Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: Fo64ZoZJKbcnWgG3jplldVOY4Fz9QxEF6AUPwnJvco8=
Subject key identifier: 51:8C:76:95:73:D7:0C:D1:F4:4D:54:65:AB:B0:E6:D0:F6:7B:C4:F4
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 01975C136A02CD4F71E00745C0E0D9422B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 026A
Signing time: Tue 10 Jun 2025 23:01:05 +0000
Manifest this update: Tue 10 Jun 2025 23:01:05 +0000
Manifest next update: Wed 11 Jun 2025 23:01:05 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: 6EjT0LNq9Iv1WHiUiMM/h0/vnwYQgpGPC9+dAeoacVQ=)
2: kMy_Ytqu-62SnckodYKnIddoAV4.roa (hash: DNh5a1DbxWEI9P2LYvBxRTY+TTerG2Ce0TBwgUaWhng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:6a:02:cd:4f:71:e0:07:45:c0:e0:d9:42:2b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Jun 10 23:01:05 2025 GMT
Not After : Jun 11 23:01:05 2025 GMT
Subject: CN=518c769573d70cd1f44d5465abb0e6d0f67bc4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:1d:b3:0f:bc:98:bf:f4:cf:3d:99:33:4f:
d3:64:41:6b:e5:f9:87:74:1f:48:e7:5d:c4:7d:77:
bd:1c:bd:a0:bf:77:58:63:7b:d1:26:b1:c1:c0:b0:
e1:47:5d:47:d7:f0:8d:46:fd:c5:0e:c1:2c:88:c9:
99:48:66:6d:a4:6e:f5:44:b1:b2:e6:3c:b0:5f:04:
e9:d1:f2:c3:b0:09:ab:11:29:52:07:1e:39:9c:f3:
32:1d:34:0c:3f:93:df:3b:74:0c:25:93:1b:ec:bf:
8b:97:b9:1f:4d:93:b6:f8:b0:b8:26:1d:2b:89:d6:
ad:ab:eb:d5:53:57:e7:0b:c3:1f:f5:c5:e1:dc:fb:
e7:47:27:72:c9:c3:03:de:bc:3e:08:87:9b:bc:1e:
79:ae:25:90:d4:26:39:c0:94:63:61:2b:f1:8b:d1:
15:e7:aa:bc:0a:ff:6a:17:63:a8:15:e0:59:3e:3c:
88:4a:06:97:80:e4:83:f9:e7:b4:2d:22:78:da:bb:
fe:55:af:53:e2:3a:6b:c1:c4:0d:8b:35:55:00:cb:
95:74:17:ee:c1:5a:14:5b:2f:ea:84:de:33:ac:e1:
5f:16:31:7d:1f:b1:b2:f4:f8:15:6e:b7:6a:b2:1d:
61:d4:a7:80:fb:bc:bc:b0:d7:85:54:c1:02:d0:a4:
5c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8C:76:95:73:D7:0C:D1:F4:4D:54:65:AB:B0:E6:D0:F6:7B:C4:F4
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a3:f0:cd:4b:d2:2a:1a:e8:de:f0:5e:48:08:a2:cf:27:f1:
77:55:76:22:50:cb:7a:01:8c:88:0b:30:76:78:55:3c:ab:10:
82:21:45:d5:ad:2b:3d:84:fd:d5:a2:40:92:30:29:1b:47:22:
80:ae:09:6a:6e:e8:4a:47:7a:e2:f6:23:cf:0b:38:3b:19:d8:
01:ed:e0:60:f1:1c:4d:24:f4:80:3d:01:c7:96:b1:10:8e:3b:
53:7c:f6:09:ed:ce:cf:ac:53:ad:f3:3a:35:eb:6c:52:ba:08:
c2:37:e2:e6:a3:ae:c2:b0:f5:5a:05:5d:cc:4d:c0:92:46:30:
79:53:fd:5a:1d:e5:10:0d:31:cf:39:16:47:34:c1:25:47:77:
a5:27:c1:36:82:4c:ef:25:c5:60:a7:db:c9:33:2b:5a:0d:3a:
43:64:72:63:4c:b1:f1:b1:99:0e:c1:ce:55:20:b5:78:fa:2d:
bd:2a:b3:ed:81:28:4c:94:a8:3c:e3:14:85:b2:ac:12:ed:60:
9b:0f:1c:61:37:38:b4:b7:c9:48:3d:13:b7:f2:2e:2d:68:e8:
0e:59:da:f5:34:1d:14:37:6c:56:79:e1:6e:82:72:47:cb:00:
cf:32:85:53:a8:c5:62:3c:dc:4b:96:a7:53:2b:c9:f8:a6:cf:
0e:aa:bb:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcE2oCzU9x4AdFwODZQis8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDhjMDQ4MTZhYTYxZjkzNWUxNGE2NGMzZWJiYTkxMGJh
NjUxZjQwHhcNMjUwNjEwMjMwMTA1WhcNMjUwNjExMjMwMTA1WjAzMTEwLwYDVQQD
Eyg1MThjNzY5NTczZDcwY2QxZjQ0ZDU0NjVhYmIwZTZkMGY2N2JjNGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokYdsw+8mL/0zz2ZM0/TZEFr5fmH
dB9I513EfXe9HL2gv3dYY3vRJrHBwLDhR11H1/CNRv3FDsEsiMmZSGZtpG71RLGy
5jywXwTp0fLDsAmrESlSBx45nPMyHTQMP5PfO3QMJZMb7L+Ll7kfTZO2+LC4Jh0r
idatq+vVU1fnC8Mf9cXh3PvnRydyycMD3rw+CIebvB55riWQ1CY5wJRjYSvxi9EV
56q8Cv9qF2OoFeBZPjyISgaXgOSD+ee0LSJ42rv+Va9T4jprwcQNizVVAMuVdBfu
wVoUWy/qhN4zrOFfFjF9H7Gy9PgVbrdqsh1h1KeA+7y8sNeFVMEC0KRcawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGMdpVz1wzR9E1UZauw5tD2e8T0MB8GA1UdIwQY
MBaAFApIwEgWqmH5NeFKZMPrupELplH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEt
MzFhZWMwN2U5NDVhLzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEtMzFhZWMwN2U5NDVh
LzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqPwzUvS
Khro3vBeSAiizyfxd1V2IlDLegGMiAswdnhVPKsQgiFF1a0rPYT91aJAkjApG0ci
gK4Jam7oSkd64vYjzws4OxnYAe3gYPEcTST0gD0Bx5axEI47U3z2Ce3Oz6xTrfM6
NetsUroIwjfi5qOuwrD1WgVdzE3AkkYweVP9Wh3lEA0xzzkWRzTBJUd3pSfBNoJM
7yXFYKfbyTMrWg06Q2RyY0yx8bGZDsHOVSC1ePotvSqz7YEoTJSoPOMUhbKsEu1g
mw8cYTc4tLfJSD0Tt/IuLWjoDlna9TQdFDdsVnnhboJyR8sAzzKFU6jFYjzcS5an
UyvJ+KbPDqq7qQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 06:18:22 2025 by rpki-client