Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
File: CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft (raw, json)
Hash identifier: RhzqUVH8Tm8jowLazM3p5Yw83POP86yjThI7yCI5oyw=
Subject key identifier: 79:73:7B:57:BE:BE:10:C8:51:EC:4C:25:91:F5:EF:E6:66:38:09:E7
Authority key identifier: 08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
Certificate issuer: /CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Certificate serial: 01974CD76093E10DC7452FDADA22019632B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
Manifest number: 11E5
Signing time: Sun 08 Jun 2025 00:01:12 +0000
Manifest this update: Sun 08 Jun 2025 00:01:12 +0000
Manifest next update: Mon 09 Jun 2025 00:01:12 +0000
Files and hashes: 1: CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl (hash: Yf8celio4YcqS/dxo/leYIVP7PUrE5eeyvEC2GtofBI=)
2: DQ47vKDjcl-2XGhWvGpEltnbLx0.roa (hash: xO7ywYo6rKZE+1UGlrRMauCBtFM1TiMUXrJWYhc9zkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:60:93:e1:0d:c7:45:2f:da:da:22:01:96:32:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Validity
Not Before: Jun 8 00:01:12 2025 GMT
Not After : Jun 9 00:01:12 2025 GMT
Subject: CN=79737b57bebe10c851ec4c2591f5efe6663809e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:d4:6a:6e:ab:02:70:03:8b:71:dc:9b:02:
8e:bb:ed:d3:ce:e6:19:40:69:30:73:c0:0d:0c:44:
66:46:86:27:79:59:5d:1a:e4:10:f1:1e:4c:64:cc:
67:11:d6:c5:8c:5d:a6:42:cc:65:1e:6d:91:cf:73:
9e:dc:ab:f2:4c:6a:10:53:e8:2b:2e:92:0a:4d:64:
3f:da:54:a9:13:51:fd:41:d4:10:1e:ad:1e:c6:13:
c0:f6:76:9a:d5:ab:dd:c7:4c:23:ac:13:94:42:60:
b8:70:c1:ac:46:ca:c9:54:d2:85:bc:a4:d1:8b:e4:
77:93:0e:1b:d5:fd:f0:c1:a1:c5:27:14:d3:af:9f:
a8:d7:95:9f:e6:3d:3c:d6:76:f0:2e:48:1e:f4:93:
bd:b6:09:25:3b:5a:14:15:e3:b9:0d:0a:d0:de:f5:
37:40:35:9b:f7:31:31:76:c0:85:e7:d4:2d:91:68:
07:68:61:ae:08:54:52:03:0f:26:e2:21:e6:78:a7:
5c:3d:f4:09:5d:c2:e6:37:14:38:81:cc:57:d7:8d:
d0:da:b4:3f:f6:4b:5c:25:f2:7c:18:a0:3e:63:11:
fc:1b:09:37:c6:bf:ae:45:b7:ef:ba:5a:54:39:20:
6f:04:23:86:91:5d:d2:03:77:b7:f4:4f:f6:59:a4:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:73:7B:57:BE:BE:10:C8:51:EC:4C:25:91:F5:EF:E6:66:38:09:E7
X509v3 Authority Key Identifier:
keyid:08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:46:d4:e8:9f:73:cd:c1:fc:62:c2:ac:39:60:74:21:94:c9:
3e:b2:06:97:4d:84:e3:4f:6f:66:eb:46:31:51:16:dc:d3:e3:
8e:94:f6:02:ae:53:d9:52:dd:3b:07:5d:05:df:f0:c6:8a:6b:
8d:2d:a6:7d:e2:e2:1c:66:86:16:db:37:53:b9:4b:f1:2e:83:
a8:c6:20:c3:ac:38:1c:87:29:59:a0:6d:b9:d7:36:1b:a4:bf:
73:40:b4:ee:ab:fe:3b:59:95:44:c9:5b:01:bd:20:5b:34:bd:
85:7f:bb:1b:c6:23:70:74:ce:ea:51:1f:a0:19:3a:3b:b2:c6:
8e:e0:45:57:24:85:99:61:d4:1a:0e:11:25:bc:78:2d:40:2c:
1e:e3:5e:1e:eb:6f:f7:fe:b7:50:6d:72:71:02:10:32:2a:60:
80:7f:9d:c5:bf:3f:75:fe:31:ea:03:64:ce:c5:7f:75:84:8f:
63:45:6a:ef:be:50:5a:52:99:5f:88:29:5d:0b:c6:11:ab:8e:
79:bf:b9:83:2f:d6:5f:54:53:50:92:64:61:9c:c2:66:55:9e:
62:52:be:e3:a1:75:be:bf:b2:a1:60:8a:22:ea:20:fb:2c:10:
7c:e5:ca:9c:6d:47:08:69:65:f4:3a:3f:4a:af:9e:93:79:30:
29:ac:31:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM12CT4Q3HRS/a2iIBljK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YTM0ZGFhYTg4N2Q5OGE1MzQ4YzNhNDYwYTIxZmM4NGUx
MWE0ZTYwHhcNMjUwNjA4MDAwMTEyWhcNMjUwNjA5MDAwMTEyWjAzMTEwLwYDVQQD
Eyg3OTczN2I1N2JlYmUxMGM4NTFlYzRjMjU5MWY1ZWZlNjY2MzgwOWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/nUam6rAnADi3HcmwKOu+3TzuYZ
QGkwc8ANDERmRoYneVldGuQQ8R5MZMxnEdbFjF2mQsxlHm2Rz3Oe3KvyTGoQU+gr
LpIKTWQ/2lSpE1H9QdQQHq0exhPA9naa1avdx0wjrBOUQmC4cMGsRsrJVNKFvKTR
i+R3kw4b1f3wwaHFJxTTr5+o15Wf5j081nbwLkge9JO9tgklO1oUFeO5DQrQ3vU3
QDWb9zExdsCF59QtkWgHaGGuCFRSAw8m4iHmeKdcPfQJXcLmNxQ4gcxX143Q2rQ/
9ktcJfJ8GKA+YxH8Gwk3xr+uRbfvulpUOSBvBCOGkV3SA3e39E/2WaTNbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlze1e+vhDIUexMJZH17+ZmOAnnMB8GA1UdIwQY
MBaAFAijTaqoh9mKU0jDpGCiH8hOEaTmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNDMzYzMtMTMyZi00ZDY2LWJkMzAt
YzYyY2YyMGE1ZWM5LzEvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9mNDMzYzMtMTMyZi00ZDY2LWJkMzAtYzYyY2YyMGE1ZWM5
LzEvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0bU6J9z
zcH8YsKsOWB0IZTJPrIGl02E409vZutGMVEW3NPjjpT2Aq5T2VLdOwddBd/wxopr
jS2mfeLiHGaGFts3U7lL8S6DqMYgw6w4HIcpWaBtudc2G6S/c0C07qv+O1mVRMlb
Ab0gWzS9hX+7G8YjcHTO6lEfoBk6O7LGjuBFVySFmWHUGg4RJbx4LUAsHuNeHutv
9/63UG1ycQIQMipggH+dxb8/df4x6gNkzsV/dYSPY0Vq775QWlKZX4gpXQvGEauO
eb+5gy/WX1RTUJJkYZzCZlWeYlK+46F1vr+yoWCKIuog+ywQfOXKnG1HCGll9Do/
Sq+ek3kwKawxNg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:17:23 2025 by rpki-client