Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: /2d7puKLCP6NbPMWeF9KPSmEkkWB2MqfBm70mciQ5OE=
Subject key identifier: 82:3E:1A:53:22:6C:BC:2D:B5:C4:9B:AE:31:02:4A:8A:CB:BE:08:0E
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 0196A50A109CBEAC0410D1C66C08071997FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 04CD
Signing time: Tue 06 May 2025 10:00:22 +0000
Manifest this update: Tue 06 May 2025 10:00:22 +0000
Manifest next update: Wed 07 May 2025 10:00:22 +0000
Files and hashes: 1: V-Zw-R39fa3vjmQTK3pi-ruJAOM.roa (hash: svw00iQ8XqkVPen4oB7uX29LsRKx9ZNkxy68U1tQQ8A=)
2: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: vaO2O/jeTN2xt58tuIEz+ehfZ4iWv3GMBlEKv0CFp40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:10:9c:be:ac:04:10:d1:c6:6c:08:07:19:97:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: May 6 10:00:22 2025 GMT
Not After : May 7 10:00:22 2025 GMT
Subject: CN=823e1a53226cbc2db5c49bae31024a8acbbe080e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:7f:8d:d6:54:f9:f9:e9:b2:19:ab:74:73:
46:05:00:bc:10:65:ea:8d:04:d0:18:e6:30:03:a1:
64:c6:6a:a2:4c:2d:df:36:5b:56:21:18:fd:7a:c2:
5a:ee:64:c2:51:41:75:6b:31:ae:d3:62:48:9f:6a:
62:df:25:74:57:4e:71:3d:61:9d:f1:dc:12:01:a8:
b6:6e:1a:e1:9d:4d:6e:82:95:39:19:ff:ca:16:dc:
0f:e0:11:4b:cf:9b:9f:53:aa:99:6d:ca:8b:e3:91:
b7:f9:f3:84:b6:9a:8d:d3:65:fb:c5:dc:e4:97:a0:
08:89:cc:d6:1b:f7:c3:d5:90:89:b1:c1:bf:6b:09:
cb:61:b4:4b:8b:74:b7:34:0f:68:08:7a:1b:85:68:
16:c1:1d:bf:1a:16:ee:55:5c:22:cd:50:0b:7a:29:
6b:14:67:ea:1b:59:0b:de:db:65:2e:5a:c2:3b:3b:
0d:8b:18:2f:16:72:84:d1:f8:1e:3f:ac:33:26:f6:
78:be:7a:0c:53:b3:4f:d6:74:6e:b8:f7:ec:f7:b0:
a8:d8:5e:7f:8c:a3:ca:41:43:1b:26:76:31:41:a4:
0a:54:eb:74:28:5f:4a:d4:8b:26:bf:af:01:b9:eb:
f4:47:6f:88:7b:36:61:f7:2c:2a:71:15:97:aa:34:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3E:1A:53:22:6C:BC:2D:B5:C4:9B:AE:31:02:4A:8A:CB:BE:08:0E
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:27:5b:38:a4:4c:a1:7f:ac:8d:e5:a3:62:2e:3e:b8:c0:f8:
8a:6d:73:82:25:8c:0b:30:63:f2:91:91:d0:66:99:90:b7:86:
a8:42:e5:bb:35:d1:53:15:95:be:de:ae:3d:5d:4d:7d:53:42:
82:a8:10:31:66:7b:39:83:d5:20:3c:04:f7:7a:7f:96:a1:2f:
7a:e7:5e:fa:ad:e9:e3:22:3a:dc:6c:e9:2d:4f:f6:eb:79:0f:
f5:31:fb:d5:df:78:79:d6:f5:c8:4e:6b:5f:64:6f:0c:ab:80:
da:88:a6:2d:da:68:90:ac:f9:88:8b:a2:04:f7:74:7f:bf:f3:
63:20:f1:43:95:85:cf:47:15:9c:d0:16:b9:3b:b1:2e:7f:a7:
51:a7:ab:4c:74:57:45:a8:08:85:30:da:fd:37:e2:1d:8d:0b:
04:1f:b9:73:d1:36:2f:fb:04:06:f2:8b:13:f4:ca:bd:40:d1:
4b:27:c0:9f:c5:7e:2f:58:26:62:a2:21:5f:d7:10:6c:da:79:
9b:7c:cc:91:75:6d:16:ea:da:9b:71:88:70:57:7b:75:3a:d2:
4c:43:19:d5:58:d8:df:ab:71:25:7d:a2:95:b7:3d:ee:60:40:
53:10:4e:8e:25:e5:47:da:f9:9c:42:95:26:10:91:f0:42:a2:
eb:8c:0a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:08:57 2025 by rpki-client