Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: UZDwABvjMLwPUUFoXi79amRXN9I5/DnPjM5FXrI+Lc4=
Subject key identifier: 16:40:22:26:F2:87:86:20:94:02:96:A5:B4:7F:48:A5:42:02:08:99
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 0197D43D7476DC52879FBF8469CF3A8BD203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 15C5
Signing time: Fri 04 Jul 2025 07:01:26 +0000
Manifest this update: Fri 04 Jul 2025 07:01:26 +0000
Manifest next update: Sat 05 Jul 2025 07:01:26 +0000
Files and hashes: 1: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: FjlKwVuynysibDOrvGtWW54YtCmyxmSVALTiASyDlcw=)
2: tICvfkE-wd7ljGY6sghDtS75C50.roa (hash: EofEa7cxTHv8xJhHBChQPwYV0i7JZnqjIowIrpKVJDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:3d:74:76:dc:52:87:9f:bf:84:69:cf:3a:8b:d2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Jul 4 07:01:26 2025 GMT
Not After : Jul 5 07:01:26 2025 GMT
Subject: CN=16402226f2878620940296a5b47f48a542020899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:78:93:2a:c7:f5:2e:c7:8e:38:43:18:b6:
cb:87:81:d7:c6:df:cc:ae:92:25:60:6f:73:24:e2:
f4:b9:65:de:55:09:d9:3b:9f:56:98:7b:36:e2:43:
26:93:ad:79:4f:8d:a6:8a:a4:46:ad:c2:1a:32:8c:
01:50:c8:b5:fd:0d:fd:6f:5b:02:19:c8:2b:5c:89:
11:5d:15:ef:db:4e:f0:78:be:f0:47:b7:08:0f:be:
e6:73:3f:e5:e6:8b:6c:53:08:63:5f:52:8b:a1:bf:
4f:75:41:0e:84:29:fe:55:8e:a7:02:42:38:41:f3:
ad:6e:c1:8f:de:5b:39:6d:6c:7f:48:96:87:a5:20:
b8:8c:ab:ba:9e:82:c6:76:d0:40:e8:41:a7:f9:f1:
6c:3a:a2:77:da:4d:ea:42:40:8e:04:a8:43:ec:c7:
2c:ee:99:d0:27:df:b2:73:eb:d9:f0:97:af:50:90:
65:d1:8f:ea:af:b6:e8:5e:14:b4:89:15:99:21:29:
ae:9f:9c:36:73:06:50:e1:14:df:cf:f1:f3:b1:80:
10:45:61:0f:ef:37:c2:0f:0e:e5:7b:5a:da:6c:ab:
38:94:94:c4:6e:b6:b9:81:81:48:da:d1:96:4e:dc:
7d:f1:4e:e2:2d:62:e7:3b:e8:ac:0a:51:68:06:a1:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:40:22:26:F2:87:86:20:94:02:96:A5:B4:7F:48:A5:42:02:08:99
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a0:e0:11:31:a2:96:68:ad:5b:a5:38:d1:57:31:28:82:2c:
61:bd:5b:c6:b2:8e:6e:90:ec:ae:af:a4:6b:43:00:e3:8e:78:
3b:62:bc:04:ce:88:f3:8f:bd:d2:79:e9:fe:ea:b3:1f:bc:1e:
82:43:6f:e7:43:7a:15:ff:d2:00:e9:b4:73:5e:94:32:fd:1d:
d0:6d:01:4b:6b:0c:8a:3f:cc:74:a8:05:74:79:80:21:87:48:
38:15:01:d0:1c:55:06:87:e4:88:16:0f:00:58:6a:58:22:65:
79:ca:da:5a:fa:47:f3:c5:d6:c1:b7:52:28:1e:ec:2c:a3:c4:
03:4f:eb:33:53:eb:ec:52:b3:ba:f2:05:c7:e8:77:54:0f:32:
81:80:1e:9e:f8:13:d4:85:4d:9d:46:c1:b4:4d:5c:58:df:3d:
fc:ee:87:c9:e6:80:1d:01:e5:78:cc:e8:21:9a:79:4c:40:91:
56:14:96:32:4e:7a:47:42:e3:b3:b1:df:47:07:da:cc:8c:f2:
3c:59:38:7d:42:e5:20:4e:2b:97:6f:5d:4e:e7:25:05:52:86:
21:a7:dd:16:a0:e9:47:8a:5d:e3:35:34:82:9c:33:86:b6:a4:
f4:41:63:46:60:ff:fd:e2:60:9c:8b:71:60:ac:27:ed:6f:6b:
b2:63:c3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:15:20 2025 by rpki-client