Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft (raw, json)
Hash identifier: qqDZoukY1mQHsiTH1xOckJhpHnez5MWNhU3uVTHNm1I=
Subject key identifier: 20:AC:0F:A5:BC:A1:13:F9:C0:E4:5E:53:83:14:56:CB:26:6E:A7:F2
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 01974EC559BACDA0514F4A6161BDC8E26A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 09:00:45 +0000
Manifest this update: Sun 08 Jun 2025 09:00:45 +0000
Manifest next update: Mon 09 Jun 2025 09:00:45 +0000
Files and hashes: 1: CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl (hash: XHiv4wdFGOOR85xusZZ/b+vTQFqIUBsEirOXCdxgT7c=)
2: O5QhbWQn7dWKFexdmAB0vuhHoFI.roa (hash: /pwNLph/P93dkfSWFLVF4Own/TwxuOW3vKc23GnS0Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:59:ba:cd:a0:51:4f:4a:61:61:bd:c8:e2:6a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Jun 8 09:00:45 2025 GMT
Not After : Jun 9 09:00:45 2025 GMT
Subject: CN=20ac0fa5bca113f9c0e45e53831456cb266ea7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:a6:7d:4a:94:1b:46:3b:0d:bd:d5:ce:9c:
df:ca:f6:d0:30:00:a5:8a:b5:e6:46:bb:4e:2e:ff:
eb:f5:84:6d:20:d5:4d:e5:68:30:9d:ba:6d:cb:d5:
7b:7e:2a:15:e9:c3:44:87:db:1a:12:e1:93:49:db:
c4:ba:a4:83:48:73:dc:69:e8:03:b4:0c:1f:13:f7:
65:99:d4:66:ab:3f:0c:05:49:f8:68:5b:db:18:32:
b4:a2:ba:3c:33:e5:8d:94:50:17:ac:25:90:86:ca:
47:f6:bd:06:5f:82:32:6f:da:a8:1b:e1:8c:d8:c3:
88:49:cb:37:d7:8c:4d:58:2c:f5:68:c4:0e:4c:a5:
b4:94:01:9d:ae:69:c6:5c:e3:15:28:ee:3a:ad:1d:
4c:f2:4b:b3:f5:c9:31:e7:07:b0:5b:43:9f:6d:5c:
a7:b9:03:83:13:cd:81:55:d8:81:50:b5:3d:42:f1:
b0:dc:f2:df:a7:cc:f6:92:ba:1e:e3:ca:8d:b3:b6:
30:96:5a:f1:97:91:4d:c4:9a:8b:b1:3e:16:40:a7:
ef:75:0f:77:ae:22:90:14:76:22:e1:1b:5d:04:76:
5f:c7:fa:a5:d9:de:e6:b7:62:cd:20:1f:26:5c:d6:
8b:d8:fd:52:95:e1:ae:ee:1e:98:b2:a1:78:b1:66:
e2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AC:0F:A5:BC:A1:13:F9:C0:E4:5E:53:83:14:56:CB:26:6E:A7:F2
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d3:39:41:24:c8:40:53:b8:82:bf:58:c0:cd:b6:86:1b:ec:
c0:b1:5f:e8:64:a8:50:88:1c:c2:54:40:65:d2:de:de:a7:03:
df:3a:be:d4:22:a4:8e:13:26:09:66:d7:30:e4:ad:9b:fb:33:
4b:45:be:60:a4:21:56:01:2f:f7:97:0e:94:af:0d:18:3b:4e:
15:c2:d1:9f:9d:3e:d0:72:c0:b8:d6:7c:4d:91:dd:ed:ea:a2:
cd:1e:32:17:cb:6d:c6:7b:05:dd:b5:61:6d:ea:8e:ab:0d:95:
aa:84:0e:60:3c:25:06:5d:a1:55:47:4a:16:34:ad:6b:49:07:
c9:e9:dc:aa:69:72:f4:8c:00:f8:a1:a6:63:35:29:a4:80:bb:
61:54:0c:6d:14:a3:6f:c1:7a:4a:d4:47:4f:36:bf:1f:e6:dd:
f4:a0:02:19:55:51:24:b0:24:9c:97:e5:db:04:4c:4a:22:56:
9c:c5:c4:c2:40:00:c3:af:12:fd:b6:a2:ed:1e:27:01:56:88:
ef:f8:73:53:d8:c8:d6:2a:3f:bd:19:c4:25:9a:95:2b:92:04:
69:b8:c4:6e:81:ef:ed:6c:7d:33:c0:a9:68:4c:dc:42:9a:84:
6f:97:c5:e4:81:66:ae:ff:0c:21:ed:b7:58:95:16:f8:69:6c:
5c:42:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:48:15 2025 by rpki-client