Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
File: CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json)
Hash identifier: VoKhCoHPcf+fb/M054APPM7JwXt2mlrJB55mcsSlQ08=
Subject key identifier: 20:5A:59:36:89:F3:AC:E2:38:CB:47:B0:28:A6:66:61:80:3C:A1:3A
Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
Certificate issuer: /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Certificate serial: 01975045F6DD0974E0C8FF0CC7A57D5C9EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
Manifest number: 038F
Signing time: Sun 08 Jun 2025 16:00:51 +0000
Manifest this update: Sun 08 Jun 2025 16:00:51 +0000
Manifest next update: Mon 09 Jun 2025 16:00:51 +0000
Files and hashes: 1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: d+iKf4U5fCkgkcGU5/0DFM8lRmggE+TzZ0jMJMpKFzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:f6:dd:09:74:e0:c8:ff:0c:c7:a5:7d:5c:9e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Validity
Not Before: Jun 8 16:00:51 2025 GMT
Not After : Jun 9 16:00:51 2025 GMT
Subject: CN=205a593689f3ace238cb47b028a66661803ca13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:36:b6:72:d0:1d:29:8f:b0:15:9c:8a:85:c3:
e2:ed:3d:c6:6b:8e:15:e0:81:9e:4c:63:8b:6f:6e:
6b:4a:d9:03:fa:70:26:a7:11:6d:42:8a:6e:3d:aa:
2a:ff:ad:bd:16:5d:9e:c6:b2:56:f1:19:85:f5:db:
8a:77:6f:d2:b6:b8:77:e7:53:cd:db:94:6e:24:79:
ea:ec:7e:c1:fa:3e:83:ab:df:2b:ed:19:f9:e2:d8:
fa:18:d3:68:0a:aa:c9:4e:29:dd:95:a1:9d:ab:17:
08:73:3f:ef:69:8d:06:57:ff:1a:50:61:33:44:5a:
5c:c2:2e:6c:45:0e:50:cc:ea:46:50:15:43:a7:32:
6c:25:6f:fd:05:f7:04:4f:92:78:97:fa:f2:98:c7:
1a:21:f6:fd:a0:3b:96:85:03:4d:b9:86:44:39:57:
91:9b:49:5b:52:b1:1a:32:7d:4e:a0:66:8a:6e:9c:
6c:75:74:77:6c:34:22:3d:6a:2b:eb:e9:ff:a1:d4:
e6:93:61:0b:f9:b9:e8:c1:99:07:27:5f:ab:32:2e:
0b:de:0b:68:63:3a:41:fc:a1:54:50:72:d8:80:b2:
3c:d0:4d:16:44:d6:1a:65:c1:ad:34:89:c1:e0:71:
9f:4d:b3:4e:ef:56:75:f9:52:2b:91:31:47:e1:99:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5A:59:36:89:F3:AC:E2:38:CB:47:B0:28:A6:66:61:80:3C:A1:3A
X509v3 Authority Key Identifier:
keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b3:1e:5f:74:af:b1:dd:d4:1a:cd:bf:28:99:16:3c:a6:ed:
8c:71:6e:02:7c:ae:f4:d6:92:f8:69:71:73:65:aa:e6:d6:01:
2d:a5:5d:b6:53:a4:d2:f3:16:54:91:9a:a4:da:94:4d:e4:3b:
22:90:e6:c2:78:e0:45:86:f4:12:4a:bf:19:30:54:aa:81:8c:
43:8b:a4:1e:7d:c0:3b:bd:be:98:7d:d2:85:47:77:58:b5:0d:
32:c3:0e:b7:59:c8:a1:88:ce:23:af:9f:3b:5c:7b:6e:62:c1:
50:ec:1a:71:a3:e6:73:be:9d:f0:e5:4a:a6:c8:78:c5:45:02:
9b:99:48:29:4e:eb:76:69:c9:4c:a3:56:81:f6:73:a4:a8:29:
72:db:fa:01:9d:69:e7:cc:ed:ae:17:77:0c:bd:a3:8d:46:77:
c7:2b:16:1f:12:92:7d:c0:26:47:85:3f:d4:c6:15:80:4a:5e:
1c:a4:23:c7:cf:23:7f:e5:ad:77:12:14:2a:b8:6b:53:f1:eb:
55:79:ee:64:16:09:c8:2d:92:1b:6f:1f:df:06:54:ba:b4:c9:
4d:c3:65:b3:15:40:43:29:e6:f1:91:bb:06:53:12:1c:73:a6:
15:c2:d0:f8:1b:b1:c3:b6:d9:80:1e:eb:9f:8b:3c:ab:ed:70:
e8:98:b6:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRfbdCXTgyP8Mx6V9XJ7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YThiOGZlMGM4ODVhNDVmMjQ4NTUyMzM0MmU5YmE4ZGM4
OWU2OGYwHhcNMjUwNjA4MTYwMDUxWhcNMjUwNjA5MTYwMDUxWjAzMTEwLwYDVQQD
EygyMDVhNTkzNjg5ZjNhY2UyMzhjYjQ3YjAyOGE2NjY2MTgwM2NhMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAija2ctAdKY+wFZyKhcPi7T3Ga44V
4IGeTGOLb25rStkD+nAmpxFtQopuPaoq/629Fl2exrJW8RmF9duKd2/Strh351PN
25RuJHnq7H7B+j6Dq98r7Rn54tj6GNNoCqrJTindlaGdqxcIcz/vaY0GV/8aUGEz
RFpcwi5sRQ5QzOpGUBVDpzJsJW/9BfcET5J4l/rymMcaIfb9oDuWhQNNuYZEOVeR
m0lbUrEaMn1OoGaKbpxsdXR3bDQiPWor6+n/odTmk2EL+bnowZkHJ1+rMi4L3gto
YzpB/KFUUHLYgLI80E0WRNYaZcGtNInB4HGfTbNO71Z1+VIrkTFH4ZmGywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBaWTaJ86ziOMtHsCimZmGAPKE6MB8GA1UdIwQY
MBaAFAiouP4MiFpF8khVIzQum6jcieaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0tpNF9neUlXa1h5U0ZVak5DNmJxTnlKNW84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mOGU1OTktYjU3YS00NGEyLTljMzUt
OWVlNTM0NDJjM2U5LzEvQ0tpNF9neUlXa1h5U0ZVak5DNmJxTnlKNW84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mOGU1OTktYjU3YS00NGEyLTljMzUtOWVlNTM0NDJjM2U5
LzEvQ0tpNF9neUlXa1h5U0ZVak5DNmJxTnlKNW84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbMeX3Sv
sd3UGs2/KJkWPKbtjHFuAnyu9NaS+Glxc2Wq5tYBLaVdtlOk0vMWVJGapNqUTeQ7
IpDmwnjgRYb0Ekq/GTBUqoGMQ4ukHn3AO72+mH3ShUd3WLUNMsMOt1nIoYjOI6+f
O1x7bmLBUOwacaPmc76d8OVKpsh4xUUCm5lIKU7rdmnJTKNWgfZzpKgpctv6AZ1p
58ztrhd3DL2jjUZ3xysWHxKSfcAmR4U/1MYVgEpeHKQjx88jf+WtdxIUKrhrU/Hr
VXnuZBYJyC2SG28f3wZUurTJTcNlsxVAQynm8ZG7BlMSHHOmFcLQ+Buxw7bZgB7r
n4s8q+1w6Ji2qA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:16:44 2025 by rpki-client