Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: X3B/kLrTmclND4sGoDHgNi8Nady31rjLGnAuR0lFngU=
Subject key identifier: 49:A8:DD:AC:9B:98:F8:9E:EB:B1:51:84:85:EE:C2:30:97:2E:AC:7E
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 019655DD22A53D2FC61F20903C14FBD25885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 04A4
Signing time: Mon 21 Apr 2025 01:01:17 +0000
Manifest this update: Mon 21 Apr 2025 01:01:17 +0000
Manifest next update: Tue 22 Apr 2025 01:01:17 +0000
Files and hashes: 1: V-Zw-R39fa3vjmQTK3pi-ruJAOM.roa (hash: svw00iQ8XqkVPen4oB7uX29LsRKx9ZNkxy68U1tQQ8A=)
2: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: 0FDR0fzc2gLv+RhfgBAiBmOfvVO6JEotLHDmRIM2TNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:22:a5:3d:2f:c6:1f:20:90:3c:14:fb:d2:58:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Apr 21 01:01:17 2025 GMT
Not After : Apr 22 01:01:17 2025 GMT
Subject: CN=49a8ddac9b98f89eebb1518485eec230972eac7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:c7:da:9f:4e:5e:4b:67:c6:c4:68:ec:b4:
0b:7e:e9:8a:d3:b2:ac:86:95:0c:f3:7a:5d:3f:2d:
77:d7:32:d5:d2:43:d4:bf:de:51:7e:b2:96:c9:4d:
46:d4:97:12:4a:c8:45:2c:b8:05:79:ec:4e:3b:cb:
1c:92:83:55:19:82:53:bd:e7:1d:d7:68:dd:41:32:
bc:de:a2:9e:a0:06:33:91:01:c8:35:f4:1f:c8:5e:
2b:9b:16:bf:91:90:5c:f3:f7:e8:ca:99:46:4e:47:
6b:0c:55:d1:ab:25:28:e7:6c:d3:ed:4e:ee:82:33:
7a:4a:50:e2:a7:99:68:75:d7:c9:95:d6:de:85:90:
6a:34:19:22:f9:8d:4b:01:75:dc:9d:6d:93:01:8a:
0d:0b:9d:db:9a:85:d9:96:4d:e7:a5:7b:e5:59:c0:
3e:24:6f:fb:03:ff:32:2d:85:52:11:b3:90:31:7e:
75:06:2c:3b:bf:4b:e8:77:de:c2:d6:8b:a0:e0:54:
0d:59:72:80:20:a0:3f:17:5d:4d:0b:d9:db:0e:be:
f7:18:1c:84:61:ad:02:b0:09:19:da:de:d5:40:8e:
7b:29:9e:3e:1f:24:29:90:ff:ab:97:da:d6:43:ca:
ca:02:be:36:ca:3f:21:71:9f:50:b6:53:65:20:f7:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A8:DD:AC:9B:98:F8:9E:EB:B1:51:84:85:EE:C2:30:97:2E:AC:7E
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0b:16:f5:33:65:10:60:f2:c4:c5:f0:83:84:65:94:23:70:
d0:8f:18:04:a4:2f:83:92:f3:d9:c4:8f:de:54:a8:99:56:69:
72:0c:7b:1d:a7:0e:b1:bb:f9:12:40:d8:47:c4:a6:82:77:0d:
11:e0:3c:93:8c:09:cd:bc:a6:2c:91:44:8b:33:b0:c5:19:83:
56:4a:bd:89:fd:49:5c:aa:4e:ef:49:a1:e4:bc:cc:4e:29:5b:
5d:79:af:40:00:53:ea:41:cd:a1:f7:20:1d:f8:c5:88:c2:ed:
62:b0:02:1c:ad:67:f6:9c:e4:88:1d:ba:4d:68:8c:a5:b3:c8:
22:7f:2b:36:cd:7b:c6:b6:91:18:c9:16:0e:6f:db:06:af:c8:
8c:28:e6:ea:6b:51:de:58:4c:ad:07:15:0d:dd:67:1f:41:fe:
22:f9:e5:93:a1:83:18:5f:89:b5:18:97:3f:dc:76:b7:bc:1f:
e9:dd:67:d9:6c:db:75:e2:8f:46:b1:37:5c:7f:96:ab:34:56:
52:bf:e3:62:26:ee:f7:ba:67:be:80:4f:7a:d2:32:6a:59:be:
00:df:ab:74:4c:0f:2b:99:ee:57:0a:44:f9:a2:66:24:09:30:
ee:26:6a:12:de:ab:50:ab:d3:4f:53:81:ea:70:df:a8:a6:91:
d8:54:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:14 2025 by rpki-client