Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: BxqRrr8MxCdY58GiKAWAa6lRrSSLJR7JoxUWzvgUKpM=
Subject key identifier: EA:38:80:31:93:EF:50:49:4D:06:34:A1:D6:85:37:6F:76:3E:42:2C
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 0196D8C09CB77299C3F0F615DADE3AEAAB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 0226
Signing time: Fri 16 May 2025 11:00:23 +0000
Manifest this update: Fri 16 May 2025 11:00:23 +0000
Manifest next update: Sat 17 May 2025 11:00:23 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: ivkNEF6wKEKSbtgRCOJcYegSOJjsofL1qE5XUedW12s=)
2: kMy_Ytqu-62SnckodYKnIddoAV4.roa (hash: DNh5a1DbxWEI9P2LYvBxRTY+TTerG2Ce0TBwgUaWhng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:c0:9c:b7:72:99:c3:f0:f6:15:da:de:3a:ea:ab:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: May 16 11:00:23 2025 GMT
Not After : May 17 11:00:23 2025 GMT
Subject: CN=ea38803193ef50494d0634a1d685376f763e422c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:d3:78:ce:da:f2:ab:f8:b8:9e:c3:69:64:
f8:e5:22:a2:c3:25:7d:e7:8f:99:b5:6f:e3:a6:49:
9f:be:c5:a5:fb:b0:99:e0:11:9e:30:b4:df:fc:db:
8a:14:dc:9a:f8:84:46:2e:cd:f6:27:bc:86:ed:8c:
9e:70:c7:46:5b:c9:1d:a3:27:65:b6:60:cc:4a:6f:
56:89:1e:60:e8:91:ca:98:a4:56:17:7a:5b:ee:6b:
56:21:e9:4f:53:ef:42:ec:fe:1d:15:37:9f:63:8e:
8d:44:9f:73:b3:02:0e:f4:fc:fc:8b:0a:36:94:41:
8e:d1:c6:2b:0c:c5:32:9c:1a:4d:b1:77:cb:9e:ad:
bd:59:37:9e:d2:08:47:40:00:45:78:c9:d0:43:69:
dc:6f:58:38:7f:76:10:f7:6d:f0:3a:74:97:db:c1:
a9:be:a5:ec:1b:79:dd:c3:f0:37:a9:bf:57:59:26:
56:28:71:b4:d2:3f:21:df:f0:e1:e6:1c:6b:dc:7a:
f1:f9:1c:f7:c0:16:b9:ae:fc:b6:b2:95:1f:be:ed:
1b:5b:6f:78:55:70:2a:9c:98:27:fd:1b:3b:6c:db:
9a:87:06:57:e1:be:91:29:7f:ee:c3:fe:1b:b3:62:
c6:04:f0:57:53:d4:22:85:a7:d8:39:03:eb:38:a6:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:38:80:31:93:EF:50:49:4D:06:34:A1:D6:85:37:6F:76:3E:42:2C
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7e:e1:89:cf:1b:56:36:12:cc:ca:ba:fe:dd:d2:61:ff:b6:
17:5c:44:12:64:14:d8:c2:9e:25:31:24:89:8e:bb:95:94:e6:
76:50:60:79:3e:f8:bb:6e:73:99:c3:56:ee:74:4a:f9:c1:ba:
db:4c:77:1e:d3:d2:60:31:bc:b3:1e:13:03:eb:94:34:99:08:
5b:6a:d8:01:03:d1:6d:50:6d:72:95:3d:25:1b:08:0a:31:61:
cc:8c:81:33:7a:80:9f:a8:6e:17:62:23:20:01:31:fe:8e:4b:
fa:b0:91:05:ab:be:9c:0c:0a:ee:12:bf:e8:b3:f0:8d:fe:b7:
d1:89:a4:78:41:28:22:bb:b4:a0:84:7b:17:2a:8d:70:25:f8:
bd:2f:2f:01:0f:49:03:9e:74:d8:a9:a8:8e:08:61:53:5e:03:
78:f2:4a:4e:3a:a9:1f:ec:97:4d:70:74:2f:2b:39:4b:36:72:
e4:bf:f4:8e:23:79:d9:d1:4e:23:35:6b:86:13:93:e0:0d:fa:
b7:1a:8d:52:3b:16:66:e0:60:d2:e6:eb:29:cc:74:b2:bf:22:
22:ad:22:9e:10:38:e7:a8:f1:31:86:62:e9:68:b6:ad:69:f6:
46:2a:92:58:32:e0:cd:ee:b1:d2:7b:06:60:72:7b:38:1d:85:
1d:2d:5c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 14:14:28 2025 by rpki-client