Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: x84gdnrDouZjxa5fpzRCIOz7KBsQT+ZobMqA6hdlyJw=
Subject key identifier: EC:8A:04:54:3A:33:37:CE:E4:E0:9A:9B:73:79:DE:4D:56:FC:29:78
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 01987486979D61ADFA79AE8AE4245AEBFC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 15D1
Signing time: Mon 04 Aug 2025 10:00:34 +0000
Manifest this update: Mon 04 Aug 2025 10:00:34 +0000
Manifest next update: Tue 05 Aug 2025 10:00:34 +0000
Files and hashes: 1: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: tFJOeHPzpnbxCge06Zlvyw9Hjy7yyXuOALGubEYYZWg=)
2: Wy1LhCK9kxP-C2UiE5R2K8JtffM.roa (hash: DYS7fnBaD9Os9bSnRtbqX/rsXfSVI5HQGNbOlzCHNGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:97:9d:61:ad:fa:79:ae:8a:e4:24:5a:eb:fc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: Aug 4 10:00:34 2025 GMT
Not After : Aug 5 10:00:34 2025 GMT
Subject: CN=ec8a04543a3337cee4e09a9b7379de4d56fc2978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7c:da:f7:b4:29:54:14:38:32:ce:a2:18:43:
01:59:00:ee:19:08:34:b6:d4:43:52:57:44:bc:21:
a6:83:d6:8b:9d:e7:88:87:d5:e3:9f:9b:ca:fb:98:
1a:a4:dd:93:4e:d1:32:b7:00:67:e3:09:7e:7b:be:
b2:fa:17:7f:3b:46:a2:6e:4e:c0:d7:f5:f9:37:41:
bb:f1:ea:fc:08:45:3d:a2:5e:37:ae:f0:7d:52:9e:
c3:78:6e:a8:b8:27:d2:71:24:71:10:fa:6e:45:5d:
6d:11:de:22:82:32:8a:37:a8:b4:4d:20:78:56:e4:
76:7f:d0:9e:a5:5e:db:b9:41:c9:89:0a:4f:ec:c2:
6e:9f:00:36:74:11:70:d8:1c:c4:b7:65:98:74:ee:
f5:1a:3a:f5:8f:f7:e7:da:ea:5f:31:94:7a:78:a7:
e4:53:54:58:92:f8:ad:d5:ad:84:17:dd:06:0e:eb:
a5:c3:e7:c6:93:68:27:97:27:ac:da:be:3e:bf:e5:
7c:8d:e0:da:73:c5:ae:7c:30:5c:92:d8:0a:9b:78:
26:d0:48:91:be:1c:d0:05:cd:4e:50:cb:67:26:59:
44:2f:94:2d:43:0f:53:1f:3a:19:a9:ca:a3:61:b8:
09:92:12:ee:5d:42:8e:c0:68:4d:58:30:1c:5a:dd:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8A:04:54:3A:33:37:CE:E4:E0:9A:9B:73:79:DE:4D:56:FC:29:78
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:22:5f:f9:52:bf:bc:9b:6a:92:72:c6:7c:4c:89:c5:bb:ee:
d5:2b:24:06:2b:27:31:eb:00:31:93:d5:16:9b:ca:ab:96:75:
05:e4:73:5f:5c:4b:70:12:c8:9b:46:65:4f:c7:26:79:2c:86:
25:40:a1:ae:22:ef:7b:91:df:30:d1:f1:06:0f:24:bb:c5:43:
95:51:b9:86:2e:84:0f:bb:a6:15:42:f4:29:6a:38:80:f2:25:
36:02:f2:e5:63:08:ae:aa:6b:b4:cb:a8:11:34:94:c2:ed:f6:
a0:9c:28:6a:c0:16:08:b2:52:bb:62:21:ac:82:d8:e2:6e:0c:
79:64:7c:3d:43:76:eb:f7:4f:18:32:e9:a2:32:c1:24:5e:4e:
45:b6:d0:00:5b:b4:0d:8e:6b:91:2a:53:66:96:89:30:48:29:
5a:1f:59:25:9e:ba:4d:33:68:7d:21:24:2a:5e:31:ab:45:8e:
f8:ac:e8:51:82:59:e8:bb:12:1b:c7:81:87:11:04:82:b6:c6:
3f:9b:bc:37:f5:eb:46:96:d1:37:09:2e:c0:88:7c:cc:dd:de:
ff:31:2d:9d:f6:8b:b8:dd:07:dc:3f:a3:8a:fa:5f:69:d5:d0:
5e:36:9c:c6:a8:3b:f1:61:c5:df:94:af:b1:43:9d:e3:23:d2:
f2:c7:b0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:21 2025 by rpki-client