Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
File: ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft (raw, json)
Hash identifier: 8u21ZgC9gNfkIkTRsrdcKIL1X5Kdy0O7qz6Kxv248KI=
Subject key identifier: C2:CA:31:23:E3:5E:25:30:44:75:07:C9:67:AE:6A:31:F2:73:35:DD
Authority key identifier: 72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2
Certificate issuer: /CN=724f14189ab7105620375daf9baa814d6dd937a2
Certificate serial: 01964F6C8711EB79BD1295A1435AD63C8890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
Manifest number: 0669
Signing time: Sat 19 Apr 2025 19:00:34 +0000
Manifest this update: Sat 19 Apr 2025 19:00:34 +0000
Manifest next update: Sun 20 Apr 2025 19:00:34 +0000
Files and hashes: 1: ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl (hash: rcqsKrV46C1Qy9rBx/EB+fbc2wIHF544sLRPsx/rjn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:87:11:eb:79:bd:12:95:a1:43:5a:d6:3c:88:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724f14189ab7105620375daf9baa814d6dd937a2
Validity
Not Before: Apr 19 19:00:34 2025 GMT
Not After : Apr 20 19:00:34 2025 GMT
Subject: CN=c2ca3123e35e2530447507c967ae6a31f27335dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:d0:90:26:e7:0b:9b:b7:7e:2b:7f:79:18:
5c:b9:ad:f6:8b:b9:5a:01:2d:4b:e9:db:7b:31:04:
78:8c:d3:d0:2f:d8:5c:23:12:54:63:36:1a:de:1a:
d7:01:ab:7f:d9:60:87:67:b2:b2:81:6e:61:ad:bb:
29:5d:de:c8:e5:97:e7:e7:55:c4:36:0f:b9:85:83:
d9:d1:06:f3:d9:a9:c7:c0:55:a9:79:e6:9b:33:e4:
dd:31:2c:a7:8f:02:12:6d:96:e5:12:fc:67:c0:27:
0a:6d:f6:65:2c:48:44:09:19:06:2b:52:92:09:d2:
11:2f:c3:5b:e7:cf:51:22:d7:75:11:ad:14:0b:25:
d1:ba:9e:e7:80:06:69:76:d3:20:35:a7:25:6e:3c:
a0:64:08:c2:e9:7d:b8:02:af:89:88:ea:26:3b:71:
d9:73:42:99:ed:43:50:c0:65:d0:a1:d4:89:d8:6b:
f5:91:b1:06:1c:65:0a:3f:b8:f6:e4:19:1f:6b:19:
32:11:b9:ea:2e:62:7c:67:20:dc:a7:34:7e:54:c4:
50:0a:d3:23:c8:9a:47:9f:ea:bd:a6:3e:31:83:e6:
d0:77:22:f8:dd:66:95:10:dc:f0:d2:97:d0:ad:a0:
39:d5:f5:5f:cf:b1:dd:30:42:f5:f3:06:35:e0:45:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CA:31:23:E3:5E:25:30:44:75:07:C9:67:AE:6A:31:F2:73:35:DD
X509v3 Authority Key Identifier:
keyid:72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ea:53:68:e1:67:9a:e5:49:9d:c1:10:58:ba:7b:99:9e:86:
3e:e5:29:1c:35:32:2b:da:b4:27:8f:c0:e9:13:8e:81:af:dc:
1e:8e:64:28:b9:fe:8e:12:02:09:09:2e:05:aa:d2:31:a4:60:
e0:7e:53:97:08:e0:5c:94:df:db:a9:8a:18:a9:68:60:1e:0c:
a2:2b:7e:31:36:5f:51:8f:d7:d6:9b:05:3d:e2:9b:e9:2e:5c:
68:54:9a:98:32:e1:15:4e:87:42:f0:dd:7b:ef:db:52:1c:bb:
4a:52:59:82:20:15:22:23:65:5b:a3:4e:cf:a2:2f:9d:3d:52:
22:2b:c9:82:63:67:d5:e1:f3:fa:f8:5c:bd:8b:94:de:05:93:
a5:22:6d:a1:7a:e9:f8:7e:e0:6f:24:19:d4:07:65:da:0f:6c:
89:d5:a2:7c:4b:3e:ac:3b:c4:88:fe:97:0c:b6:37:f0:31:21:
de:65:83:ee:01:02:b5:70:48:c0:60:24:eb:9f:51:a2:99:5e:
c7:98:12:bb:2e:a4:da:48:ef:1b:0c:bc:2c:80:f5:d6:11:5c:
75:5a:4f:e3:e9:56:dc:0d:e2:79:97:6c:0c:4f:e8:73:d2:23:
44:e6:f8:42:4a:01:5c:c1:ed:8c:95:05:b7:fc:b5:e2:c4:5a:
f8:c7:b9:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbIcR63m9EpWhQ1rWPIiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNGYxNDE4OWFiNzEwNTYyMDM3NWRhZjliYWE4MTRkNmRk
OTM3YTIwHhcNMjUwNDE5MTkwMDM0WhcNMjUwNDIwMTkwMDM0WjAzMTEwLwYDVQQD
EyhjMmNhMzEyM2UzNWUyNTMwNDQ3NTA3Yzk2N2FlNmEzMWYyNzMzNWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumHQkCbnC5u3fit/eRhcua32i7la
AS1L6dt7MQR4jNPQL9hcIxJUYzYa3hrXAat/2WCHZ7KygW5hrbspXd7I5Zfn51XE
Ng+5hYPZ0Qbz2anHwFWpeeabM+TdMSynjwISbZblEvxnwCcKbfZlLEhECRkGK1KS
CdIRL8Nb589RItd1Ea0UCyXRup7ngAZpdtMgNaclbjygZAjC6X24Aq+JiOomO3HZ
c0KZ7UNQwGXQodSJ2Gv1kbEGHGUKP7j25BkfaxkyEbnqLmJ8ZyDcpzR+VMRQCtMj
yJpHn+q9pj4xg+bQdyL43WaVENzw0pfQraA51fVfz7HdMEL18wY14EUMEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLKMSPjXiUwRHUHyWeuajHyczXdMB8GA1UdIwQY
MBaAFHJPFBiatxBWIDddr5uqgU1t2TeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2s4VUdKcTNFRllnTjEydm02cUJUVzNaTjZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jYmQ3MmItZjY0Yi00NTRlLWI1OGMt
MjcxNWViNzEwZTgwLzEvY2s4VUdKcTNFRllnTjEydm02cUJUVzNaTjZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9jYmQ3MmItZjY0Yi00NTRlLWI1OGMtMjcxNWViNzEwZTgw
LzEvY2s4VUdKcTNFRllnTjEydm02cUJUVzNaTjZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfepTaOFn
muVJncEQWLp7mZ6GPuUpHDUyK9q0J4/A6ROOga/cHo5kKLn+jhICCQkuBarSMaRg
4H5TlwjgXJTf26mKGKloYB4Moit+MTZfUY/X1psFPeKb6S5caFSamDLhFU6HQvDd
e+/bUhy7SlJZgiAVIiNlW6NOz6IvnT1SIivJgmNn1eHz+vhcvYuU3gWTpSJtoXrp
+H7gbyQZ1Adl2g9sidWifEs+rDvEiP6XDLY38DEh3mWD7gECtXBIwGAk659Rople
x5gSuy6k2kjvGwy8LID11hFcdVpP4+lW3A3ieZdsDE/oc9IjROb4QkoBXMHtjJUF
t/y14sRa+Me5Xg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:36 2025 by rpki-client