Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: 1532TCeLzj4zSZ70tD3tsIsDVSi5xjnCplf1pWH8vRc=
Subject key identifier: 7D:BB:67:22:86:FD:0C:93:D5:87:86:7D:E1:0D:54:3B:75:BA:AB:02
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 0197DD772A17B3C139CB29E40EF07248B602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 02AD
Signing time: Sun 06 Jul 2025 02:01:03 +0000
Manifest this update: Sun 06 Jul 2025 02:01:03 +0000
Manifest next update: Mon 07 Jul 2025 02:01:03 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: /kgdFuPH2yVmJV1X2ZU3SSXC9AR4i4WZ2BmgMAfWOYo=)
2: kMy_Ytqu-62SnckodYKnIddoAV4.roa (hash: DNh5a1DbxWEI9P2LYvBxRTY+TTerG2Ce0TBwgUaWhng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:dd:77:2a:17:b3:c1:39:cb:29:e4:0e:f0:72:48:b6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Jul 6 02:01:03 2025 GMT
Not After : Jul 7 02:01:03 2025 GMT
Subject: CN=7dbb672286fd0c93d587867de10d543b75baab02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:24:49:25:70:eb:02:e5:f1:e1:7d:25:b7:
56:85:c4:37:9a:8d:99:6e:58:91:88:69:c1:fb:ef:
73:ca:1f:38:35:51:1c:06:02:a9:98:89:4e:c7:6f:
d5:d6:96:ff:c6:53:bf:e2:f5:60:72:ff:f6:6b:e3:
c9:88:b5:b9:7f:21:77:1c:c0:c0:6b:db:3a:48:e9:
0e:2a:d2:43:78:9d:d2:f3:17:b1:ac:52:cc:57:4d:
e2:12:5d:6a:9a:29:4f:d8:ce:27:bf:08:93:cd:27:
06:2e:c4:80:e8:69:1b:26:41:d6:11:b4:d8:15:21:
a4:53:17:69:81:e2:43:27:1a:b8:21:34:e5:ee:7d:
09:05:83:ee:84:5f:f4:23:c0:aa:e8:77:68:51:e5:
04:05:3c:11:c7:ed:bb:3b:ec:f4:75:17:9a:11:84:
41:fc:57:45:51:40:ca:e9:17:10:75:c4:ba:8c:b0:
9b:0d:2f:54:70:8e:72:58:f4:4c:e3:13:af:e7:ee:
77:66:df:8a:ac:93:9a:a0:64:cf:e3:e3:74:06:bd:
24:2a:57:5f:52:30:77:3e:b1:a6:24:7c:e0:2a:7e:
c3:13:be:19:0a:c3:51:af:3e:15:33:ae:44:72:a0:
36:63:08:94:59:40:7d:f6:83:09:f5:9f:fd:0b:fe:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BB:67:22:86:FD:0C:93:D5:87:86:7D:E1:0D:54:3B:75:BA:AB:02
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a5:14:a9:bc:0b:fa:e2:7d:91:87:05:46:47:3c:a1:cc:22:
2d:98:f8:49:7f:8c:29:fc:e5:53:ff:b5:3b:92:a7:22:b6:3e:
1d:d2:2b:e7:ea:db:ed:6b:e2:91:0b:a9:a7:b7:e5:5a:8b:c9:
ea:53:e3:93:98:d6:ec:54:7b:ba:7d:62:5f:11:be:49:aa:ba:
de:4b:64:1f:c6:57:f2:a5:fe:88:5a:9b:86:69:0c:3d:61:c6:
56:36:3b:05:ef:7f:09:1d:bf:da:6a:84:87:20:57:93:60:45:
e3:83:a5:f8:15:02:f0:e6:a1:91:fc:b1:bf:af:99:f8:10:ca:
29:70:6a:5d:d6:d2:52:9d:3d:34:29:70:15:1a:a4:1b:18:76:
c0:d2:32:58:b3:e6:b0:2c:e9:4f:c5:4b:63:f9:86:de:aa:27:
21:9d:a9:7e:0e:f4:11:a6:97:3a:3b:73:fe:7c:44:7f:97:34:
65:1f:19:ba:f8:99:a4:21:cb:d7:9a:e5:7b:67:00:94:48:a1:
1f:53:8f:0a:a9:7a:91:5b:65:33:9c:36:95:ab:50:8d:02:f1:
db:cd:43:44:1b:cf:88:95:b5:72:d4:bd:fe:fd:c0:ab:55:76:
31:2b:b7:63:e3:2b:65:13:de:f6:f4:8f:e2:f2:56:ed:99:10:
5d:24:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 10:32:00 2025 by rpki-client