Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
File: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json)
Hash identifier: WAQ+JG6QH86e0X0pT2+S000hSy+tmeNxaM5bomrrs3s=
Subject key identifier: 77:9D:41:4D:1A:FA:AD:0F:C5:DE:6F:27:C9:A1:DB:3F:2C:AB:7B:14
Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Certificate serial: 0196794433116288F349842B0F2BD535AA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
Manifest number: 1169
Signing time: Sun 27 Apr 2025 22:00:34 +0000
Manifest this update: Sun 27 Apr 2025 22:00:34 +0000
Manifest next update: Mon 28 Apr 2025 22:00:34 +0000
Files and hashes: 1: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: Yeu+i2qwIKw6jZ7KmxhrxCy0C8nF5JDP9r/2pcdNENk=)
2: h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa (hash: h0MwBLTN+JJQsx/mfZTZMMTWn2GxCEc+/y4Gt6r0rFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:33:11:62:88:f3:49:84:2b:0f:2b:d5:35:aa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Validity
Not Before: Apr 27 22:00:34 2025 GMT
Not After : Apr 28 22:00:34 2025 GMT
Subject: CN=779d414d1afaad0fc5de6f27c9a1db3f2cab7b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:5e:2b:61:e2:ee:13:f1:a3:33:59:38:d6:
b1:f8:89:c9:cb:cc:b2:3b:9c:24:4a:c9:45:ae:86:
66:f0:49:87:c8:69:5e:6b:7f:7b:88:c4:c7:e7:8d:
76:f6:83:b7:f3:94:22:e5:d1:bb:2d:3d:33:4a:28:
77:7c:f1:05:04:69:e1:85:e2:64:b8:ab:b7:72:e4:
9f:0e:79:e7:85:10:79:e9:5f:5a:13:c3:de:55:e6:
90:a4:dd:af:c5:d0:5f:8a:91:6b:bf:ed:7f:b9:68:
93:cc:9a:5e:9e:dc:ad:2a:80:96:0c:13:3f:b3:82:
a1:70:85:83:13:5e:15:f8:a7:59:11:1c:28:b2:f7:
91:71:9e:39:5e:bd:34:85:ea:d8:95:31:01:31:56:
b0:5d:2c:f7:20:a5:cc:9c:fa:7e:51:a4:07:fd:38:
82:9e:a1:6f:93:54:1c:d4:f0:cb:c8:33:4e:35:11:
d7:67:9d:32:98:64:ea:7b:13:fd:c1:f9:5a:86:58:
88:0c:be:4c:5e:da:e7:e0:80:d0:d5:22:13:01:fd:
9c:c9:3c:52:9f:05:22:a0:53:75:8d:66:e4:41:ca:
0c:70:0f:5b:25:ce:28:f7:05:0a:87:1d:4a:37:1c:
b8:b9:10:f4:9a:1a:bf:ff:f1:00:9a:9b:38:f1:70:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9D:41:4D:1A:FA:AD:0F:C5:DE:6F:27:C9:A1:DB:3F:2C:AB:7B:14
X509v3 Authority Key Identifier:
keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d4:e8:e2:2c:74:f0:d4:36:d1:fb:5f:db:13:6e:c3:95:b1:
3a:20:3f:04:84:87:82:30:87:8b:cb:3a:8c:1e:ed:13:24:fb:
d0:bf:80:51:25:6d:1a:15:31:69:b5:42:f2:02:5b:c1:e8:6b:
99:bf:34:8e:2e:ed:b2:b4:3f:5c:58:6d:03:fe:6a:9f:df:7a:
4e:fe:99:f8:53:3f:15:68:ad:dc:9c:05:65:45:52:6a:8c:86:
a8:17:16:23:d2:ce:c7:77:a8:3e:18:85:95:f0:11:7c:ff:3a:
95:0f:4e:7f:57:1f:76:f4:80:87:74:5d:9e:3b:0f:74:19:89:
c9:b8:f1:2a:ab:c1:56:1e:22:27:54:b0:93:49:46:7d:89:56:
f0:94:95:21:e1:01:bb:84:5f:24:0a:35:e7:b8:05:6d:48:40:
e9:35:f8:57:11:66:2a:9e:c2:a9:50:79:90:22:63:73:02:fc:
d9:f8:7e:81:90:cf:98:4f:cb:da:b2:90:81:e7:be:80:1c:41:
2b:08:82:7f:d0:12:b1:be:1f:d7:95:1f:22:76:ca:cf:53:27:
e5:ae:db:d0:25:19:cd:65:19:3c:2d:b3:8b:04:c0:3a:00:d6:
9e:59:aa:d5:6d:2d:b3:af:5d:53:82:10:d8:c8:ad:14:27:d5:
0c:f6:6a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:12:08 2025 by rpki-client