Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: EQoebKHfNuzJn9k8HMzNInJM2b3LD/p4rk/k8AED+P0=
Subject key identifier: 80:E6:2E:DF:C1:BD:91:FC:5E:0C:AC:2F:3E:D8:C2:B1:FD:E0:54:11
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 0197488C261DEEE31F791BA59E8853B0528F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 04:00:33 +0000
Manifest this update: Sat 07 Jun 2025 04:00:33 +0000
Manifest next update: Sun 08 Jun 2025 04:00:33 +0000
Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: EaeEWIqSZbReGZoUjdN2Vyp0aRRfaqqVhkp88YGur4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:26:1d:ee:e3:1f:79:1b:a5:9e:88:53:b0:52:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Jun 7 04:00:33 2025 GMT
Not After : Jun 8 04:00:33 2025 GMT
Subject: CN=80e62edfc1bd91fc5e0cac2f3ed8c2b1fde05411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:14:64:1a:86:b6:9a:3b:8a:6c:ab:1e:ee:
36:af:64:b5:b1:88:e3:78:72:6b:2c:0d:d9:2f:b8:
99:be:c0:a8:c7:2f:89:c6:cd:a0:06:27:80:0e:7d:
39:f7:ce:72:17:2a:d0:20:fd:d3:f4:47:05:00:f9:
a0:59:73:29:7d:59:7f:e5:aa:8a:01:d6:8e:ba:93:
c7:01:93:20:56:0e:4c:ba:2c:6c:37:dc:6b:50:f8:
60:b1:b1:0e:86:36:fc:ad:21:7a:3d:bd:ec:9c:73:
7f:b8:cb:de:8c:6a:ad:3b:d4:a2:bb:9c:0c:66:d0:
a5:a9:6b:de:aa:9f:f0:8e:85:35:17:d9:c5:fe:5d:
8b:6b:b9:cd:6b:28:07:19:30:ff:b9:2f:f8:a5:30:
b4:b0:b5:37:3e:93:bd:54:3a:76:86:b2:12:33:c2:
cd:df:43:ec:5d:03:01:56:72:67:d3:11:36:53:75:
4a:cd:6e:b8:7e:8d:b3:e8:0c:4d:f3:33:6f:19:1f:
47:b5:22:3a:c7:93:5f:88:a4:0d:88:65:d5:40:44:
f7:f0:54:2d:de:4d:88:20:d3:35:6e:1d:24:29:48:
33:ca:8b:4d:55:4c:8d:8d:5d:84:f3:aa:57:a6:4a:
aa:f9:d9:5e:e8:aa:d1:bb:15:b7:40:81:9a:5b:28:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E6:2E:DF:C1:BD:91:FC:5E:0C:AC:2F:3E:D8:C2:B1:FD:E0:54:11
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cf:51:88:b3:50:0c:19:2b:2e:4e:cd:5b:5d:33:28:41:33:
2c:5b:8c:e6:c9:37:78:92:6c:e6:74:a5:5c:28:51:12:75:8a:
6f:32:09:37:79:9c:0d:47:8c:c0:d3:43:68:6d:40:00:c8:6e:
6c:10:35:d0:dc:14:ca:6f:07:d8:25:a8:d6:d5:a6:54:bb:22:
35:f7:c6:a4:54:bb:ab:7a:6a:93:21:14:3d:b1:bb:3e:88:72:
a1:21:48:03:6a:c4:8c:44:6d:5f:2e:03:0c:fc:3b:cc:79:31:
04:16:74:04:30:97:cd:3f:66:ec:5f:3f:53:73:d2:82:4b:c4:
bd:bd:4c:12:28:38:19:5b:0a:9a:84:57:28:2d:8e:a3:fe:9d:
92:98:b6:1d:d3:59:a6:f4:ab:8e:ac:32:db:a3:c2:32:09:bc:
8a:94:9f:6f:9e:8a:72:5a:33:1b:00:76:41:d6:bc:ef:1f:7c:
0d:7c:81:2b:c2:1c:b9:33:45:6e:42:b1:9d:a8:f1:4b:93:49:
ee:e9:39:08:a4:f6:18:82:fb:39:66:7e:f2:31:af:89:cc:8a:
c5:ce:56:27:e9:93:89:73:51:4b:0b:10:b6:11:16:69:3f:27:
ca:98:02:33:66:f6:21:a5:28:4c:01:db:94:31:c8:85:dc:68:
2e:fc:1f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:38 2025 by rpki-client