Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: QRV7UGBOocuf0uM0ZjnlL55fCkFfHSflJM/Z8NBmECo=
Subject key identifier: 6E:AA:AB:12:75:B9:C8:0D:8C:0A:0F:BE:66:78:91:BE:F0:24:B0:CA
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 01963E0B950FD8AE5B949E1ADECB9CBA3236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 10:01:08 +0000
Manifest this update: Wed 16 Apr 2025 10:01:08 +0000
Manifest next update: Thu 17 Apr 2025 10:01:08 +0000
Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: QfN6vftNNDWVgZH83g9ClmVkd7pwvE6wkM+c4dOszK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:95:0f:d8:ae:5b:94:9e:1a:de:cb:9c:ba:32:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Apr 16 10:01:08 2025 GMT
Not After : Apr 17 10:01:08 2025 GMT
Subject: CN=6eaaab1275b9c80d8c0a0fbe667891bef024b0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:68:06:cf:a8:ff:2c:77:08:ef:d5:78:84:
f3:5d:e0:10:91:da:e7:9c:41:07:24:e9:16:5c:b5:
d5:bc:b8:af:b2:a1:05:cd:9b:0f:63:77:54:c3:69:
7e:7a:f3:2f:1b:88:e5:40:bc:d1:fb:5c:04:89:56:
ea:78:08:06:65:62:7f:28:5b:f6:e6:50:d0:4f:bb:
d9:79:08:fc:64:7c:a2:d5:a5:47:52:de:75:ea:42:
0a:58:a1:8a:f5:fe:b1:43:72:b9:3a:61:4c:7f:0b:
6d:75:cf:63:02:f5:db:34:4a:3e:97:b7:27:1d:45:
85:42:7b:05:ee:c7:b2:f8:c9:9d:32:aa:6c:8d:df:
c0:a7:ab:5f:8e:69:33:a3:cd:e0:5a:31:ac:38:fd:
71:26:50:08:8b:56:30:63:f7:36:ab:14:67:b4:52:
6e:5c:60:96:d5:ca:e6:17:ad:75:0a:1b:05:a6:0d:
ad:33:3b:41:4d:b4:fe:af:46:60:5d:ab:9f:c1:68:
3b:18:82:3a:48:8a:fe:17:21:e6:17:91:f4:01:36:
f3:fb:65:54:de:1e:50:e2:9e:ab:3d:ca:fa:ac:7c:
18:b7:84:aa:ab:25:94:2c:0f:ca:e0:6d:0d:b2:93:
a5:a8:9b:be:3a:e0:99:21:bb:ff:c5:40:80:fe:20:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AA:AB:12:75:B9:C8:0D:8C:0A:0F:BE:66:78:91:BE:F0:24:B0:CA
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:11:26:50:a4:21:f6:59:08:83:bc:34:b9:ff:97:bf:7e:31:
d8:0d:d9:83:fc:87:3b:d1:86:1d:71:a3:65:52:19:01:83:3f:
40:0f:af:ac:c5:d0:70:f1:be:35:7d:71:c9:8b:e3:10:34:f2:
09:f8:8b:53:83:d2:1a:39:60:ee:93:7a:d3:1c:46:1a:7c:b8:
1e:e1:72:29:a8:eb:02:0b:e3:64:d4:be:01:d7:ef:fe:e8:f6:
af:53:77:a7:70:e3:e2:74:44:8f:8c:41:20:bc:ef:fb:aa:ef:
fa:fa:d6:6b:ee:74:af:6c:b7:11:06:17:76:f1:47:20:50:0d:
82:c7:3a:7d:59:8d:22:e2:ed:ae:02:6e:1c:7f:2f:79:52:62:
3a:0f:52:e0:26:3c:93:a9:8e:d1:a3:8b:6f:1b:44:aa:92:e6:
51:bf:9b:1c:c1:bc:bf:0a:b9:4d:59:7e:31:49:46:ad:f0:3f:
79:dc:3c:1f:cc:52:08:e3:77:2c:9f:47:5e:11:7d:fb:c1:9c:
6e:0c:13:99:b6:52:a9:8a:89:79:1a:3a:59:4c:d8:18:ba:aa:
29:9d:8a:c6:b9:54:5e:d7:d7:84:44:8b:b0:e1:24:a2:ee:6b:
d1:36:f7:04:85:b3:9f:c3:53:31:c2:44:a5:4b:07:12:88:0a:
29:3d:0e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:02:35 2025 by rpki-client