Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: JGMs9VJ5NOVn/HqJs0h9yflxcn9t+2GacMe77mctJ24=
Subject key identifier: 36:D4:0E:71:20:DD:98:E3:28:44:20:65:24:F6:B6:77:AE:79:EB:54
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 01976A05EC471D7673A01BE56F81238CFB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 16:01:02 +0000
Manifest this update: Fri 13 Jun 2025 16:01:02 +0000
Manifest next update: Sat 14 Jun 2025 16:01:02 +0000
Files and hashes: 1: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: PPBTrk7BLC+aCcoV8ay0j7IGAAG/ePzhCy6T96M3MY4=)
2: tICvfkE-wd7ljGY6sghDtS75C50.roa (hash: EofEa7cxTHv8xJhHBChQPwYV0i7JZnqjIowIrpKVJDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:ec:47:1d:76:73:a0:1b:e5:6f:81:23:8c:fb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Jun 13 16:01:02 2025 GMT
Not After : Jun 14 16:01:02 2025 GMT
Subject: CN=36d40e7120dd98e32844206524f6b677ae79eb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:6f:b0:74:33:3b:9d:ab:5a:9c:f1:2a:25:
69:e8:2e:35:0c:da:2c:c2:94:91:60:2d:1d:ee:59:
28:8f:72:52:cd:6e:ca:54:73:a5:f6:38:aa:98:dd:
6c:20:34:39:86:67:bd:22:df:82:2c:f7:d3:10:54:
f0:76:37:68:a7:3a:da:53:4b:75:8f:78:6a:9a:61:
f4:a3:54:fc:3f:86:82:5e:4d:a6:83:b1:dd:08:11:
e6:a5:cd:1a:77:22:d6:37:8e:06:e9:1b:b7:dc:3b:
9d:2d:78:ec:f0:c1:05:82:f5:ae:d9:81:9c:c5:e6:
ad:31:8d:33:11:2d:67:59:c4:61:80:86:cf:87:cd:
53:8b:c1:f4:8a:08:e6:e2:fc:9c:56:cd:10:a9:38:
27:7c:6b:62:31:2a:3e:16:94:e9:04:c6:23:db:82:
97:87:3d:a7:21:c2:5e:b7:69:2a:fb:1e:bb:ce:b6:
2f:b8:cd:2e:17:49:71:6a:4e:22:23:3a:28:d3:3c:
58:48:b1:32:50:6d:a0:e2:10:33:94:59:1d:d5:0d:
3a:94:b4:6c:92:9b:7b:b3:8f:03:ee:a7:d8:57:cd:
76:78:5a:d1:de:30:4f:c6:56:1c:1b:6b:f2:fd:8a:
f9:fd:34:94:35:0c:32:8f:21:d1:cc:0b:98:ed:62:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D4:0E:71:20:DD:98:E3:28:44:20:65:24:F6:B6:77:AE:79:EB:54
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:68:e0:40:16:cf:58:21:e3:d0:ff:68:4d:00:cb:3e:4f:7e:
b3:25:48:a6:59:3b:f7:77:50:6d:d4:7a:94:0c:e6:cd:2e:2b:
04:38:b5:6a:42:74:cd:6c:44:79:7e:d7:30:05:e7:40:75:50:
82:c2:78:51:7b:32:a5:5b:1b:b3:81:8e:34:06:95:5a:00:7d:
51:09:1c:52:ba:3f:12:c4:31:ed:7b:88:59:ed:2b:86:b4:33:
b9:63:ae:ff:26:0d:8f:86:f8:19:42:31:a7:6a:60:bb:4f:f0:
e2:3d:da:dd:79:d3:27:7f:98:ac:32:24:18:8c:50:c3:b4:b4:
cc:31:90:53:4f:d8:53:34:bd:a9:86:f8:dd:cb:3a:82:7a:37:
63:9f:06:24:e4:2b:42:80:04:a0:63:c2:ab:a4:85:55:58:01:
0f:af:ec:be:53:fb:ff:a3:13:0f:ea:c8:27:ac:b4:3f:54:c3:
f6:39:6f:b4:22:24:f7:75:e2:e5:ae:81:2c:20:52:22:12:be:
94:ee:14:cd:eb:43:ca:cd:6c:22:d3:2f:3f:5f:83:d3:cb:5e:
70:29:36:c0:52:15:51:f2:a8:58:6a:ce:ab:72:b0:91:57:95:
6e:75:b5:fd:c5:7f:66:cb:0c:bf:b7:41:27:ee:c7:03:a9:01:
21:d2:0d:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBexHHXZzoBvlb4EjjPtHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGJkMWQzMGY3MjM1Y2Q3MTczOWMwNDIzMTBkYzI2MDgw
NzM4ZjYwHhcNMjUwNjEzMTYwMTAyWhcNMjUwNjE0MTYwMTAyWjAzMTEwLwYDVQQD
EygzNmQ0MGU3MTIwZGQ5OGUzMjg0NDIwNjUyNGY2YjY3N2FlNzllYjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuadvsHQzO52rWpzxKiVp6C41DNos
wpSRYC0d7lkoj3JSzW7KVHOl9jiqmN1sIDQ5hme9It+CLPfTEFTwdjdopzraU0t1
j3hqmmH0o1T8P4aCXk2mg7HdCBHmpc0adyLWN44G6Ru33DudLXjs8MEFgvWu2YGc
xeatMY0zES1nWcRhgIbPh81Ti8H0igjm4vycVs0QqTgnfGtiMSo+FpTpBMYj24KX
hz2nIcJet2kq+x67zrYvuM0uF0lxak4iIzoo0zxYSLEyUG2g4hAzlFkd1Q06lLRs
kpt7s48D7qfYV812eFrR3jBPxlYcG2vy/Yr5/TSUNQwyjyHRzAuY7WJSwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbUDnEg3ZjjKEQgZST2tneueetUMB8GA1UdIwQY
MBaAFApL0dMPcjXNcXOcBCMQ3CYIBzj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEt
Mzg4NDQzZDVmMDBmLzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEtMzg4NDQzZDVmMDBm
LzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGjgQBbP
WCHj0P9oTQDLPk9+syVIplk793dQbdR6lAzmzS4rBDi1akJ0zWxEeX7XMAXnQHVQ
gsJ4UXsypVsbs4GONAaVWgB9UQkcUro/EsQx7XuIWe0rhrQzuWOu/yYNj4b4GUIx
p2pgu0/w4j3a3XnTJ3+YrDIkGIxQw7S0zDGQU0/YUzS9qYb43cs6gno3Y58GJOQr
QoAEoGPCq6SFVVgBD6/svlP7/6MTD+rIJ6y0P1TD9jlvtCIk93Xi5a6BLCBSIhK+
lO4UzetDys1sItMvP1+D08tecCk2wFIVUfKoWGrOq3KwkVeVbnW1/cV/ZssMv7dB
J+7HA6kBIdINXA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 20:14:12 2025 by rpki-client