Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: K9tbRrHpMBohZRsADgVJjIbrMNy6aBiuJwSyfSjOVJ4=
Subject key identifier: 04:D8:03:7D:53:22:0E:08:76:B5:70:95:F1:20:E0:F6:CF:08:73:0D
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 0196B9A3D5137CB7EC32C16367D4C8D3C037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 10:00:43 +0000
Manifest this update: Sat 10 May 2025 10:00:43 +0000
Manifest next update: Sun 11 May 2025 10:00:43 +0000
Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: eqnmHsCWZNrI1yJOC/Acq90QxnAFW6HkqUi9Lb6OQpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:d5:13:7c:b7:ec:32:c1:63:67:d4:c8:d3:c0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: May 10 10:00:43 2025 GMT
Not After : May 11 10:00:43 2025 GMT
Subject: CN=04d8037d53220e0876b57095f120e0f6cf08730d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:d2:9a:b5:7f:21:b0:d5:36:72:c0:2b:14:
07:94:ba:a2:91:15:61:55:02:15:8a:1b:fd:db:e5:
70:08:26:c5:a1:7f:8a:cd:dd:c2:70:a6:9d:4b:4d:
17:a2:1f:92:cb:5d:d4:ea:2b:9e:88:0a:d7:de:59:
bb:af:2a:67:39:e0:bd:90:d7:1d:98:71:b9:77:f5:
bc:dc:13:b5:a3:3b:08:10:64:2d:ce:79:c5:6a:eb:
38:0e:52:ef:43:9b:b0:ac:43:2c:13:0c:bb:5e:8d:
37:4b:49:83:47:fb:2a:9c:41:6d:ea:f7:5b:1b:7c:
a6:ec:6d:b7:7a:61:e3:c9:ed:dd:ff:56:7a:27:6a:
b1:f0:5c:c2:94:24:65:14:2b:0b:ed:a4:cf:a9:bd:
e3:9c:d5:98:fb:e6:cc:6b:a7:9e:d0:ec:3b:ca:16:
e1:d2:62:6f:2b:01:db:28:b1:34:af:ed:67:14:76:
48:a6:ed:e5:a5:36:0f:0b:cc:ba:6f:ea:bf:f8:20:
d7:fa:90:9b:b8:c6:92:80:8c:0f:94:de:e1:ec:b5:
3f:d4:30:bf:7e:ce:60:b6:ff:1b:14:37:8b:5b:ed:
63:86:24:36:59:0d:96:5f:33:7d:56:fb:bf:ea:62:
4c:1d:7a:36:aa:3e:19:db:dd:55:c7:45:7b:3a:ba:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D8:03:7D:53:22:0E:08:76:B5:70:95:F1:20:E0:F6:CF:08:73:0D
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:69:b5:34:0b:84:bb:d6:c3:7f:f4:e1:43:20:d5:5f:87:4e:
80:ab:63:78:5f:29:ee:79:58:40:8f:81:e5:e9:96:be:d9:b1:
a4:04:c4:37:5e:a2:ba:3b:f1:fb:54:9a:dc:ec:ff:7d:30:24:
85:24:22:28:a5:25:98:a3:fe:fa:f0:66:87:b1:91:38:c9:bc:
31:3e:03:9d:08:2c:dd:0a:f7:1e:1e:04:27:05:59:c0:92:0b:
8b:d8:5a:fd:48:86:e3:18:38:41:e8:1c:db:84:a2:f1:c8:b4:
c1:65:c6:f1:9e:e5:1f:f3:ee:c9:12:5e:ae:2b:08:3f:a7:1a:
74:c2:89:6e:5b:9c:f9:83:76:b4:58:cc:c6:0c:c5:3e:2e:63:
51:70:d1:47:72:00:96:ed:82:a6:46:3e:b8:59:f1:f7:e2:30:
50:77:11:8b:67:76:d9:f3:e0:8c:1c:ce:a5:10:b8:bd:70:c6:
98:da:e4:29:82:d4:c4:b0:70:f5:22:4d:76:f1:e9:36:df:2d:
67:ed:aa:27:cb:7f:fc:4c:fb:fc:3f:69:18:2d:2f:d5:df:af:
aa:6b:b3:aa:14:c7:4f:d2:9b:41:32:1c:be:1a:c2:1e:c3:74:
d2:4a:c8:7b:fc:70:af:b4:4e:d4:2c:69:d6:40:b2:1a:68:da:
26:0c:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:23:27 2025 by rpki-client