Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: FiMFNQGYuyyan5JBsIc9YZEX17+Cqqj2ur96vUAcgbo=
Subject key identifier: 71:75:39:73:04:9B:6D:5F:5C:4E:21:A2:05:CA:03:9F:C0:FB:40:C2
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 0196523647CC057029CDE72DDD8633A30142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 143D
Signing time: Sun 20 Apr 2025 08:00:10 +0000
Manifest this update: Sun 20 Apr 2025 08:00:10 +0000
Manifest next update: Mon 21 Apr 2025 08:00:10 +0000
Files and hashes: 1: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (hash: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: KSq7u2NTNlqtsXbkbPXIGITC8wJ5yhvDR8oSznpDKqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:47:cc:05:70:29:cd:e7:2d:dd:86:33:a3:01:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Apr 20 08:00:10 2025 GMT
Not After : Apr 21 08:00:10 2025 GMT
Subject: CN=71753973049b6d5f5c4e21a205ca039fc0fb40c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:b6:26:53:5a:1b:7f:35:b8:22:48:d3:56:
cf:cd:a6:53:ee:d7:70:6c:ce:f0:3f:b1:ca:8e:91:
35:60:f2:7a:77:1e:a8:cd:50:0a:18:fb:cc:fb:e5:
03:00:6a:42:53:2a:20:f2:2e:69:42:6b:56:ed:df:
8d:9d:e3:eb:99:31:15:0f:6c:4a:b0:80:31:76:95:
b5:94:ca:e5:8e:42:9b:06:4b:b7:e6:be:0a:4d:f8:
a7:05:17:00:b7:a0:c4:66:cb:46:72:d0:ed:fd:84:
a1:8e:ca:09:d3:36:63:e9:d6:a5:8a:71:ae:bc:0c:
c9:db:a3:90:b9:98:f3:b2:8a:f9:ea:2e:eb:b2:f8:
f5:ed:d8:01:66:be:ec:c2:5e:45:50:d9:8e:e3:73:
08:7c:33:44:f7:71:42:83:2d:41:65:a3:a7:27:77:
37:9c:89:32:9a:0e:c9:11:da:cf:1f:b8:4d:f6:29:
d2:1a:84:00:e5:cb:b0:fd:ab:9a:a3:e9:0e:2a:bf:
ae:79:a1:8d:f2:1d:08:6e:48:98:0d:ac:f9:d6:63:
09:8b:eb:fa:7a:ea:0f:a3:fe:6f:c9:7c:10:2a:f1:
b2:77:8a:07:d5:dc:d8:59:b2:79:ab:36:51:63:ea:
7a:e5:9a:a5:fd:8b:cc:ae:02:de:19:ac:72:56:e7:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:75:39:73:04:9B:6D:5F:5C:4E:21:A2:05:CA:03:9F:C0:FB:40:C2
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3f:ae:1a:b2:0b:50:d6:0a:22:46:67:f0:38:cf:3b:e8:d7:
30:3a:3a:89:3f:02:4f:74:b6:76:09:bf:9d:28:d9:69:31:84:
fb:90:61:20:96:db:d4:ea:73:ea:da:41:e7:1d:d3:99:98:3d:
e4:cd:d5:3f:eb:3a:45:86:55:8c:1d:cd:7f:cd:c7:57:69:5e:
a4:99:62:af:e1:1a:64:80:74:4d:c5:a9:e1:07:38:51:82:31:
94:60:f6:d1:15:3d:0b:a5:82:7c:55:c9:be:d2:42:5f:8e:c6:
8b:2d:c6:4d:c1:03:7d:20:e0:8b:10:e3:ce:46:1c:e2:bf:cd:
fd:65:01:8d:24:77:81:e4:f1:43:3d:e0:73:ce:16:6e:c1:91:
f9:fc:15:36:d8:3e:bb:40:0e:ce:f9:c6:3d:00:53:67:26:ca:
61:b4:e0:df:90:f9:3f:5f:18:e7:30:ce:59:85:fb:fe:8b:4d:
cc:fe:c2:86:25:6f:cd:1a:5b:d9:d5:1b:91:30:a6:77:d0:28:
2f:c9:41:0b:11:17:71:59:20:c6:18:73:5e:75:f6:76:13:83:
e9:14:eb:2e:36:93:08:ff:b4:fe:95:de:04:a2:4e:e0:f1:b5:
1d:3e:76:4e:cc:ae:f4:a3:b5:f9:b7:8e:aa:cc:b3:d2:64:ab:
a5:95:18:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNkfMBXApzect3YYzowFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDI2YzNkMTFjOWYyNGFjYzBhMWQ4NDU0Y2JjOTYwNDg2
NWE4MDkwHhcNMjUwNDIwMDgwMDEwWhcNMjUwNDIxMDgwMDEwWjAzMTEwLwYDVQQD
Eyg3MTc1Mzk3MzA0OWI2ZDVmNWM0ZTIxYTIwNWNhMDM5ZmMwZmI0MGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtya2JlNaG381uCJI01bPzaZT7tdw
bM7wP7HKjpE1YPJ6dx6ozVAKGPvM++UDAGpCUyog8i5pQmtW7d+NnePrmTEVD2xK
sIAxdpW1lMrljkKbBku35r4KTfinBRcAt6DEZstGctDt/YShjsoJ0zZj6dalinGu
vAzJ26OQuZjzsor56i7rsvj17dgBZr7swl5FUNmO43MIfDNE93FCgy1BZaOnJ3c3
nIkymg7JEdrPH7hN9inSGoQA5cuw/auao+kOKr+ueaGN8h0IbkiYDaz51mMJi+v6
euoPo/5vyXwQKvGyd4oH1dzYWbJ5qzZRY+p65Zql/YvMrgLeGaxyVudLFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHF1OXMEm21fXE4hogXKA5/A+0DCMB8GA1UdIwQY
MBaAFHJCbD0RyfJKzAodhFTLyWBIZagJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYt
YmU5MGIwZmQxZjc4LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYtYmU5MGIwZmQxZjc4
LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOj+uGrIL
UNYKIkZn8DjPO+jXMDo6iT8CT3S2dgm/nSjZaTGE+5BhIJbb1Opz6tpB5x3TmZg9
5M3VP+s6RYZVjB3Nf83HV2lepJlir+EaZIB0TcWp4Qc4UYIxlGD20RU9C6WCfFXJ
vtJCX47Giy3GTcEDfSDgixDjzkYc4r/N/WUBjSR3geTxQz3gc84WbsGR+fwVNtg+
u0AOzvnGPQBTZybKYbTg35D5P18Y5zDOWYX7/otNzP7ChiVvzRpb2dUbkTCmd9Ao
L8lBCxEXcVkgxhhzXnX2dhOD6RTrLjaTCP+0/pXeBKJO4PG1HT52Tsyu9KO1+beO
qsyz0mSrpZUYsA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:32:24 2025 by rpki-client