Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: KSCZt10TFJ+PvDcGE7Rx3VucPJX3/v2yyOFOueHP9bA=
Subject key identifier: 8F:A4:B8:8B:B9:60:58:96:58:4E:BC:3B:B4:E5:D0:47:55:49:01:69
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 019781A03493C227DED047EE1A5B58A8B74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 14DD
Signing time: Wed 18 Jun 2025 06:00:49 +0000
Manifest this update: Wed 18 Jun 2025 06:00:49 +0000
Manifest next update: Thu 19 Jun 2025 06:00:49 +0000
Files and hashes: 1: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: VdTakeFEKSw814bMDT3+32RrOHt5sSPpV/q/44e/+Q0=)
2: hML-Tag6b9qlpG18VlhLUkClkKg.roa (hash: LEX7BjdOFqa/vQo+qGyu7UsdS3xFcEis6fY7DeQDRek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:a0:34:93:c2:27:de:d0:47:ee:1a:5b:58:a8:b7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Jun 18 06:00:49 2025 GMT
Not After : Jun 19 06:00:49 2025 GMT
Subject: CN=8fa4b88bb9605896584ebc3bb4e5d04755490169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:11:99:0d:46:c1:84:60:c6:05:7b:95:66:
35:53:7c:bc:96:c8:db:8e:ac:9a:0c:ab:f7:a1:19:
0b:86:fa:55:6f:cd:70:d9:c0:9d:1f:d1:d5:93:fe:
5b:88:90:44:b2:ba:65:b1:06:41:b4:be:2d:3e:8d:
4a:32:4c:fd:e2:c2:7d:ed:6a:b7:df:f3:24:26:fd:
04:51:15:6e:17:7e:1f:2a:d9:a8:e8:e5:84:86:ff:
18:ed:a6:c7:c3:af:ac:e8:e8:4d:6f:92:92:1e:d2:
68:f2:c7:ca:94:57:dd:9f:b1:d6:95:70:f1:23:8b:
c7:17:eb:e2:21:bd:0a:17:ac:ac:17:59:8a:59:bd:
5b:41:75:ab:95:75:22:7d:b0:a4:e9:1f:2b:8f:fb:
a6:e5:33:73:1b:b0:a7:82:fa:88:ac:f9:de:0f:3a:
09:d9:98:90:80:d7:fc:88:b3:0f:b5:a3:7a:e4:77:
5f:f6:7b:ef:e5:e1:a7:8f:e8:7b:45:27:dd:b9:9c:
32:b3:d0:55:c9:bc:3d:71:0a:57:82:0c:5b:fb:9c:
36:8d:55:8b:f3:d1:47:ca:b2:66:69:91:a1:e7:c5:
c0:68:dd:bb:82:32:eb:83:65:cf:84:54:3f:84:7a:
2a:ba:4b:46:3d:15:38:91:90:52:8b:50:85:f9:ee:
6a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A4:B8:8B:B9:60:58:96:58:4E:BC:3B:B4:E5:D0:47:55:49:01:69
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0c:95:b6:fa:43:df:80:77:2f:42:5f:92:3b:1d:2f:05:b6:
17:79:c6:c9:e9:4a:a0:8e:92:49:03:d2:b4:6d:a8:70:ac:52:
86:e4:08:88:2b:15:48:07:66:59:c0:d0:d9:f7:05:48:3e:75:
a5:d1:12:53:b5:c7:e7:94:ec:6e:08:79:64:27:5d:a1:9f:0f:
b7:c3:fb:8d:e7:d6:3b:22:e6:f6:d5:fe:96:ca:cf:b6:b4:2c:
22:64:c2:4d:01:26:43:0e:11:c5:ab:d0:62:cf:b6:66:03:b2:
47:13:c5:76:ca:75:97:9d:47:ee:13:fe:93:22:c6:e3:5b:59:
47:b8:aa:a1:39:40:76:70:8f:93:50:6d:a2:6a:1a:a8:40:a8:
98:05:55:94:dc:79:08:cf:62:94:06:b8:97:fa:2e:44:6c:cc:
a0:aa:95:16:ab:0a:ac:0b:32:fa:49:5a:fe:4b:a9:8f:cf:11:
aa:bc:8f:7f:15:e8:6d:a4:b9:af:df:39:b5:23:8d:33:db:0f:
25:66:4a:8d:2b:ad:49:b0:c9:dd:cb:fa:84:ab:3e:b8:37:41:
28:c5:b6:b4:31:d4:05:90:19:6d:d7:37:7e:dd:ff:20:68:8f:
89:73:7c:69:a8:23:28:3d:ce:4d:19:11:f3:7c:72:f8:76:72:
b5:64:f4:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeBoDSTwife0EfuGltYqLdMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDgxZGQ5MGQxMDBiZDViYzIzYzA0YjEwYzBhODQzMWNj
OWE1YjUwHhcNMjUwNjE4MDYwMDQ5WhcNMjUwNjE5MDYwMDQ5WjAzMTEwLwYDVQQD
Eyg4ZmE0Yjg4YmI5NjA1ODk2NTg0ZWJjM2JiNGU1ZDA0NzU1NDkwMTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7gRmQ1GwYRgxgV7lWY1U3y8lsjb
jqyaDKv3oRkLhvpVb81w2cCdH9HVk/5biJBEsrplsQZBtL4tPo1KMkz94sJ97Wq3
3/MkJv0EURVuF34fKtmo6OWEhv8Y7abHw6+s6OhNb5KSHtJo8sfKlFfdn7HWlXDx
I4vHF+viIb0KF6ysF1mKWb1bQXWrlXUifbCk6R8rj/um5TNzG7CngvqIrPneDzoJ
2ZiQgNf8iLMPtaN65Hdf9nvv5eGnj+h7RSfduZwys9BVybw9cQpXggxb+5w2jVWL
89FHyrJmaZGh58XAaN27gjLrg2XPhFQ/hHoquktGPRU4kZBSi1CF+e5q6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+kuIu5YFiWWE68O7Tl0EdVSQFpMB8GA1UdIwQY
MBaAFHJIHdkNEAvVvCPASxDAqEMcyaW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2Qt
ZjE5OTBiMGM3MDVhLzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2QtZjE5OTBiMGM3MDVh
LzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQyVtvpD
34B3L0JfkjsdLwW2F3nGyelKoI6SSQPStG2ocKxShuQIiCsVSAdmWcDQ2fcFSD51
pdESU7XH55Tsbgh5ZCddoZ8Pt8P7jefWOyLm9tX+lsrPtrQsImTCTQEmQw4RxavQ
Ys+2ZgOyRxPFdsp1l51H7hP+kyLG41tZR7iqoTlAdnCPk1BtomoaqEComAVVlNx5
CM9ilAa4l/ouRGzMoKqVFqsKrAsy+kla/kupj88RqryPfxXobaS5r985tSONM9sP
JWZKjSutSbDJ3cv6hKs+uDdBKMW2tDHUBZAZbdc3ft3/IGiPiXN8aagjKD3OTRkR
83xy+HZytWT0uw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 11:46:46 2025 by rpki-client