Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: K5l+6S6WafS+A8nWuRhSA9Bp2y2GfcJwoeY0J1LCW0Y=
Subject key identifier: C0:27:30:C5:E2:14:61:42:EA:0B:EA:D4:62:B5:5C:A0:26:FF:F3:1D
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 019649D823C19CD6BA6D8FF9225D7C540B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 01DC
Signing time: Fri 18 Apr 2025 17:00:23 +0000
Manifest this update: Fri 18 Apr 2025 17:00:23 +0000
Manifest next update: Sat 19 Apr 2025 17:00:23 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: LKvlUELOZT2a7Gv7hdgdhtKOQXd6Htth9M9uzr+cXF0=)
2: kMy_Ytqu-62SnckodYKnIddoAV4.roa (hash: DNh5a1DbxWEI9P2LYvBxRTY+TTerG2Ce0TBwgUaWhng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:23:c1:9c:d6:ba:6d:8f:f9:22:5d:7c:54:0b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Apr 18 17:00:23 2025 GMT
Not After : Apr 19 17:00:23 2025 GMT
Subject: CN=c02730c5e2146142ea0bead462b55ca026fff31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:d0:fc:f8:41:fb:07:aa:78:2a:78:24:8d:
64:99:b6:34:8b:95:15:76:25:6d:56:28:7f:84:de:
af:ab:e9:2e:d9:ea:2b:32:f9:3e:4d:18:50:7d:fb:
03:83:39:7b:a5:21:a0:cb:ce:41:ae:31:65:67:f8:
d2:5c:33:d2:7c:8a:81:c6:3d:96:4b:ed:db:8d:e7:
16:f2:19:38:58:e8:e5:68:03:18:e3:24:c6:04:78:
0e:8e:0b:cc:d5:e3:b7:d9:31:4e:9a:96:36:78:91:
67:06:79:56:bf:2e:07:03:9f:81:f2:82:f0:07:6c:
8d:6c:91:bf:1e:55:08:fd:58:7d:a7:8b:be:cb:15:
4a:9e:af:c8:71:a2:bb:27:ff:b3:86:b0:a6:1f:bc:
b0:74:15:95:f9:3d:51:db:b5:fa:b5:dd:de:9d:54:
db:4d:52:a1:5d:e3:cc:2a:c1:ae:3c:aa:35:f8:98:
81:2b:36:9b:00:b2:34:f3:13:ff:6b:a6:cc:a1:8c:
11:8c:35:ea:54:44:77:c3:65:18:54:c3:df:3c:bf:
46:7e:74:fa:c6:2b:67:59:f5:e6:46:db:fc:f0:c5:
27:bb:09:f0:f5:0b:f1:37:d2:fd:bc:6e:ce:da:c2:
1f:99:a9:92:fc:22:5c:51:6d:ba:da:98:e8:27:53:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:27:30:C5:E2:14:61:42:EA:0B:EA:D4:62:B5:5C:A0:26:FF:F3:1D
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:07:b4:9f:da:8d:85:2f:0f:1d:af:cb:9b:0d:cf:d4:f3:96:
9f:41:e7:d1:2d:07:22:c3:1a:31:b1:4f:86:91:ca:19:7f:31:
74:e4:96:72:ea:3b:a1:09:64:ee:bb:7c:01:04:6a:d6:14:9e:
f4:bf:9f:5c:1c:9b:5d:79:50:1d:5a:af:3c:bd:5d:ab:40:c6:
3d:bc:d8:81:64:e6:43:45:63:ef:c5:fe:77:a0:e7:c9:ee:90:
9d:69:84:1a:d0:3e:60:06:af:93:67:ae:be:da:17:a7:e2:6c:
de:f0:40:3d:8e:62:9e:11:c3:41:b3:19:de:1b:26:5d:f9:da:
a1:17:7e:78:3b:0b:fa:30:a2:13:69:35:d3:bc:5d:d0:81:22:
4e:dc:b3:ad:dd:56:c0:a7:eb:cd:aa:fa:1e:78:39:be:0f:d1:
e7:90:c9:ca:7a:8e:84:df:85:42:31:9d:d5:d7:7b:af:be:8e:
6e:32:14:7e:60:2b:19:eb:6f:20:de:40:89:8f:aa:41:d1:16:
df:aa:51:43:66:29:0a:9f:a2:8c:15:65:cc:f7:74:2a:a1:45:
03:6c:b0:44:2b:ed:35:b8:f7:b3:3a:a9:f0:f8:63:cb:b3:08:
d8:33:aa:d5:cb:44:0c:ac:35:52:17:f2:16:2a:c8:f7:29:e8:
e0:bb:83:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:41:35 2025 by rpki-client