Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: CDQiz3x7MesbsUYMiCCm278t72hHPTz/oYvzXa2aguQ=
Subject key identifier: B9:78:17:F3:99:2F:3F:28:40:86:E3:D1:7B:CE:03:6C:06:AB:C5:15
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 01976D3DCE533F5E498EA527E35E00188DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 07:00:56 +0000
Manifest this update: Sat 14 Jun 2025 07:00:56 +0000
Manifest next update: Sun 15 Jun 2025 07:00:56 +0000
Files and hashes: 1: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: xess0ltC8V1UbV+PHeF65CZyQS1mZVKp00HQbNBYEIg=)
2: NYpGsgvZZnS43WLsZ6IiOuK1URk.roa (hash: 1DbDkDpg7L2mWH/maxc8wFOk6zRLCwxEnE3jGY7E3oU=)
3: hER6wRwe_hUZJ0u9RImVrBTy1as.roa (hash: iyJ20Ahzbr3qZY7vMtDGjDttWYIPJenArxH2H2QEoYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:ce:53:3f:5e:49:8e:a5:27:e3:5e:00:18:8d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Jun 14 07:00:56 2025 GMT
Not After : Jun 15 07:00:56 2025 GMT
Subject: CN=b97817f3992f3f284086e3d17bce036c06abc515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:5b:03:dc:48:3a:7b:10:55:06:92:8b:74:
ef:de:2f:1d:ea:25:60:ff:fb:e8:bb:6e:83:26:d3:
83:74:d6:1d:ea:2d:6f:59:74:ac:45:26:d3:8b:c3:
f6:65:0d:79:5b:d4:81:c2:d3:f7:eb:a0:ad:09:7b:
8a:0d:ab:d1:07:89:d4:e0:34:eb:d9:7a:1b:a4:e5:
20:2c:cb:bb:2e:83:20:4f:a8:9a:e9:c1:ec:b5:ec:
82:5b:ce:75:59:8a:19:4c:14:a8:91:fd:d7:ba:76:
60:35:b2:a9:80:65:7a:ed:0f:b7:df:f6:e4:dc:b0:
aa:40:80:ee:09:f5:4a:50:cf:36:d3:bd:f7:1a:f0:
29:51:f8:04:f3:b9:31:46:ea:31:12:36:82:11:d0:
5a:9f:47:f3:51:62:ca:35:06:b0:b7:0a:47:ea:87:
cd:4b:a8:d3:ed:c9:26:18:b2:a8:0f:bd:dd:46:39:
29:7c:3f:c0:b8:4a:de:1b:84:06:c6:9a:62:11:c8:
d0:5b:dc:ab:65:7f:81:72:e6:1a:6a:fa:f4:d9:70:
d5:e4:31:24:bc:c2:4c:a8:8c:8c:70:44:a4:6b:b6:
3d:98:fe:d0:b6:ae:c4:17:73:91:f8:90:02:3a:8e:
32:33:9f:43:e4:09:81:61:62:7c:35:da:fa:95:d5:
30:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:78:17:F3:99:2F:3F:28:40:86:E3:D1:7B:CE:03:6C:06:AB:C5:15
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:91:a1:0c:db:a8:b7:a9:f1:e3:9e:51:b6:10:ad:70:90:97:
e3:e4:e2:4d:a1:86:5c:12:1c:73:d0:f3:55:7a:a3:23:d1:dd:
b9:ae:85:50:89:5c:3e:76:0a:12:83:24:ab:52:fd:8d:96:68:
9d:77:41:31:4d:97:da:6b:fb:8b:91:35:9e:72:d3:df:15:e3:
da:f2:4e:63:11:98:3d:93:18:a6:28:63:20:0d:e0:b3:ab:31:
c5:40:ca:b3:b7:f6:f6:5a:65:0e:93:af:91:21:97:34:cb:0c:
d3:f6:9c:18:c8:48:fc:47:03:bb:f7:32:be:f4:e8:5f:30:cc:
83:c3:10:25:05:b0:d1:4d:7e:14:c0:68:42:7a:47:44:7f:01:
f3:a4:85:5e:ea:96:c1:d4:d9:4c:10:ff:3c:77:4d:0e:59:53:
fd:39:9a:e6:94:ec:11:75:f2:88:26:b3:0b:09:c3:a3:d8:f3:
b6:76:28:a1:2f:fd:fb:80:b6:10:fe:7e:e2:9a:18:91:e9:91:
46:b7:c0:57:c2:57:d5:72:14:f9:50:13:8e:ee:c9:f6:28:c7:
5b:89:64:c9:10:70:d4:75:41:bd:ca:80:56:a3:fa:51:35:a8:
fa:55:8d:80:52:33:92:08:c1:b4:9f:70:6f:e2:f9:3a:e7:35:
45:d3:fd:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPc5TP15JjqUn414AGI3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDFhNWEyYTE4MzM5NjI5Y2MxMzAzZTZkZWM4YmI2MDVk
ZGNhNjUwHhcNMjUwNjE0MDcwMDU2WhcNMjUwNjE1MDcwMDU2WjAzMTEwLwYDVQQD
EyhiOTc4MTdmMzk5MmYzZjI4NDA4NmUzZDE3YmNlMDM2YzA2YWJjNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n9bA9xIOnsQVQaSi3Tv3i8d6iVg
//vou26DJtODdNYd6i1vWXSsRSbTi8P2ZQ15W9SBwtP366CtCXuKDavRB4nU4DTr
2XobpOUgLMu7LoMgT6ia6cHsteyCW851WYoZTBSokf3XunZgNbKpgGV67Q+33/bk
3LCqQIDuCfVKUM820733GvApUfgE87kxRuoxEjaCEdBan0fzUWLKNQawtwpH6ofN
S6jT7ckmGLKoD73dRjkpfD/AuEreG4QGxppiEcjQW9yrZX+BcuYaavr02XDV5DEk
vMJMqIyMcESka7Y9mP7Qtq7EF3OR+JACOo4yM59D5AmBYWJ8Ndr6ldUwTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLl4F/OZLz8oQIbj0XvOA2wGq8UVMB8GA1UdIwQY
MBaAFApBpaKhgzlinMEwPm3si7YF3cplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kNDNjMmMtNzRlOS00N2Q0LWJmNjIt
ODBmN2ZkNmVhOWM5LzEvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kNDNjMmMtNzRlOS00N2Q0LWJmNjItODBmN2ZkNmVhOWM5
LzEvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJGhDNuo
t6nx455RthCtcJCX4+TiTaGGXBIcc9DzVXqjI9Hdua6FUIlcPnYKEoMkq1L9jZZo
nXdBMU2X2mv7i5E1nnLT3xXj2vJOYxGYPZMYpihjIA3gs6sxxUDKs7f29lplDpOv
kSGXNMsM0/acGMhI/EcDu/cyvvToXzDMg8MQJQWw0U1+FMBoQnpHRH8B86SFXuqW
wdTZTBD/PHdNDllT/Tma5pTsEXXyiCazCwnDo9jztnYooS/9+4C2EP5+4poYkemR
RrfAV8JX1XIU+VATju7J9ijHW4lkyRBw1HVBvcqAVqP6UTWo+lWNgFIzkgjBtJ9w
b+L5Ouc1RdP9Mw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:15:58 2025 by rpki-client