Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: bE15k2UrgIkL85jaeev4zzDDicudsWVKzcfgW+242h4=
Subject key identifier: F1:F8:FE:75:FB:40:76:78:C9:E1:2B:26:94:3A:72:8F:CC:39:53:8C
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 0197B745AEF9D34D4E159BDFFBF9A1DD7741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 055B
Signing time: Sat 28 Jun 2025 16:01:26 +0000
Manifest this update: Sat 28 Jun 2025 16:01:26 +0000
Manifest next update: Sun 29 Jun 2025 16:01:26 +0000
Files and hashes: 1: V-Zw-R39fa3vjmQTK3pi-ruJAOM.roa (hash: svw00iQ8XqkVPen4oB7uX29LsRKx9ZNkxy68U1tQQ8A=)
2: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: Zashxp8PkHch9sBch9DkiUNsvKSr5hz/pHJqK0PKvuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ae:f9:d3:4d:4e:15:9b:df:fb:f9:a1:dd:77:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Jun 28 16:01:26 2025 GMT
Not After : Jun 29 16:01:26 2025 GMT
Subject: CN=f1f8fe75fb407678c9e12b26943a728fcc39538c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:ee:82:6c:5d:a0:d6:d3:cd:08:8c:f2:6e:
44:fa:f3:5b:f2:37:ae:80:99:72:6b:56:6a:ae:6b:
2a:1c:18:a6:41:96:0e:59:56:07:e7:3e:24:f3:0e:
1a:af:30:c6:bc:cd:22:16:14:e1:20:c0:b0:66:06:
e5:3a:c2:e7:ab:b2:c0:34:4d:b8:60:04:a6:4a:08:
57:19:0c:31:a8:49:6e:31:eb:89:66:96:84:1f:d5:
33:b4:89:12:23:46:7a:fb:d5:2a:39:0b:d2:e4:a0:
62:77:a8:3f:7e:55:50:0a:9b:3f:85:ab:a6:7b:e2:
02:5e:81:43:f6:7f:0b:51:ea:3e:d3:09:95:07:d8:
35:08:02:ea:0e:2f:ce:7d:0e:fc:4b:69:c1:4d:21:
93:62:37:2f:58:28:3e:e5:95:63:70:b8:58:a2:81:
16:9d:77:6f:69:85:ff:12:1e:12:a4:d9:5e:3e:79:
3a:75:cd:8f:91:65:55:5b:85:78:5d:91:0b:3f:7c:
76:a4:c3:eb:15:99:f1:a9:c2:a8:43:14:54:60:27:
95:b7:16:f9:23:cc:ee:76:ef:14:03:79:df:b5:2a:
1c:d2:e2:69:6b:52:66:66:dd:8f:a5:7d:06:f7:8c:
c8:4d:56:01:10:e8:2f:d5:08:b8:6f:34:86:9b:c5:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:FE:75:FB:40:76:78:C9:E1:2B:26:94:3A:72:8F:CC:39:53:8C
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0a:94:75:33:74:23:2e:9b:ef:5e:89:d0:66:0c:5a:93:ba:
76:c8:53:b6:de:b9:7c:2e:f3:9c:86:be:d2:c6:dd:8d:e9:c7:
5d:28:32:70:76:f6:fe:d3:df:f4:8e:d8:97:25:27:04:e7:02:
b9:96:e9:e3:a8:ac:02:2b:98:be:54:6b:f5:2d:64:5e:e9:17:
b4:bf:ef:f7:33:2b:e6:91:5f:cb:70:71:6e:c7:3d:5b:46:28:
6c:7f:e0:99:b3:a5:cf:37:4a:e6:7b:f5:ff:79:86:83:2d:85:
df:28:96:21:f0:0f:9f:90:62:0c:43:02:8d:1d:b5:03:ae:68:
8b:e4:a4:b7:7a:fa:26:00:2d:29:37:23:ba:7b:eb:58:37:be:
a5:3e:71:2b:1a:72:54:10:11:9e:12:25:d1:bc:e9:9d:7c:af:
82:de:76:9d:fd:e7:67:97:fd:31:5f:b6:ec:83:06:da:e9:bd:
92:a7:45:05:27:54:f9:dc:87:02:27:53:47:a9:c1:35:02:90:
5a:83:e4:b9:31:85:0a:5a:23:2a:ac:ad:45:66:b4:5c:ac:97:
20:a1:c9:39:f6:df:7a:26:fc:f8:2c:7d:6b:31:d6:b9:d2:3c:
45:3b:b7:01:a0:d5:ea:e5:8e:76:b6:f0:19:e9:55:2b:dc:84:
da:43:38:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:19 2025 by rpki-client