Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: /Wiui98oC+xOL2YSLqopOSebloQJN6AZiUxh4WGDmuM=
Subject key identifier: F5:0F:00:AD:96:7A:2F:3B:71:35:66:52:50:28:50:C4:B4:CE:49:96
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 01974742E6D487FADBABFA0430296C84BD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 0521
Signing time: Fri 06 Jun 2025 22:00:56 +0000
Manifest this update: Fri 06 Jun 2025 22:00:56 +0000
Manifest next update: Sat 07 Jun 2025 22:00:56 +0000
Files and hashes: 1: V-Zw-R39fa3vjmQTK3pi-ruJAOM.roa (hash: svw00iQ8XqkVPen4oB7uX29LsRKx9ZNkxy68U1tQQ8A=)
2: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: i/6gJSwlwhctHgO+RVg4IBhuErfpL9LoVQatJq+uGjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:e6:d4:87:fa:db:ab:fa:04:30:29:6c:84:bd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Jun 6 22:00:56 2025 GMT
Not After : Jun 7 22:00:56 2025 GMT
Subject: CN=f50f00ad967a2f3b71356652502850c4b4ce4996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:33:85:94:9d:7e:27:6a:70:c4:2b:47:4a:
6f:20:7e:10:73:6d:64:f9:ae:1b:e2:6c:14:4f:99:
b0:59:01:e9:5e:39:08:f6:2a:6b:e7:2b:96:13:92:
de:52:da:94:b5:07:52:56:ae:da:aa:4e:67:58:f3:
d2:13:c9:a1:af:52:46:3b:71:0d:6a:17:d3:25:18:
70:fb:a3:41:f3:07:70:ce:e1:b9:a0:36:43:97:17:
93:52:f5:38:e8:0f:17:3d:8b:6d:83:3d:71:e7:c0:
c0:be:54:ad:c1:f0:df:cd:c4:5d:d6:08:1e:4f:12:
7c:fb:fe:8d:87:e4:2d:38:18:90:50:f6:a6:45:34:
ce:5a:a9:36:f1:04:23:04:b7:67:77:76:07:68:d5:
fe:5e:e5:85:a3:6c:73:70:19:ab:c8:1f:ef:9d:3a:
c5:5f:26:da:85:c9:d9:07:33:56:9d:79:0e:cb:28:
6e:b9:4c:97:49:2f:b0:8b:d6:71:cd:8c:bd:83:c3:
98:d2:f8:be:72:28:d0:32:83:e5:1b:20:b1:9a:a0:
0b:45:f7:f1:34:73:e4:e5:f0:8a:f2:2f:01:90:8b:
1f:bf:1a:52:e4:19:fd:be:06:94:24:f1:cf:11:10:
35:ca:f2:61:38:aa:ff:ab:2c:e2:c1:73:ea:be:87:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0F:00:AD:96:7A:2F:3B:71:35:66:52:50:28:50:C4:B4:CE:49:96
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ec:5c:70:75:d9:2f:56:a5:02:6d:e3:75:04:2d:83:83:5e:
9a:dc:91:0b:1a:a3:5c:f7:51:a1:1c:2f:25:c9:ab:30:d0:46:
af:ef:ad:79:ed:59:6c:5f:eb:2e:d6:7b:e2:5a:ec:0e:a0:7d:
2d:86:9b:35:61:f0:af:cb:c9:ac:a5:e7:28:4b:8a:6e:b2:8d:
5c:27:f9:5e:af:f0:d7:fc:4a:fd:08:1a:ee:97:ca:61:da:b6:
98:88:2e:b4:f0:76:10:28:87:02:69:f9:6f:a2:ce:e2:ca:d9:
e7:e9:7b:92:14:12:ca:e3:30:2d:86:18:23:6f:a0:28:fa:90:
57:73:37:24:d6:6d:e9:9c:19:b2:46:87:31:05:76:75:5d:a1:
36:17:07:b1:b6:e6:9c:15:d0:14:80:bf:40:17:a7:85:1a:11:
34:fe:be:59:97:ac:0d:04:e9:ee:ca:23:5a:75:8d:66:a3:b7:
cc:73:af:47:ba:b6:5a:4d:bd:f6:58:d2:03:a4:3a:56:73:b2:
f4:87:68:2d:7c:00:24:22:27:c6:e7:ac:f5:d5:53:f8:51:c4:
f8:00:e7:dc:02:c4:43:b5:c3:5d:80:18:cb:d2:86:2f:c5:5a:
1b:6a:d4:c0:54:4b:f7:c5:de:0d:77:e1:13:94:b5:ed:61:ba:
12:66:f0:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQubUh/rbq/oEMClshL0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDk5NGJiN2E2YTNmNDMzM2Q2NjhjNDk4ZmI5NjViMTcy
YzM0NTUwHhcNMjUwNjA2MjIwMDU2WhcNMjUwNjA3MjIwMDU2WjAzMTEwLwYDVQQD
EyhmNTBmMDBhZDk2N2EyZjNiNzEzNTY2NTI1MDI4NTBjNGI0Y2U0OTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLIzhZSdfidqcMQrR0pvIH4Qc21k
+a4b4mwUT5mwWQHpXjkI9ipr5yuWE5LeUtqUtQdSVq7aqk5nWPPSE8mhr1JGO3EN
ahfTJRhw+6NB8wdwzuG5oDZDlxeTUvU46A8XPYttgz1x58DAvlStwfDfzcRd1gge
TxJ8+/6Nh+QtOBiQUPamRTTOWqk28QQjBLdnd3YHaNX+XuWFo2xzcBmryB/vnTrF
XybahcnZBzNWnXkOyyhuuUyXSS+wi9ZxzYy9g8OY0vi+cijQMoPlGyCxmqALRffx
NHPk5fCK8i8BkIsfvxpS5Bn9vgaUJPHPERA1yvJhOKr/qyziwXPqvofNoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUPAK2Wei87cTVmUlAoUMS0zkmWMB8GA1UdIwQY
MBaAFHJJlLt6aj9DM9ZoxJj7llsXLDRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2ttVXUzcHFQME16MW1qRW1QdVdXeGNzTkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83ZmM4MGItOGQxNC00NTdiLWFkNWUt
ODNmYzQ4MDQ0OTIzLzEvY2ttVXUzcHFQME16MW1qRW1QdVdXeGNzTkZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83ZmM4MGItOGQxNC00NTdiLWFkNWUtODNmYzQ4MDQ0OTIz
LzEvY2ttVXUzcHFQME16MW1qRW1QdVdXeGNzTkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+xccHXZ
L1alAm3jdQQtg4NemtyRCxqjXPdRoRwvJcmrMNBGr++tee1ZbF/rLtZ74lrsDqB9
LYabNWHwr8vJrKXnKEuKbrKNXCf5Xq/w1/xK/Qga7pfKYdq2mIgutPB2ECiHAmn5
b6LO4srZ5+l7khQSyuMwLYYYI2+gKPqQV3M3JNZt6ZwZskaHMQV2dV2hNhcHsbbm
nBXQFIC/QBenhRoRNP6+WZesDQTp7sojWnWNZqO3zHOvR7q2Wk299ljSA6Q6VnOy
9IdoLXwAJCInxues9dVT+FHE+ADn3ALEQ7XDXYAYy9KGL8VaG2rUwFRL98XeDXfh
E5S17WG6EmbwaA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:55 2025 by rpki-client