Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft (raw, json)
Hash identifier: CMYNPNxnWvfWx7QNe9Wk1YqkoLGsgfiUeZ0TycU9Tiw=
Subject key identifier: 57:62:73:D6:51:EE:38:F0:EB:D0:03:BF:CF:86:31:0F:C7:59:FF:65
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 01977941B5554516C681EC54191FB2BAFDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
Manifest number: 1597
Signing time: Mon 16 Jun 2025 15:00:38 +0000
Manifest this update: Mon 16 Jun 2025 15:00:38 +0000
Manifest next update: Tue 17 Jun 2025 15:00:38 +0000
Files and hashes: 1: CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl (hash: 6yCLnorGyiOntZPP1mHbC6g4FjsNNnAYWI19fBcsPoE=)
2: O5QhbWQn7dWKFexdmAB0vuhHoFI.roa (hash: /pwNLph/P93dkfSWFLVF4Own/TwxuOW3vKc23GnS0Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:b5:55:45:16:c6:81:ec:54:19:1f:b2:ba:fd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Jun 16 15:00:38 2025 GMT
Not After : Jun 17 15:00:38 2025 GMT
Subject: CN=576273d651ee38f0ebd003bfcf86310fc759ff65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:49:58:59:a9:1e:c6:8f:2a:9f:0c:0c:73:
1a:e5:0c:67:36:62:3b:c5:2a:e9:2d:12:97:77:bc:
0e:3e:78:86:49:fc:a1:7f:65:b4:c2:d9:c2:e0:76:
4b:44:99:b8:93:2f:ad:24:00:d4:03:60:7f:cb:7f:
b0:40:d8:8e:bc:a5:24:42:30:53:9b:ed:ee:f3:6a:
1f:d6:70:2d:aa:5a:5b:60:2e:99:94:84:02:ae:18:
35:ba:88:1b:20:9f:28:1a:b3:95:db:0a:8b:a4:48:
e0:ff:7b:97:34:77:85:31:ad:b5:d6:2a:38:87:c9:
66:5c:ad:44:be:7c:b7:eb:33:f0:72:18:eb:f5:5b:
32:3f:f9:e2:89:de:4d:b9:fb:fd:66:9d:02:b2:23:
91:c9:6c:56:41:b9:db:c1:1d:f3:97:c1:57:cc:7d:
5c:d3:c9:94:4c:1e:d6:e1:8a:2d:3c:47:8c:c7:60:
4f:61:09:31:c5:ee:13:1f:3b:48:06:92:11:50:3f:
52:d9:a8:34:33:97:78:aa:15:80:87:b3:74:39:94:
11:af:9b:6a:a1:d1:05:aa:c6:37:91:6f:e2:78:f5:
4e:31:f2:74:b8:3a:2a:7f:28:20:7c:15:4b:5c:ba:
c6:07:fd:f3:2d:cc:50:d0:cc:0c:82:c3:77:ff:44:
34:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:62:73:D6:51:EE:38:F0:EB:D0:03:BF:CF:86:31:0F:C7:59:FF:65
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b9:ab:04:2a:a3:b3:35:db:b9:b3:d0:97:50:70:0a:f7:69:
22:a4:cf:ec:37:0a:c0:f4:10:32:2c:4b:a2:87:7c:20:18:c4:
ab:98:97:e0:77:0e:da:9c:7a:a5:4c:3c:6f:5e:37:af:7f:cb:
77:1a:fc:fb:6a:8a:36:95:12:09:66:5f:09:b9:ba:54:05:79:
63:1e:97:db:11:62:c2:5e:c4:bb:49:e1:c8:84:b2:f1:7d:93:
ae:c3:b9:51:7d:cb:b6:a7:34:26:b2:94:97:64:f5:90:6c:ac:
35:18:82:07:dd:b6:6d:c1:07:53:f1:d3:e3:b8:35:64:14:64:
3e:91:d9:9b:72:ad:11:d8:0c:d2:0a:e9:e5:d1:8d:08:2a:eb:
4c:b9:37:92:34:a2:1a:60:a0:6f:9f:ae:1a:78:e1:91:c7:30:
9e:f6:58:34:60:6b:05:8b:67:c6:5c:0a:94:c1:70:5b:58:47:
c4:34:61:07:12:c8:2b:77:eb:c9:28:22:ec:96:49:4a:9a:32:
57:dc:08:11:89:34:c9:ef:e1:f0:32:bf:33:d0:42:8e:5a:4f:
28:07:68:e3:3b:8a:cb:49:53:67:c4:06:29:67:79:6b:cb:45:
a9:a2:5a:97:9a:f9:7d:8c:13:6f:10:a6:79:e6:f9:38:3d:4e:
d3:cb:56:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5QbVVRRbGgexUGR+yuv24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDFhOTI1ZjhkNjY4NGM4NjEwN2QyNzU2YjRhYTkzODgx
ZjAyYWUwHhcNMjUwNjE2MTUwMDM4WhcNMjUwNjE3MTUwMDM4WjAzMTEwLwYDVQQD
Eyg1NzYyNzNkNjUxZWUzOGYwZWJkMDAzYmZjZjg2MzEwZmM3NTlmZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEZJWFmpHsaPKp8MDHMa5QxnNmI7
xSrpLRKXd7wOPniGSfyhf2W0wtnC4HZLRJm4ky+tJADUA2B/y3+wQNiOvKUkQjBT
m+3u82of1nAtqlpbYC6ZlIQCrhg1uogbIJ8oGrOV2wqLpEjg/3uXNHeFMa211io4
h8lmXK1Evny36zPwchjr9VsyP/niid5Nufv9Zp0CsiORyWxWQbnbwR3zl8FXzH1c
08mUTB7W4YotPEeMx2BPYQkxxe4THztIBpIRUD9S2ag0M5d4qhWAh7N0OZQRr5tq
odEFqsY3kW/iePVOMfJ0uDoqfyggfBVLXLrGB/3zLcxQ0MwMgsN3/0Q00QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdic9ZR7jjw69ADv8+GMQ/HWf9lMB8GA1UdIwQY
MBaAFApBqSX41mhMhhB9J1a0qpOIHwKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tHcEpmaldhRXlHRUgwblZyU3FrNGdmQXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMzdkMWQtZDRmYi00OTZjLWFmNDkt
MzQyMDY4NGM3ZTQxLzEvQ2tHcEpmaldhRXlHRUgwblZyU3FrNGdmQXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lMzdkMWQtZDRmYi00OTZjLWFmNDktMzQyMDY4NGM3ZTQx
LzEvQ2tHcEpmaldhRXlHRUgwblZyU3FrNGdmQXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7mrBCqj
szXbubPQl1BwCvdpIqTP7DcKwPQQMixLood8IBjEq5iX4HcO2px6pUw8b143r3/L
dxr8+2qKNpUSCWZfCbm6VAV5Yx6X2xFiwl7Eu0nhyISy8X2TrsO5UX3Ltqc0JrKU
l2T1kGysNRiCB922bcEHU/HT47g1ZBRkPpHZm3KtEdgM0grp5dGNCCrrTLk3kjSi
GmCgb5+uGnjhkccwnvZYNGBrBYtnxlwKlMFwW1hHxDRhBxLIK3frySgi7JZJSpoy
V9wIEYk0ye/h8DK/M9BCjlpPKAdo4zuKy0lTZ8QGKWd5a8tFqaJal5r5fYwTbxCm
eeb5OD1O08tWRw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:14:07 2025 by rpki-client