Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft (raw, json)
Hash identifier: yYwxo++aQwzjM+vOhiK451jue22s3er6rdH9TtuxtWQ=
Subject key identifier: F9:80:53:9B:B4:65:B3:09:D1:54:FE:C1:65:A0:04:29:19:18:37:96
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 019655A5EA550E1D9FC52CCCAE769CBC4748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 00:00:58 +0000
Manifest this update: Mon 21 Apr 2025 00:00:58 +0000
Manifest next update: Tue 22 Apr 2025 00:00:58 +0000
Files and hashes: 1: CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl (hash: RBO4CnX2+jYLakwbtH6EJa3QtfdHXoQySEXrDghebP4=)
2: O5QhbWQn7dWKFexdmAB0vuhHoFI.roa (hash: /pwNLph/P93dkfSWFLVF4Own/TwxuOW3vKc23GnS0Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:ea:55:0e:1d:9f:c5:2c:cc:ae:76:9c:bc:47:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Apr 21 00:00:58 2025 GMT
Not After : Apr 22 00:00:58 2025 GMT
Subject: CN=f980539bb465b309d154fec165a0042919183796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:b2:05:67:85:da:b2:84:c8:f2:1f:0e:84:
ea:cb:1e:99:00:7b:e1:e7:70:63:79:c0:d6:6b:74:
90:67:69:70:8f:bf:be:9a:6c:c9:ab:5e:1b:d9:7b:
26:51:cf:3b:1e:47:52:e6:74:b1:40:6e:0f:45:d9:
67:59:8c:cf:a1:d6:df:3e:83:b4:08:9e:54:48:4b:
32:83:d6:af:65:df:ee:c4:74:3a:03:40:82:a4:eb:
42:11:bb:41:a8:57:a3:3e:da:5b:53:50:80:d5:dc:
18:86:4d:d3:f2:44:59:fb:d9:6b:ac:13:f0:85:ef:
9f:ff:60:29:9a:2f:ce:be:fe:45:59:6a:e0:28:4b:
41:17:2a:98:e3:d7:1e:de:c2:bc:21:75:da:a0:84:
39:47:aa:f9:e1:f8:ac:b2:1e:b1:1c:9a:c4:c4:b2:
c9:72:62:fa:d0:e1:c7:83:a8:41:88:bd:67:39:63:
91:10:08:52:13:e9:f1:f5:9d:cd:f1:aa:26:ae:c3:
c8:da:9d:2f:c9:64:3d:d3:9a:4f:5c:07:40:32:a3:
80:52:76:bc:05:62:87:b9:2c:e2:6a:f3:66:52:93:
15:21:dc:52:30:21:96:89:56:bc:42:f4:db:d9:77:
67:8b:ed:82:e4:6d:bb:6d:1b:ea:9c:83:20:f2:4f:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:80:53:9B:B4:65:B3:09:D1:54:FE:C1:65:A0:04:29:19:18:37:96
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c9:86:69:b4:c1:33:86:d8:0a:c9:fd:c6:3f:5b:1e:3a:17:
47:01:c3:c5:9b:65:07:9b:98:fa:af:1c:cf:d4:f0:94:ed:82:
d7:96:52:05:58:e5:ee:a9:82:f0:79:b5:1a:9e:4d:56:c5:6f:
aa:08:9c:71:1a:74:66:fd:09:f9:45:cb:51:30:92:74:3b:2b:
b2:67:a6:4c:d1:ca:bb:71:dc:2c:5c:18:78:98:96:e0:5c:d4:
9f:b0:80:1c:93:fd:4a:e9:20:cb:01:f4:f7:88:8e:d4:e1:e8:
94:2d:d0:f1:ff:eb:66:43:df:a4:3b:da:cf:fb:f0:0c:87:13:
f4:9a:73:0a:5c:71:fa:d5:10:f8:72:04:29:5d:5e:34:9f:55:
b9:43:3f:94:16:a0:73:68:e3:09:5f:ad:d4:46:c2:48:a3:dc:
73:ec:24:22:81:a2:3c:ac:dc:89:74:bd:26:f3:f1:87:04:25:
ae:ff:4c:03:10:0f:a6:8a:d7:0d:50:32:fa:15:ff:b6:49:2d:
9a:79:63:c8:e0:9f:2c:15:a5:db:a7:86:50:59:54:99:19:c3:
1b:41:37:cb:14:95:95:1d:60:5b:ae:90:bc:7a:f9:84:1f:a3:
ba:fa:ec:3c:bc:ad:2f:e1:62:54:c4:1f:7e:6d:ef:0d:f9:7c:
9c:3e:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:37 2025 by rpki-client