Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
File: ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json)
Hash identifier: JBDnKYmlet+4fpCK0NVqICGMpfLwd9GhQSf90dDncG4=
Subject key identifier: 20:1D:1D:C7:87:BC:FD:B7:43:66:38:75:09:8E:19:D3:61:76:8D:E1
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Certificate issuer: /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial: 01976F62A16123AA30856609CC42D59D5A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
Manifest number: 07F4
Signing time: Sat 14 Jun 2025 17:00:24 +0000
Manifest this update: Sat 14 Jun 2025 17:00:24 +0000
Manifest next update: Sun 15 Jun 2025 17:00:24 +0000
Files and hashes: 1: XeS-j2IYyupPYwAd3k1rQhL0Pjk.roa (hash: LaZnavonJdxkwg+OL44y91TnIY6G41jXIPEjOAmHc4s=)
2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: I/mp+Qrhp1IE+g4KLPUvKQn4sLHxqqLn2t3pLU3SN4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:a1:61:23:aa:30:85:66:09:cc:42:d5:9d:5a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Validity
Not Before: Jun 14 17:00:24 2025 GMT
Not After : Jun 15 17:00:24 2025 GMT
Subject: CN=201d1dc787bcfdb743663875098e19d361768de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:ac:1d:da:18:0b:e9:bf:cf:e5:cc:49:88:
8b:94:76:38:27:2f:01:cb:ca:6d:b5:57:2b:91:06:
0f:23:8e:e1:74:82:b5:a8:fd:7b:9f:9c:3b:8a:7b:
10:d7:eb:ff:52:af:59:ae:93:0d:a1:5e:6f:01:07:
8e:2f:0d:74:64:a3:2d:48:52:b7:96:bf:02:43:a7:
3e:6d:b6:b7:48:db:44:62:7f:36:73:27:30:d6:9d:
a0:0a:20:1a:fc:08:89:6a:6e:d3:2d:78:32:7d:4c:
08:dd:ac:b7:19:f5:ad:f7:c8:3b:5a:fb:c9:29:ae:
22:52:37:ad:0c:25:83:17:0b:11:44:61:f5:ee:b4:
ad:2c:51:0e:a5:40:00:e1:ae:c6:c5:dd:6a:1f:83:
fb:30:cd:30:bd:94:26:fd:b3:6d:cf:f9:02:19:bd:
25:6d:04:08:f5:75:cf:f6:62:81:55:ec:f3:ab:a6:
64:78:69:45:17:4b:0f:88:1b:16:13:97:e1:52:7b:
1c:40:b9:1c:85:7f:6b:d6:de:dd:ba:5d:08:bb:11:
c2:f7:bb:e0:d0:09:90:c2:59:ed:87:64:59:a4:63:
4c:e4:e8:ee:8c:40:7d:a1:d8:c2:fe:e3:d2:12:15:
a1:41:d2:78:8f:bc:91:41:56:18:2d:c4:fe:ac:9b:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1D:1D:C7:87:BC:FD:B7:43:66:38:75:09:8E:19:D3:61:76:8D:E1
X509v3 Authority Key Identifier:
keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:20:d4:61:20:44:0e:6a:6d:73:f4:a4:6c:d5:b1:3a:26:ef:
10:be:f3:82:db:31:2e:7e:21:08:93:43:99:f1:d1:92:87:95:
a7:88:a2:b4:11:16:df:8d:71:33:d3:42:39:b9:02:a5:b3:a5:
04:40:ab:da:ee:0b:e2:35:69:34:7a:40:91:2b:db:ac:65:c6:
b7:35:66:e2:ad:6a:95:39:17:01:9a:c3:7a:a9:e9:44:57:37:
fc:31:4d:2f:2c:ed:08:eb:36:94:5d:c1:55:c0:70:01:78:10:
bd:6b:86:96:a1:f0:86:91:52:00:d9:d3:51:ad:27:fb:6d:35:
29:fa:71:30:e9:b6:bd:ac:92:05:43:10:ff:89:c9:3d:56:ca:
17:e9:2f:b7:93:24:4d:b6:2a:a7:f8:f6:a9:b6:27:42:5e:b6:
46:91:03:37:7b:ff:7a:03:4b:e8:8f:f3:68:b6:b1:d3:1c:78:
d3:7a:9d:17:7f:05:28:e2:52:81:04:dc:db:09:b0:c4:77:3e:
b9:a4:72:0a:1c:50:0c:f7:15:e2:d5:1f:99:b2:13:c8:3e:ac:
69:a8:47:47:f0:a3:c4:ae:a0:38:08:47:df:ff:83:69:36:6d:
34:59:d6:b3:36:a9:39:1b:84:c8:c3:3a:ff:b8:cf:80:7b:e4:
45:40:6b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:20:14 2025 by rpki-client