Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: 3JZb2Ey3X5VMnZTdSXgQndG6hRPCT/D2j3KtWJkwWmw=
Subject key identifier: A0:80:23:1A:B5:B2:15:52:1C:FC:D4:0C:6A:3E:42:68:38:1B:19:71
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 01976C98941BC33DD2D934E24FB67C1A991E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 04:00:27 +0000
Manifest this update: Sat 14 Jun 2025 04:00:27 +0000
Manifest next update: Sun 15 Jun 2025 04:00:27 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: pP6wKnkC7rSgut3bRTqpnieCc3TMRVL+iazfSTqCxkI=)
2: yW1cS9Mx29vTOamtTRsFT6bLIXw.roa (hash: PZBuxnii3Pq+stD6k3qQUstIcPbrvHDexZJKpw32ONQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:94:1b:c3:3d:d2:d9:34:e2:4f:b6:7c:1a:99:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Jun 14 04:00:27 2025 GMT
Not After : Jun 15 04:00:27 2025 GMT
Subject: CN=a080231ab5b215521cfcd40c6a3e4268381b1971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:b1:ab:b6:cd:ac:2b:a1:26:50:05:3d:44:
56:b4:6f:4d:00:fa:c6:d2:90:f5:31:83:d0:13:13:
c1:09:89:6b:b8:06:4a:e6:38:90:0c:a9:c2:15:24:
78:12:c0:a4:44:b9:ab:d0:05:8e:12:1d:40:9b:12:
c3:5e:91:52:be:8c:5c:c9:8b:8d:53:f6:ad:36:d4:
c2:d5:a5:0d:2c:9a:f8:0a:27:e5:da:41:93:d4:f1:
a6:eb:05:ba:52:60:4c:ad:73:92:0c:5a:25:13:b6:
5e:aa:84:27:15:76:24:f1:43:84:60:3d:55:dc:49:
ef:41:e4:27:ac:34:fc:28:2e:80:70:b7:f8:fb:db:
9e:e5:dd:05:19:03:b5:bb:ab:26:f3:c0:19:45:fd:
1b:2b:63:07:e5:e4:72:31:55:75:9f:7e:10:66:97:
48:f9:03:6c:47:9f:b2:87:ae:67:c0:02:82:d4:bd:
09:8d:90:33:f9:ee:9d:23:74:0f:9b:4e:70:7e:c4:
49:e7:81:2e:05:95:7a:34:60:a9:49:87:c6:8c:3b:
f1:4d:08:9c:f0:b5:96:5a:94:32:b9:84:79:f2:d6:
38:cc:19:06:56:9e:ee:a8:38:c1:00:ef:1e:fd:aa:
30:51:87:2e:88:31:71:26:2b:8d:3b:4c:7f:5b:78:
83:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:80:23:1A:B5:B2:15:52:1C:FC:D4:0C:6A:3E:42:68:38:1B:19:71
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3a:2f:59:2e:df:09:6d:80:47:9b:4f:b1:2a:51:6e:c6:9e:
bb:07:a4:0a:84:21:65:88:67:38:75:02:32:28:c4:4e:74:df:
ed:4d:b4:e7:ca:b0:87:3d:6f:d4:2b:90:2a:f3:ef:ac:d1:71:
bb:3f:8b:7b:c5:1e:38:e7:eb:90:b5:3f:68:dc:08:9a:50:28:
b5:e5:e2:53:e5:26:de:8c:1f:b3:64:c6:3c:bc:e9:58:f8:42:
21:14:15:94:d1:64:b1:57:e4:6f:cd:c2:d5:2e:c0:f4:28:95:
00:7a:4f:71:40:c0:ef:40:ab:d0:be:b4:4b:c8:85:3f:9b:93:
06:97:4a:b4:77:bc:ae:05:6f:2f:0e:3c:5e:8f:e6:a8:d7:32:
c5:6b:e8:18:7b:e8:c3:98:1e:53:6a:39:8f:85:42:cb:49:57:
f0:56:45:9f:a2:a1:8a:4e:27:98:d1:ad:fa:65:77:5f:8e:aa:
38:d6:97:3e:64:37:5b:e9:47:5d:bc:41:c6:c4:62:ed:1a:d1:
21:14:f5:73:ea:9b:e8:5f:12:d5:c5:0d:e8:7d:74:aa:6a:06:
ff:c0:71:43:84:36:e5:ee:ee:40:b8:22:31:b1:d3:bb:c6:ef:
10:4f:03:d3:82:ea:29:e8:2c:07:fd:37:c9:d3:0b:e7:5f:5f:
8e:6f:c2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:10:08 2025 by rpki-client