Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: eESgQ1EG55NhDmnSUwFtPIeEj/ngDdBioduLrr5PGa0=
Subject key identifier: C1:A8:70:2B:FE:D1:76:94:13:3A:AB:11:13:23:44:FF:33:59:BF:8E
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 01976FD145B38734B272BDA7A33DB888382E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 0536
Signing time: Sat 14 Jun 2025 19:01:15 +0000
Manifest this update: Sat 14 Jun 2025 19:01:15 +0000
Manifest next update: Sun 15 Jun 2025 19:01:15 +0000
Files and hashes: 1: V-Zw-R39fa3vjmQTK3pi-ruJAOM.roa (hash: svw00iQ8XqkVPen4oB7uX29LsRKx9ZNkxy68U1tQQ8A=)
2: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: byDI3Tq6hu30XttEBLXI/lfx3MwBO1H5JrbRk92+1PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:45:b3:87:34:b2:72:bd:a7:a3:3d:b8:88:38:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Jun 14 19:01:15 2025 GMT
Not After : Jun 15 19:01:15 2025 GMT
Subject: CN=c1a8702bfed17694133aab11132344ff3359bf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:96:92:7c:c8:be:1a:47:db:1f:94:cd:7d:
9c:4e:c6:9e:45:7a:c4:92:58:97:fb:a5:ff:12:19:
14:c8:a6:bc:22:d3:20:30:b0:2c:fe:ce:e4:51:f7:
4a:d2:d0:4e:a3:e7:19:29:e7:75:d2:db:fe:7c:32:
7a:84:3c:3a:52:15:d8:e2:c5:0e:be:79:49:5c:5f:
7b:f6:22:28:0f:91:23:38:39:84:9e:00:95:db:01:
1c:56:78:11:e1:17:dc:b6:f3:8a:9c:89:8f:a6:1d:
dc:e1:61:ef:a1:21:f7:95:3b:73:e6:80:68:60:7e:
3a:c4:56:49:43:d5:59:a3:1b:ed:e4:a0:14:12:0a:
e3:9c:30:b4:00:48:ce:3a:d3:0c:1c:00:d7:69:d8:
b1:85:5a:75:dc:9e:a1:19:da:33:ef:ec:d0:29:23:
ff:94:c6:29:10:16:95:39:6f:a8:44:78:e2:94:c9:
ad:1e:80:60:9a:eb:80:58:07:7c:ef:77:69:f3:8b:
7c:92:7c:80:2c:f5:17:bd:c1:e0:1b:d3:e1:70:e2:
1b:6f:e4:bb:89:fd:73:1c:8d:5f:dd:c8:72:49:af:
21:92:66:77:85:47:55:77:55:09:d8:b6:82:f6:69:
74:47:5e:c8:09:a4:4e:4f:e8:45:60:11:b8:19:04:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A8:70:2B:FE:D1:76:94:13:3A:AB:11:13:23:44:FF:33:59:BF:8E
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f3:e1:a5:19:4b:75:6f:9d:9c:7e:b4:dd:fa:81:7e:4b:e0:
05:af:99:2b:b8:5b:93:f5:fb:4c:bf:93:6e:b5:4f:99:5f:33:
53:d8:93:99:10:bc:c8:be:0f:45:31:43:8c:c1:57:fb:b2:93:
d6:2f:9f:ac:af:9c:b8:a6:da:25:57:d1:e8:de:17:9c:ee:a4:
76:94:2b:bd:04:a7:15:39:3c:1c:71:da:7a:8b:42:e4:59:e8:
3a:c2:4f:90:e8:af:c4:f8:61:49:d0:1e:74:7f:bc:c9:dc:4b:
34:86:c6:03:bd:39:df:fa:d7:c1:52:b2:92:5a:4d:07:68:a8:
45:a1:87:47:47:fb:bf:06:85:20:08:83:41:ac:a5:e9:6b:1e:
3b:20:cb:7a:70:4b:92:14:c4:c3:25:0a:fd:86:37:c2:16:51:
9b:88:02:d4:a2:c3:99:a9:82:52:46:4b:d7:20:2a:a3:5b:37:
cf:11:5c:cf:ba:88:83:0a:1e:93:6a:42:db:21:b6:cc:e4:aa:
30:82:ba:42:ab:99:e9:06:76:90:61:86:8d:65:3e:87:1a:12:
e3:e2:96:05:7e:ee:72:bb:6c:76:04:c5:5d:85:b9:94:b0:0b:
a6:26:c7:ef:a0:a8:ee:b0:43:a9:45:1c:b3:56:a8:5f:b6:ea:
96:e6:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:01:41 2025 by rpki-client