Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: FWlhY43JgLjwdMX+HyEgfT6mZRVGQ9hVTwtqWW/G6q4=
Subject key identifier: 02:AC:C5:35:14:19:D9:E1:03:A1:F6:29:42:BD:90:AE:ED:99:57:EC
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 0197B6A0B96CD8CA1C7A7BFE4063164FB3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:01:15 +0000
Manifest this update: Sat 28 Jun 2025 13:01:15 +0000
Manifest next update: Sun 29 Jun 2025 13:01:15 +0000
Files and hashes: 1: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: gbYduBtjEo1LjZmojCaXOBq9BuW6MkluwWG9UXNmWEg=)
2: NYpGsgvZZnS43WLsZ6IiOuK1URk.roa (hash: 1DbDkDpg7L2mWH/maxc8wFOk6zRLCwxEnE3jGY7E3oU=)
3: hER6wRwe_hUZJ0u9RImVrBTy1as.roa (hash: iyJ20Ahzbr3qZY7vMtDGjDttWYIPJenArxH2H2QEoYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b9:6c:d8:ca:1c:7a:7b:fe:40:63:16:4f:b3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Jun 28 13:01:15 2025 GMT
Not After : Jun 29 13:01:15 2025 GMT
Subject: CN=02acc5351419d9e103a1f62942bd90aeed9957ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c6:e1:26:95:8d:c6:d4:3f:46:06:3c:87:8f:
a4:7c:1b:d8:cd:f0:e5:6c:a7:c2:2b:4d:2a:6f:1a:
ad:2f:aa:6f:58:6f:89:a6:d4:e0:81:d9:55:2f:1c:
d5:f2:ce:2e:80:3b:b2:ff:ef:00:9e:cd:bd:81:7b:
b0:02:54:0f:43:77:b4:91:0e:4e:22:d5:3a:7d:28:
2c:1b:3b:43:dd:36:b0:1b:b0:47:15:b0:16:32:e4:
72:4d:d1:e0:c3:75:45:4c:ca:aa:3e:fe:30:b0:47:
f8:b0:36:6b:0e:ba:df:04:7e:f0:6c:36:87:6e:e9:
91:1d:85:01:ee:ee:d5:22:55:cc:e1:c8:ab:50:8d:
3a:2b:db:1e:c7:c9:d8:c7:07:69:19:1b:e1:9d:e4:
7d:dd:87:44:7f:58:33:60:95:97:5d:c8:8e:8d:f4:
56:ca:78:e8:39:52:70:37:9f:b4:fc:06:6a:10:1f:
5d:15:8a:da:33:1c:dc:4c:ba:98:e1:f3:1e:8c:65:
3b:4c:7c:c1:97:ad:85:f1:27:50:b2:78:3d:36:2e:
52:2c:bf:3c:7d:57:f4:a5:ab:48:6b:7b:6d:12:2e:
97:9f:10:f5:4c:06:a9:98:c7:e6:7c:f8:a5:e7:1e:
10:63:82:bc:07:e4:42:62:f8:e7:73:6d:55:be:4c:
f7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AC:C5:35:14:19:D9:E1:03:A1:F6:29:42:BD:90:AE:ED:99:57:EC
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:79:8a:bd:2f:31:16:bc:0d:41:11:2f:48:69:2b:15:d5:2f:
30:ce:a4:ca:77:50:4d:5f:81:96:3f:31:3a:86:cf:a4:cb:5b:
ea:75:92:e8:c3:f1:7d:61:11:0b:08:96:db:92:80:4e:17:87:
7f:ec:0c:e0:7b:20:25:df:0c:97:d4:a9:da:1d:05:ea:23:d2:
9e:c8:45:30:45:73:ba:9b:61:f4:4a:58:9a:58:08:11:d4:c7:
14:7b:f3:2a:91:35:24:a4:18:41:19:ca:63:6e:22:12:9b:82:
f6:18:ad:3b:7b:87:43:4e:8e:6b:6c:fa:fe:82:22:16:60:d7:
80:6a:28:9b:a2:ea:60:da:94:7a:a1:c0:5d:f2:eb:03:53:65:
1a:41:4d:d5:34:1e:37:34:68:f9:15:5a:33:49:68:0d:cc:b9:
20:30:cc:eb:ad:ce:88:2c:f0:b4:c1:82:b3:91:a3:a9:06:f4:
62:89:b5:6d:77:92:54:6d:1f:38:7a:62:51:0f:b1:c4:3e:a4:
12:70:f3:d1:09:e4:ad:27:e8:17:5f:43:7f:ba:e1:61:a7:73:
9d:d4:18:23:91:51:7f:b8:7a:35:07:96:fa:19:fb:9a:e2:8c:
b2:2f:26:2f:4b:00:0c:32:c1:10:b9:3a:d0:91:37:6e:a4:2f:
57:09:fc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:45:55 2025 by rpki-client