0000
Files and hashes: 1: CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl (hash: fDB4cNPfCJL7ZlfEOzOeHNAcsP9iGkAM/XVpeEYCdF0=)
2: O5QhbWQn7dWKFexdmAB0vuhHoFI.roa (hash: /pwNLph/P93dkfSWFLVF4Own/TwxuOW3vKc23GnS0Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:2c:96:a1:57:f8:b5:5a:db:66:03:b8:9e:da:6f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: May 15 09:00:36 2025 GMT
Not After : May 16 09:00:36 2025 GMT
Subject: CN=437d8160bb2e33176966d989cbafb8c5a868fb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:89:3c:6a:78:a6:65:7a:20:cf:51:3a:db:
3a:84:d4:a7:72:98:70:7b:88:f1:4e:28:10:a2:b3:
18:98:88:5f:de:8b:f1:e3:68:fd:9c:a3:7e:fb:1c:
91:04:1f:38:86:71:8f:21:bb:85:91:74:ed:5a:16:
a9:f8:b1:cf:dc:73:4b:bc:25:b0:dc:9c:db:90:23:
7a:fd:97:37:45:c3:ce:4b:27:ed:74:76:e0:69:62:
2b:ec:99:63:06:9d:32:bf:0c:ed:00:90:40:0f:8a:
f7:95:ab:81:3e:2d:7c:98:27:4e:24:5e:1a:0f:1d:
65:26:83:db:94:35:b1:cd:6e:e1:8f:b9:af:d5:89:
1e:ce:34:52:9c:b7:90:f7:21:2d:42:ab:ff:6a:e2:
03:93:a8:fb:65:2f:fd:f4:0e:b0:10:a4:c4:8f:98:
ac:96:82:2e:c8:39:8d:e7:1b:18:1d:96:ad:f8:46:
fc:16:12:c4:2e:50:f4:d6:88:e6:55:e1:f9:13:f6:
07:52:87:2c:07:83:cc:a6:3b:fb:a1:1c:a0:73:14:
91:f7:a9:f5:3c:27:3f:6d:f5:c2:aa:af:54:e1:ce:
08:fb:10:c2:ec:6d:91:0a:8a:64:0a:b2:25:5e:67:
6d:ee:b9:f4:11:30:6a:84:b1:3f:a5:ae:80:c7:b6:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7D:81:60:BB:2E:33:17:69:66:D9:89:CB:AF:B8:C5:A8:68:FB:4E
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c6:4a:8c:6d:11:5b:3e:b2:80:72:cd:74:fb:da:7a:cf:65:
50:cf:88:7f:1b:e5:6e:81:2f:7f:27:94:ba:74:45:32:6d:87:
7a:8f:10:8b:41:0d:04:f2:52:5e:a4:fa:f8:44:b8:92:3b:0a:
cc:1a:b0:85:ad:29:a9:60:2c:7e:ca:52:a1:45:35:20:0a:19:
a5:67:d3:16:97:50:8d:56:6b:a7:8f:b0:3b:a2:bc:82:10:03:
83:28:e6:57:48:f3:c0:b6:e1:27:95:1c:4e:bf:d9:66:d5:12:
6d:63:26:da:1b:3b:da:fb:be:94:2e:2b:61:70:12:51:e9:bd:
0e:e0:43:a3:30:29:56:1f:07:07:47:03:34:c7:0a:2c:1b:30:
55:d2:cf:77:79:08:1b:49:c4:17:c5:1c:8a:25:9a:c8:a8:7d:
76:a6:92:d3:63:ae:b1:27:37:c4:70:12:8d:b2:c9:ce:24:07:
54:85:c3:6f:10:0b:58:94:25:bc:6e:40:56:c5:c6:f0:f3:c3:
ab:24:34:2b:e7:28:d2:9a:1c:e5:d9:47:2c:05:1c:b7:8b:d1:
dd:85:0f:06:59:23:21:82:7c:3c:9c:c4:46:f2:6c:9f:fc:51:
d5:78:cc:2b:eb:18:c4:8d:89:fd:70:42:89:92:c6:a3:10:3c:
b0:b0:03:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbTLJahV/i1WttmA7ie2m9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDFhOTI1ZjhkNjY4NGM4NjEwN2QyNzU2YjRhYTkzODgx
ZjAyYWUwHhcNMjUwNTE1MDkwMDM2WhcNMjUwNTE2MDkwMDM2WjAzMTEwLwYDVQQD
Eyg0MzdkODE2MGJiMmUzMzE3Njk2NmQ5ODljYmFmYjhjNWE4NjhmYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw2JPGp4pmV6IM9ROts6hNSncphw
e4jxTigQorMYmIhf3ovx42j9nKN++xyRBB84hnGPIbuFkXTtWhap+LHP3HNLvCWw
3JzbkCN6/Zc3RcPOSyftdHbgaWIr7JljBp0yvwztAJBAD4r3lauBPi18mCdOJF4a
Dx1lJoPblDWxzW7hj7mv1YkezjRSnLeQ9yEtQqv/auIDk6j7ZS/99A6wEKTEj5is
loIuyDmN5xsYHZat+Eb8FhLELlD01ojmVeH5E/YHUocsB4PMpjv7oRygcxSR96n1
PCc/bfXCqq9U4c4I+xDC7G2RCopkCrIlXmdt7rn0ETBqhLE/pa6Ax7b6BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN9gWC7LjMXaWbZicuvuMWoaPtOMB8GA1UdIwQY
MBaAFApBqSX41mhMhhB9J1a0qpOIHwKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tHcEpmaldhRXlHRUgwblZyU3FrNGdmQXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMzdkMWQtZDRmYi00OTZjLWFmNDkt
MzQyMDY4NGM3ZTQxLzEvQ2tHcEpmaldhRXlHRUgwblZyU3FrNGdmQXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lMzdkMWQtZDRmYi00OTZjLWFmNDktMzQyMDY4NGM3ZTQx
LzEvQ2tHcEpmaldhRXlHRUgwblZyU3FrNGdmQXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcZKjG0R
Wz6ygHLNdPvaes9lUM+IfxvlboEvfyeUunRFMm2Heo8Qi0ENBPJSXqT6+ES4kjsK
zBqwha0pqWAsfspSoUU1IAoZpWfTFpdQjVZrp4+wO6K8ghADgyjmV0jzwLbhJ5Uc
Tr/ZZtUSbWMm2hs72vu+lC4rYXASUem9DuBDozApVh8HB0cDNMcKLBswVdLPd3kI
G0nEF8UciiWayKh9dqaS02OusSc3xHASjbLJziQHVIXDbxALWJQlvG5AVsXG8PPD
qyQ0K+co0poc5dlHLAUct4vR3YUPBlkjIYJ8PJzERvJsn/xR1XjMK+sYxI2J/XBC
iZLGoxA8sLADbg==
-----END CERTIFICATE-----
Generated at Thu May 15 17:26:55 2025 by rpki-client