Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: 5+IvBkAXQ5ZylbysgCK6Blzf57pMzi27K5t8Ls3Vc9g=
Subject key identifier: 12:0C:10:0C:A8:F0:2A:C7:B2:48:0F:4A:51:3E:6E:C2:E3:D5:DA:C8
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 01968390BC96F6365A4CB6EA04B8E94EBAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1519
Signing time: Tue 29 Apr 2025 22:00:22 +0000
Manifest this update: Tue 29 Apr 2025 22:00:22 +0000
Manifest next update: Wed 30 Apr 2025 22:00:22 +0000
Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: z7q9ZFaVv6E2HUZYgqgwybgyRMw5HiHJkmlPDskXJm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:bc:96:f6:36:5a:4c:b6:ea:04:b8:e9:4e:ba:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Apr 29 22:00:22 2025 GMT
Not After : Apr 30 22:00:22 2025 GMT
Subject: CN=120c100ca8f02ac7b2480f4a513e6ec2e3d5dac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:38:da:20:29:15:6f:83:0b:a3:cd:0d:89:
65:2a:f5:09:ab:15:56:64:3f:2e:aa:8c:9d:ba:2a:
3f:ef:8a:72:c9:7c:8a:41:c6:67:f3:4f:5d:ee:96:
66:e5:cc:c0:c9:66:73:50:8d:68:6d:59:ec:0b:d8:
69:71:7c:34:6f:2e:fa:e4:2d:af:59:2b:09:21:86:
0f:64:6a:9d:03:f7:56:63:37:47:54:2e:aa:80:10:
12:b7:f9:c2:12:38:69:fc:a4:77:ba:64:6f:25:51:
8c:27:c4:8c:81:c7:2d:e9:15:5d:6a:be:54:a7:88:
04:11:3f:b2:24:17:e1:af:01:ff:f7:16:26:49:0f:
3d:8d:7b:6b:a8:76:49:e7:47:79:d0:55:43:5a:46:
1d:b4:7a:77:ee:0a:1b:13:e4:ad:cb:97:3f:89:bb:
f8:55:86:4d:c9:b1:62:ba:b7:48:00:32:78:f5:50:
3e:f5:2c:34:08:06:ac:8d:69:a6:4c:11:7e:85:fd:
f3:82:2f:5b:32:10:e8:df:62:ed:e8:09:b1:45:aa:
b2:89:9e:0b:0e:69:54:50:88:f2:7d:a7:9b:3b:b3:
9c:df:ed:aa:40:f9:d3:e5:07:6e:31:3a:fe:fb:5a:
91:03:12:81:4b:66:21:89:7a:14:53:be:72:6e:93:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0C:10:0C:A8:F0:2A:C7:B2:48:0F:4A:51:3E:6E:C2:E3:D5:DA:C8
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f3:38:c4:f2:e1:0b:92:f1:cb:aa:1d:5e:01:2a:25:78:a6:
f1:87:c0:bc:37:83:ad:1a:61:01:8a:ea:56:d1:6e:d9:52:39:
58:b2:95:95:6f:40:a7:ef:31:e2:47:70:5a:b4:da:35:49:81:
31:b1:d8:87:1a:4b:8f:1b:2b:ae:24:1b:10:28:21:d5:dc:00:
31:bb:fc:7f:61:16:76:cb:e0:f3:c7:66:df:61:05:ce:b5:7c:
9c:1b:d6:46:d8:ba:9b:28:bd:ec:28:61:1c:89:81:27:44:0d:
f1:6a:c8:a0:e2:25:93:86:51:a8:7f:31:3b:65:06:a6:bc:dd:
f9:f7:14:cb:69:62:c9:8b:58:60:41:66:2d:be:38:05:4f:9b:
fd:b3:89:c1:f5:dc:84:8b:33:7a:a9:bc:ce:db:92:53:ae:56:
cf:67:b0:fc:14:37:85:4f:8b:1f:0c:44:de:7c:81:d6:a1:b7:
75:95:a4:ae:0f:53:28:0e:f2:f3:3c:ff:7c:6f:ad:7b:f1:aa:
5d:37:cb:fd:cd:50:71:d6:60:bf:25:1e:5f:5b:f3:3c:f8:d9:
de:67:86:0b:a8:11:71:68:77:e9:0c:51:a0:88:e7:21:4d:4b:
bf:71:c8:a6:45:10:99:2a:d2:34:f6:7d:71:ec:56:49:87:4c:
c1:1c:78:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:36:26 2025 by rpki-client