Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: LUpmcWvlLjJALShtxVXSk+sezT0t6Y16O6QTHxINiZI=
Subject key identifier: D1:47:25:B3:54:60:BE:80:B7:E2:CF:DF:7B:82:60:5A:2A:C2:2A:C7
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 019845896DAA062B4110CF5CE19A837EC3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 07:01:30 +0000
Manifest this update: Sat 26 Jul 2025 07:01:30 +0000
Manifest next update: Sun 27 Jul 2025 07:01:30 +0000
Files and hashes: 1: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: L+r8Q2QexSux/SrQrM/fdFyHsP1/5vA38ddEyMXtLLc=)
2: NYpGsgvZZnS43WLsZ6IiOuK1URk.roa (hash: 1DbDkDpg7L2mWH/maxc8wFOk6zRLCwxEnE3jGY7E3oU=)
3: hER6wRwe_hUZJ0u9RImVrBTy1as.roa (hash: iyJ20Ahzbr3qZY7vMtDGjDttWYIPJenArxH2H2QEoYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:6d:aa:06:2b:41:10:cf:5c:e1:9a:83:7e:c3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Jul 26 07:01:30 2025 GMT
Not After : Jul 27 07:01:30 2025 GMT
Subject: CN=d14725b35460be80b7e2cfdf7b82605a2ac22ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:37:04:3b:a7:1e:a7:bc:6e:5c:75:89:f1:
36:c1:7a:da:f9:99:91:41:12:26:00:8d:78:12:c6:
08:74:91:b7:98:7e:2e:83:3f:f6:89:1a:00:85:4b:
04:d0:66:ff:af:90:d4:68:07:5e:39:51:e0:c5:5d:
29:db:2c:88:61:37:12:08:1c:fb:56:22:51:60:7b:
87:c2:7a:d6:c4:5c:a6:a1:3d:a7:e5:4f:3a:0e:7d:
29:7a:99:9d:bb:16:a5:08:f7:b6:f3:52:4a:2b:3b:
f9:bc:2d:6e:23:63:ae:06:7a:30:ef:d0:f1:f1:e0:
f9:71:66:19:1d:44:2d:7b:e4:8c:53:a1:72:10:40:
38:f1:57:1a:40:ed:ce:0f:72:3d:8a:4e:57:cc:a1:
1e:a4:e4:ae:19:02:b1:9d:7c:1a:d9:59:7e:f9:32:
79:26:9c:a5:3e:f9:0d:f3:b3:77:9a:df:d7:6f:37:
eb:50:01:f2:11:ea:9d:f2:d3:39:26:8d:e9:9e:92:
27:5d:8d:c1:05:ea:17:e8:7a:32:7c:20:35:7d:c4:
2e:e5:9e:b4:d4:6c:e3:d8:fc:8c:e8:10:9c:cc:54:
49:59:27:f0:86:fc:d8:75:bc:86:09:3d:f6:45:50:
2f:91:fb:0b:fa:b3:24:cc:4a:6f:86:13:24:5c:27:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:47:25:B3:54:60:BE:80:B7:E2:CF:DF:7B:82:60:5A:2A:C2:2A:C7
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:17:96:37:b0:60:2b:37:32:20:6d:85:3b:60:b7:0c:d9:03:
7a:d1:83:09:ef:51:3d:ca:42:29:92:83:5d:6d:99:71:de:da:
e4:1e:14:9a:ca:15:d6:53:be:17:d6:4a:c7:47:9b:90:7f:d1:
7f:42:1f:8f:c5:a1:5d:a8:72:c9:f8:41:46:0a:a3:aa:46:7b:
59:24:cc:a6:ef:17:84:63:bb:e2:07:3e:b7:1b:3a:1d:38:98:
7c:6f:3e:73:87:ea:69:b0:23:c1:5d:69:0f:45:83:c0:03:c6:
f5:55:d4:8a:8f:41:25:f8:e9:fd:92:af:d7:d5:ec:89:8c:a4:
53:71:0a:10:02:f6:4d:f4:04:77:63:09:28:67:d5:ef:4f:f5:
84:6e:44:90:db:df:73:6c:da:8c:3a:79:58:aa:89:05:90:a6:
1c:8f:23:38:72:b4:fb:be:cc:5c:56:34:ae:89:a4:53:5f:29:
57:a8:36:ad:2b:d2:29:0e:94:a3:1e:be:51:2a:f4:13:a6:b9:
d5:d6:20:a3:01:9f:e2:42:f1:b9:69:2e:81:a2:f4:c1:9d:a7:
76:c6:d5:55:bd:9c:b7:36:1b:fe:73:7e:c2:e6:ac:b1:e6:84:
12:f1:fc:35:a7:8a:f9:ae:29:01:bb:3d:8a:e4:84:bd:e9:be:
4e:a1:78:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:47:22 2025 by rpki-client