Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: Ah+GP6m960Ml5nm2HjGlaIoEJiPB1TMIhh0Lzeu2Cxg=
Subject key identifier: 1A:9B:F1:62:36:3C:77:0C:DA:8F:CB:05:5C:7E:1B:C8:18:A7:61:AF
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 0197B6A06F0A91A66E98420E793A74C88055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: dfOlf/IRDXZg4g4A4mo8/i8nTVL4DQbt72UNKvI5jH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6f:0a:91:a6:6e:98:42:0e:79:3a:74:c8:80:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=1a9bf162363c770cda8fcb055c7e1bc818a761af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b8:ed:ce:7c:eb:76:a0:cc:5f:a0:c3:2c:39:
ba:6f:54:7a:93:8c:f5:3e:c5:e3:23:20:56:32:80:
fc:9c:39:f3:f9:4b:f6:ad:ed:03:be:bf:c9:e7:47:
be:7b:43:fc:fd:42:5f:da:ee:af:60:84:5b:bd:1b:
d8:38:ef:9f:b1:c8:8b:5e:60:16:aa:b2:b5:33:d7:
2b:a3:ce:aa:91:7b:7e:34:dd:40:53:22:9e:1a:7f:
04:a5:10:fe:4f:2a:50:85:84:e3:df:a7:80:c0:97:
d5:fb:02:20:99:6a:1c:67:69:7b:5d:0a:39:9f:cf:
76:0f:e4:36:e2:d3:e2:e5:aa:3e:56:c5:8f:f9:ad:
4b:82:ef:0d:26:5a:34:57:d7:60:62:af:e4:e8:c7:
61:89:e4:97:e0:d5:90:df:09:cc:60:10:52:a1:32:
d5:59:ba:33:64:54:1e:11:15:d9:25:5d:e6:1b:82:
22:bd:b8:08:e5:bc:af:3b:d7:a1:e7:6b:28:c7:c4:
30:ce:9a:b2:11:e6:c9:ca:2f:9f:ad:88:89:71:de:
71:52:4f:c6:59:d2:eb:3e:de:33:6a:4b:06:99:dd:
3e:82:8a:29:7b:a8:e9:b1:14:db:92:87:18:c0:e2:
ad:76:01:86:59:3b:09:f7:e5:d1:c8:cf:ad:c5:1b:
60:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9B:F1:62:36:3C:77:0C:DA:8F:CB:05:5C:7E:1B:C8:18:A7:61:AF
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cb:6e:a4:55:49:91:48:19:d0:21:ca:80:bf:31:72:4f:b1:
c8:20:42:5b:0d:5c:fe:41:11:77:5d:65:1b:1a:bd:27:79:c8:
02:14:76:e0:fa:cc:7b:85:5d:ac:37:80:e1:16:f8:ef:b2:62:
ad:51:a6:78:0a:6b:cf:e8:be:40:f9:8f:0e:b2:b4:5b:21:36:
38:06:34:1e:0f:e4:72:ed:5b:94:08:e8:57:5c:04:2a:cd:18:
a6:a0:03:7d:e8:18:dc:28:8f:de:c1:63:52:a2:e3:15:b7:d9:
f1:8e:50:a1:e5:77:12:2d:79:f1:bd:ef:5e:0c:98:10:b3:2f:
8d:06:1d:85:4d:c8:da:83:f8:e5:68:6e:d7:f6:f2:21:91:ce:
9f:3b:a6:a5:bf:ad:76:00:d1:70:d5:26:27:33:8e:ce:4d:f6:
49:46:5d:ed:18:82:75:ff:c6:fb:77:90:e9:74:a1:29:d9:6b:
64:56:2d:bf:c2:08:3e:e4:09:79:7a:3e:b8:a3:fb:c6:50:6b:
cd:0f:ed:72:3f:79:be:10:a1:c2:fe:18:e1:f4:d4:b5:7c:ba:
16:6a:05:85:6a:b7:9f:31:f1:95:65:42:74:53:61:2f:79:e0:
26:ea:fa:93:33:5d:91:0c:f6:25:ef:cd:37:2c:d6:af:05:96:
75:ea:13:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:35:59 2025 by rpki-client