Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: cl+vRtGYi5jN130RfUHu0+pX3x9Ovw06rhMUDolTjKg=
Subject key identifier: 50:78:5F:8E:80:84:E7:FF:95:34:08:E9:A5:C8:C8:22:9A:35:EE:8D
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 01974967EEA513CEBD2E07AF6503A19C1AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 14BD
Signing time: Sat 07 Jun 2025 08:00:37 +0000
Manifest this update: Sat 07 Jun 2025 08:00:37 +0000
Manifest next update: Sun 08 Jun 2025 08:00:37 +0000
Files and hashes: 1: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (hash: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: 4YBzE5YNZ/76PLaLFET+eNG639v2R6ZJDFoNKdSF+k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:ee:a5:13:ce:bd:2e:07:af:65:03:a1:9c:1a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Jun 7 08:00:37 2025 GMT
Not After : Jun 8 08:00:37 2025 GMT
Subject: CN=50785f8e8084e7ff953408e9a5c8c8229a35ee8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:48:9c:d1:ab:5b:c9:fe:7d:cd:0d:83:a4:
1e:b8:78:c3:74:10:68:8c:ac:e6:13:bd:df:69:67:
29:37:5d:3d:64:2d:86:99:7f:06:8e:58:8b:72:5f:
45:69:6b:ba:ee:96:71:35:a8:91:ac:55:6c:53:94:
7a:79:50:c5:55:77:41:2d:b8:77:4a:31:43:14:9c:
39:c2:8f:61:27:53:a3:c2:cc:01:7a:d1:54:9f:64:
99:40:1b:a9:0c:16:5f:0b:5b:b0:96:a9:7f:72:cf:
ff:ab:3f:6e:3c:5a:f1:48:3c:1a:5b:60:78:af:49:
ae:1a:db:30:5c:fe:d7:c3:ad:ae:0e:55:00:68:a8:
53:86:58:80:6f:05:b9:d3:78:bf:25:5c:2b:ae:17:
67:af:bd:42:f9:d0:18:01:1f:ea:2d:cc:6d:94:cd:
82:09:20:35:bb:8e:73:64:38:e8:3c:d1:b4:94:b8:
4c:84:8a:6c:7e:4e:0c:c7:bf:32:11:59:68:59:bd:
e5:3c:61:ab:66:d5:5b:23:db:f0:b8:65:da:70:df:
96:52:cf:2e:a5:00:e5:42:56:e9:ea:3d:bb:43:00:
11:dc:5f:83:2f:fd:8d:77:38:06:42:ce:52:3c:62:
7c:9c:3a:61:c3:09:02:f9:32:c8:f3:b9:eb:d4:4a:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:78:5F:8E:80:84:E7:FF:95:34:08:E9:A5:C8:C8:22:9A:35:EE:8D
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:06:dc:b2:8a:fd:5d:cf:fd:54:8d:d8:13:0c:c0:3b:94:35:
41:9e:2d:81:e5:53:06:52:cb:97:50:20:07:2d:66:bb:4a:49:
ce:57:92:e8:06:5c:eb:e4:2a:bb:d6:61:ec:3b:be:9f:4a:9e:
76:e2:d3:43:6a:95:72:50:f9:8c:8b:30:9e:a3:07:49:d2:0a:
c8:f3:28:5f:f0:68:b5:9b:df:aa:09:6f:50:34:ba:c1:be:2a:
d1:8c:76:db:58:22:b4:6f:fa:75:d2:b3:b6:8f:9b:cc:c9:43:
2a:da:5e:5c:9b:92:78:e2:f3:41:1a:5d:e8:75:9d:25:b4:c3:
4a:30:58:f2:17:c0:df:bd:7f:eb:c0:27:20:8d:eb:6b:90:18:
42:5f:77:6c:fb:37:42:ba:96:7d:e2:85:f6:00:52:7e:a0:93:
af:40:6c:f6:72:11:80:dd:fc:d7:ce:66:b4:f0:ae:71:b4:a8:
ab:d0:a2:a1:95:0a:97:f7:6a:55:eb:c7:76:c1:e1:82:b2:42:
88:ef:16:3d:d3:83:68:97:f1:a3:51:80:71:fb:b1:6d:e5:67:
05:31:6e:95:93:5c:f6:76:c6:3c:89:d0:45:7e:c4:3b:49:7b:
e4:be:15:24:33:71:9d:68:f2:8f:9a:70:51:f2:28:8b:64:6e:
18:75:15:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ+6lE869LgevZQOhnBrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDI2YzNkMTFjOWYyNGFjYzBhMWQ4NDU0Y2JjOTYwNDg2
NWE4MDkwHhcNMjUwNjA3MDgwMDM3WhcNMjUwNjA4MDgwMDM3WjAzMTEwLwYDVQQD
Eyg1MDc4NWY4ZTgwODRlN2ZmOTUzNDA4ZTlhNWM4YzgyMjlhMzVlZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj5InNGrW8n+fc0Ng6QeuHjDdBBo
jKzmE73faWcpN109ZC2GmX8GjliLcl9FaWu67pZxNaiRrFVsU5R6eVDFVXdBLbh3
SjFDFJw5wo9hJ1OjwswBetFUn2SZQBupDBZfC1uwlql/cs//qz9uPFrxSDwaW2B4
r0muGtswXP7Xw62uDlUAaKhThliAbwW503i/JVwrrhdnr71C+dAYAR/qLcxtlM2C
CSA1u45zZDjoPNG0lLhMhIpsfk4Mx78yEVloWb3lPGGrZtVbI9vwuGXacN+WUs8u
pQDlQlbp6j27QwAR3F+DL/2NdzgGQs5SPGJ8nDphwwkC+TLI87nr1EoP3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFB4X46AhOf/lTQI6aXIyCKaNe6NMB8GA1UdIwQY
MBaAFHJCbD0RyfJKzAodhFTLyWBIZagJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYt
YmU5MGIwZmQxZjc4LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYtYmU5MGIwZmQxZjc4
LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwbcsor9
Xc/9VI3YEwzAO5Q1QZ4tgeVTBlLLl1AgBy1mu0pJzleS6AZc6+Qqu9Zh7Du+n0qe
duLTQ2qVclD5jIswnqMHSdIKyPMoX/BotZvfqglvUDS6wb4q0Yx221gitG/6ddKz
to+bzMlDKtpeXJuSeOLzQRpd6HWdJbTDSjBY8hfA371/68AnII3ra5AYQl93bPs3
QrqWfeKF9gBSfqCTr0Bs9nIRgN38185mtPCucbSoq9CioZUKl/dqVevHdsHhgrJC
iO8WPdODaJfxo1GAcfuxbeVnBTFulZNc9nbGPInQRX7EO0l75L4VJDNxnWjyj5pw
UfIoi2RuGHUVkA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:34:49 2025 by rpki-client