Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: w0IxODxtOttxfoP/PDm5fgtZrVB5CjDSCdoQKgrpzQU=
Subject key identifier: FC:C8:B0:F0:CE:D3:58:0D:38:49:8B:10:7D:9C:6C:18:1C:CD:67:98
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 01976C2B1F588BEB4DEFB578E88385EA44F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 14CF
Signing time: Sat 14 Jun 2025 02:00:54 +0000
Manifest this update: Sat 14 Jun 2025 02:00:54 +0000
Manifest next update: Sun 15 Jun 2025 02:00:54 +0000
Files and hashes: 1: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (hash: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: xkiSG3+cbdEpCZZFWOPlydnYMEF3/f0jlwz66430ue0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:1f:58:8b:eb:4d:ef:b5:78:e8:83:85:ea:44:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Jun 14 02:00:54 2025 GMT
Not After : Jun 15 02:00:54 2025 GMT
Subject: CN=fcc8b0f0ced3580d38498b107d9c6c181ccd6798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:86:ef:1a:aa:63:37:be:e6:1b:cb:b9:18:31:
6f:08:2f:21:4b:b4:f8:dc:c6:50:f8:de:81:e3:d2:
ec:e3:f5:bd:66:05:7c:5d:f6:f1:ca:84:64:a1:b9:
8b:a8:58:92:05:a8:98:fc:e6:10:5a:34:93:c9:ec:
ee:f9:bf:77:3f:cf:54:98:8f:e2:35:12:77:81:64:
6e:b3:f5:7d:f9:3d:57:ea:c1:8f:02:10:7f:53:69:
f4:73:43:96:ed:b0:3a:1d:27:b4:a3:7e:1b:d6:f0:
57:cf:38:4e:50:1b:8c:db:42:7c:a3:64:ed:4e:51:
db:0e:df:29:89:c4:ab:fc:02:7e:3d:a3:c8:f0:16:
b0:17:cd:53:ee:a6:05:65:bd:20:ef:f7:2c:f5:7d:
e3:47:9a:5b:f9:19:3d:7b:b9:a7:b0:51:d0:42:ef:
71:97:03:95:8c:af:90:ac:a2:9a:f0:13:37:71:ba:
f9:19:2e:ec:7e:b8:86:d4:65:83:a5:fb:fd:d0:10:
da:5c:92:09:66:4c:c6:ec:b6:c7:3c:53:37:63:4a:
99:db:fa:65:54:79:07:f2:0a:00:b2:56:d1:45:c9:
5e:a0:b2:f6:dc:3c:f5:fb:6b:2d:7b:e0:24:c9:5a:
2d:9e:06:cf:6e:55:b3:70:81:e1:39:7b:32:14:cb:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C8:B0:F0:CE:D3:58:0D:38:49:8B:10:7D:9C:6C:18:1C:CD:67:98
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:57:a4:8f:bd:5f:6e:cd:2b:2d:6c:10:34:f3:38:69:88:27:
42:9d:2d:34:de:bb:60:3d:e2:d8:7e:e6:74:ea:40:9b:d4:b3:
85:22:a4:4d:75:a6:ae:dd:fa:4c:52:d9:7f:d2:e2:a6:0f:a6:
84:27:93:88:11:66:97:35:02:da:20:87:9c:90:1c:b8:b1:34:
c6:31:bc:d6:f3:f2:4f:e4:1a:f3:6c:5e:c5:12:d8:c5:3e:8e:
41:34:2c:9d:a8:58:d0:28:82:14:1a:d4:9f:e5:ef:68:e6:31:
76:4b:9b:49:7a:dd:97:59:92:56:97:88:06:e1:aa:9d:49:46:
26:d4:64:af:c6:e3:bb:25:e3:dd:78:07:e0:e6:0d:05:68:b5:
22:02:59:f0:ca:1a:0c:b0:ff:e7:2d:c5:32:bd:46:ce:9e:38:
f8:a1:0a:26:60:97:bc:a1:d3:5e:15:36:97:46:44:9a:6e:00:
74:ec:d8:3d:0a:c2:2c:b2:0f:43:4d:34:92:8e:4b:c3:7f:13:
c7:99:da:58:74:4c:4c:e5:f1:93:f7:64:0b:36:c8:4d:b6:21:
07:13:66:76:90:e3:6c:17:56:9f:33:51:50:dc:74:be:1d:d9:
0e:b4:f1:21:14:8b:8c:cf:9a:1f:04:31:a4:af:8d:5b:d1:8c:
77:91:8f:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKx9Yi+tN77V46IOF6kT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDI2YzNkMTFjOWYyNGFjYzBhMWQ4NDU0Y2JjOTYwNDg2
NWE4MDkwHhcNMjUwNjE0MDIwMDU0WhcNMjUwNjE1MDIwMDU0WjAzMTEwLwYDVQQD
EyhmY2M4YjBmMGNlZDM1ODBkMzg0OThiMTA3ZDljNmMxODFjY2Q2Nzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIbvGqpjN77mG8u5GDFvCC8hS7T4
3MZQ+N6B49Ls4/W9ZgV8XfbxyoRkobmLqFiSBaiY/OYQWjSTyezu+b93P89UmI/i
NRJ3gWRus/V9+T1X6sGPAhB/U2n0c0OW7bA6HSe0o34b1vBXzzhOUBuM20J8o2Tt
TlHbDt8picSr/AJ+PaPI8BawF81T7qYFZb0g7/cs9X3jR5pb+Rk9e7mnsFHQQu9x
lwOVjK+QrKKa8BM3cbr5GS7sfriG1GWDpfv90BDaXJIJZkzG7LbHPFM3Y0qZ2/pl
VHkH8goAslbRRcleoLL23Dz1+2ste+AkyVotngbPblWzcIHhOXsyFMvBwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzIsPDO01gNOEmLEH2cbBgczWeYMB8GA1UdIwQY
MBaAFHJCbD0RyfJKzAodhFTLyWBIZagJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYt
YmU5MGIwZmQxZjc4LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYtYmU5MGIwZmQxZjc4
LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlekj71f
bs0rLWwQNPM4aYgnQp0tNN67YD3i2H7mdOpAm9SzhSKkTXWmrt36TFLZf9Lipg+m
hCeTiBFmlzUC2iCHnJAcuLE0xjG81vPyT+Qa82xexRLYxT6OQTQsnahY0CiCFBrU
n+XvaOYxdkubSXrdl1mSVpeIBuGqnUlGJtRkr8bjuyXj3XgH4OYNBWi1IgJZ8Moa
DLD/5y3FMr1Gzp44+KEKJmCXvKHTXhU2l0ZEmm4AdOzYPQrCLLIPQ000ko5Lw38T
x5naWHRMTOXxk/dkCzbITbYhBxNmdpDjbBdWnzNRUNx0vh3ZDrTxIRSLjM+aHwQx
pK+NW9GMd5GPhA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:18:31 2025 by rpki-client