Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: 8N8HXmOcOmTmTR/JYQFsiVlZhlK56l2+1iMHCmE0SDQ=
Subject key identifier: 28:7B:B2:82:E2:E2:80:93:15:7E:1A:62:B5:42:54:92:7E:7C:38:C5
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 019778D398EF8E4E6C22975454F8CDEC575F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1598
Signing time: Mon 16 Jun 2025 13:00:22 +0000
Manifest this update: Mon 16 Jun 2025 13:00:22 +0000
Manifest next update: Tue 17 Jun 2025 13:00:22 +0000
Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: wlA+vZEsWY2wTTzGViR2XOaK/fgUhBeWFdlbJzHo/2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:98:ef:8e:4e:6c:22:97:54:54:f8:cd:ec:57:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Jun 16 13:00:22 2025 GMT
Not After : Jun 17 13:00:22 2025 GMT
Subject: CN=287bb282e2e28093157e1a62b54254927e7c38c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:8c:01:45:df:d9:69:20:1a:b6:77:96:ec:
11:a0:67:e1:ae:b6:3b:4e:30:ed:c9:a6:8e:f6:b2:
c0:bc:82:61:ac:c1:bf:50:7e:f4:4b:90:c2:0f:92:
2c:9d:31:fc:82:d2:e9:3e:af:fb:c9:27:62:e7:44:
0b:ce:be:40:5e:62:57:3c:7a:d6:fd:d6:e0:9d:50:
30:5d:eb:9c:01:35:0b:a6:ef:cc:77:73:d0:af:b6:
53:68:c0:80:e2:a5:99:88:7b:82:11:1c:6e:f1:12:
27:cd:a3:d7:0c:e1:f7:9d:62:49:ed:8d:ba:ee:44:
f4:b0:63:da:d7:a3:73:36:4d:68:a0:7c:f6:e4:99:
87:aa:af:d1:bd:f8:e5:3d:08:9f:8a:dc:28:0a:1a:
eb:c7:9f:4e:0b:5c:c3:bd:f7:f5:84:81:9d:5f:58:
50:8e:37:34:c4:3b:1c:f1:34:20:44:08:d5:8e:6b:
1b:40:4b:de:e9:03:17:90:b8:ad:2c:4f:49:d1:db:
75:8a:e7:a9:03:ac:b6:91:b8:fa:50:62:ee:ba:01:
34:c0:93:34:ef:f9:47:fb:fc:7b:5d:84:80:5a:fd:
39:4e:60:1e:00:30:52:6b:ea:41:fb:50:78:a2:a8:
c6:d9:8a:bf:88:a2:99:80:a1:9c:03:48:56:33:60:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7B:B2:82:E2:E2:80:93:15:7E:1A:62:B5:42:54:92:7E:7C:38:C5
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:62:7e:70:cc:23:93:1a:b4:11:b7:17:26:e9:88:4c:8d:00:
81:9f:1f:b7:66:9c:e1:84:fc:28:65:51:25:2e:3d:e8:f0:5c:
25:f5:ae:02:24:e6:1a:66:f6:6c:ca:3a:95:72:55:c8:af:5f:
37:f5:6c:b6:7a:2e:56:4c:a8:04:57:9f:47:c3:89:60:cf:28:
aa:6e:7a:d8:bc:cc:8b:02:52:9c:a9:81:a9:b1:bb:0b:df:79:
21:15:1b:27:12:0f:28:77:63:6d:a0:ec:b5:78:4e:10:0f:c2:
f8:89:e9:fa:ac:68:85:1d:17:ed:e8:b3:be:49:48:1d:7a:11:
1c:5e:51:dc:97:84:f6:ab:84:02:61:a0:80:c5:36:6d:2d:51:
f4:49:a2:10:47:10:c4:b1:a2:f2:a0:22:9f:ec:36:5f:a0:f1:
63:e0:b5:e5:60:6d:37:d7:3b:6e:4f:a0:49:d0:6b:1f:f2:89:
4b:6a:e9:08:03:c7:b7:1e:c0:93:32:9b:ee:ec:f1:f0:5f:fc:
30:0a:dc:dc:d1:ec:8b:d3:cf:5a:0c:d5:c1:21:13:01:d5:bf:
cc:1f:90:12:4c:38:45:be:1e:52:b7:9e:25:77:3f:48:6b:dc:
87:e9:bf:9d:e9:63:c5:b6:6e:73:cc:57:a0:c6:a5:26:f9:5a:
6f:74:67:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:20:10 2025 by rpki-client