Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
File: ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json)
Hash identifier: cfYy6jGysWgeD/pfTsVBbuFEH1pKl6Z5jd/YgegECTA=
Subject key identifier: AF:A9:45:24:DA:47:36:39:95:0A:43:FA:1D:F1:6D:1B:D2:81:93:1C
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Certificate issuer: /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial: 01974AB1A701215AAD1A1BCCFA5F39E084C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
Manifest number: 07E1
Signing time: Sat 07 Jun 2025 14:00:45 +0000
Manifest this update: Sat 07 Jun 2025 14:00:45 +0000
Manifest next update: Sun 08 Jun 2025 14:00:45 +0000
Files and hashes: 1: XeS-j2IYyupPYwAd3k1rQhL0Pjk.roa (hash: LaZnavonJdxkwg+OL44y91TnIY6G41jXIPEjOAmHc4s=)
2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: HQJVQ61dxJWGsXT1RIUyUEZkdRxxsWCnNmFswEijcW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:a7:01:21:5a:ad:1a:1b:cc:fa:5f:39:e0:84:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Validity
Not Before: Jun 7 14:00:45 2025 GMT
Not After : Jun 8 14:00:45 2025 GMT
Subject: CN=afa94524da473639950a43fa1df16d1bd281931c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:be:cc:f5:fb:08:29:24:04:c8:18:44:6a:
96:0f:25:d6:fd:36:8c:b8:17:22:3d:79:e0:9a:f3:
df:9e:17:38:86:70:7b:4a:19:4f:aa:97:52:ee:b4:
13:ee:f0:ce:36:5e:52:9c:2e:16:00:38:b1:67:99:
75:1b:47:44:55:81:90:a4:86:50:b2:15:7f:b6:12:
e4:19:18:aa:fd:09:8e:68:4c:05:9e:5d:bd:79:29:
67:2b:9d:a2:a2:b9:05:d5:55:90:77:08:74:e1:78:
4e:82:f2:95:03:81:29:8e:ad:f1:fb:41:c1:7f:1e:
dc:d3:6a:2a:a9:27:7f:0a:11:3d:65:0b:da:a5:ca:
5a:f1:24:4d:ee:72:c0:0b:68:b6:68:c4:2a:68:ec:
3e:fe:11:da:a8:11:d3:42:a2:aa:b1:89:7d:c4:26:
02:2e:cd:f5:44:3a:ac:44:16:7b:ce:32:c9:86:85:
65:89:cf:67:64:1f:e3:e5:93:93:7a:28:4f:7e:5d:
4e:cf:7f:c0:a6:59:3e:92:d4:bf:ad:b4:57:84:58:
24:dd:fa:cc:67:69:1a:54:97:89:da:42:04:48:75:
5c:4c:ed:d0:01:4e:fa:45:5c:6a:44:e8:57:4a:c8:
f8:9d:5b:90:c3:f8:d8:5b:78:c2:4b:b1:a2:ce:75:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A9:45:24:DA:47:36:39:95:0A:43:FA:1D:F1:6D:1B:D2:81:93:1C
X509v3 Authority Key Identifier:
keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b6:7f:11:f5:0b:e6:e0:04:28:d3:2f:6d:20:8c:83:25:d5:
ab:d5:70:19:fe:b4:dc:8f:6a:e5:67:ee:d2:f8:a7:07:28:90:
1b:a8:9a:7b:d9:11:1d:dd:44:73:32:cd:0b:77:c2:af:8f:58:
33:77:34:36:e3:7d:9b:33:c7:6e:cf:81:02:12:79:29:a2:02:
ef:5e:e5:77:a0:4e:67:3a:98:6d:80:18:d0:44:64:47:2b:71:
5b:1a:6d:d9:9b:f6:81:4e:ff:fc:12:2c:fb:d1:de:07:dc:d3:
77:a8:3f:c7:0f:de:6d:d2:4e:30:5c:17:ce:a8:95:26:07:07:
35:22:4a:98:5f:c6:71:c1:5d:d3:aa:b9:e3:a8:43:6f:31:8c:
a0:2d:a1:5f:74:e8:e8:38:2c:9a:60:02:c2:ee:3e:09:2a:b5:
d4:32:08:92:48:73:4b:d7:d3:75:8e:81:43:88:e1:7e:81:41:
69:8e:19:0e:d7:6f:be:c2:59:e3:bf:74:32:d8:25:bc:b4:13:
ff:47:c5:05:e8:13:2a:44:f0:1e:dc:e6:ed:33:61:6a:60:a0:
da:e0:08:84:26:cd:00:1b:b5:9d:32:bc:c8:4c:53:9e:19:d3:
7a:87:0a:29:a3:1d:0c:5b:f5:a4:78:22:87:58:11:b2:87:c1:
dc:75:18:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:21:52 2025 by rpki-client