Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
File: ckWEKSHz0CDU2AReUrsQ_PV-r28.mft (raw, json)
Hash identifier: 4gb/djCteDhgoEqyoJR1b9Xyf0uG+EGcVCXWbNtn2pk=
Subject key identifier: F3:75:69:B2:F3:A6:1F:6A:EE:79:C9:BD:A1:F6:26:BB:85:52:5E:C9
Authority key identifier: 72:45:84:29:21:F3:D0:20:D4:D8:04:5E:52:BB:10:FC:F5:7E:AF:6F
Certificate issuer: /CN=7245842921f3d020d4d8045e52bb10fcf57eaf6f
Certificate serial: 0199FC58F6DDE608A847C1631F39BEFA1CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
Manifest number: 105E
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: ckWEKSHz0CDU2AReUrsQ_PV-r28.crl (hash: /+u1IVNB5Za9HdkVpg15BuZIEfwy+gUs68AfngLMacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f6:dd:e6:08:a8:47:c1:63:1f:39:be:fa:1c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7245842921f3d020d4d8045e52bb10fcf57eaf6f
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=f37569b2f3a61f6aee79c9bda1f626bb85525ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:ff:e7:ad:2b:41:6e:65:39:f2:e4:a3:99:
f9:4f:df:06:e8:d9:da:8b:9f:40:38:05:5c:27:d3:
a8:4f:a1:44:b4:81:6b:02:d5:01:86:61:b1:b6:02:
d7:79:5b:12:78:ef:96:7d:31:2a:57:ce:88:ee:b1:
a0:17:c9:d1:2f:2f:a8:a7:3d:82:89:3c:e6:26:8d:
4c:53:d1:5e:e3:46:d4:bb:9e:b3:c0:a3:8c:e3:5e:
19:9f:96:11:cf:d6:b7:6b:ad:c6:c3:8d:4f:74:9f:
35:2a:e9:02:3c:5e:ff:37:2e:a1:95:b1:fc:ea:02:
8b:00:e1:be:bf:a8:0e:b6:b8:32:45:88:ac:1a:00:
a7:76:71:56:af:44:cb:eb:b2:56:c4:41:98:a1:12:
6b:e0:b5:63:91:bb:49:c6:83:ce:df:bf:31:1f:59:
ae:c2:32:24:4b:ec:da:f3:11:2e:ff:30:a6:cc:3b:
6d:b0:82:39:82:ac:b0:75:82:0c:03:df:26:ba:53:
7a:a4:d2:d5:75:c5:9b:d6:10:39:bf:ca:40:14:aa:
c0:33:e7:15:4d:b1:ca:3e:23:5d:87:d4:aa:5f:e6:
3d:42:63:12:2f:0c:70:7f:3c:5d:82:e7:41:fb:bf:
37:5f:7b:10:7e:fd:02:ae:ac:92:2a:09:0d:bf:a0:
39:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:75:69:B2:F3:A6:1F:6A:EE:79:C9:BD:A1:F6:26:BB:85:52:5E:C9
X509v3 Authority Key Identifier:
keyid:72:45:84:29:21:F3:D0:20:D4:D8:04:5E:52:BB:10:FC:F5:7E:AF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:43:4b:95:f0:43:22:23:df:47:7d:95:9d:a3:6d:b9:88:3b:
26:e0:6d:08:a2:16:b3:94:b0:ce:01:13:8d:0a:db:55:33:88:
a9:15:08:67:f4:3a:44:bf:95:03:80:4a:84:15:38:76:c4:83:
28:de:ed:b0:df:c1:22:62:4e:a6:42:62:02:b9:4d:3a:1c:24:
b4:60:c9:a1:db:46:cc:ec:3f:1e:1c:fa:ec:90:ce:d4:a6:3a:
41:5e:c1:07:89:c2:ba:d2:aa:c8:aa:76:45:8e:1a:0a:3f:43:
af:82:47:a9:7c:a4:7b:aa:d8:25:61:b7:55:73:34:6c:43:8d:
08:ee:1c:43:21:60:9b:e4:71:b1:03:8f:49:9e:37:39:5f:a9:
a2:48:83:51:df:cd:bb:a1:34:f4:fd:2f:33:76:39:18:bf:04:
ad:34:0f:5a:a8:26:a5:d4:1e:9f:10:e0:9b:d4:05:7a:32:2a:
ab:cf:c2:2c:9b:8d:2d:54:7b:73:ed:69:73:98:39:e1:c0:7c:
4f:99:0e:e5:67:44:27:e5:28:5c:b0:1a:1d:53:4e:2d:49:75:
9b:c8:5d:77:f8:65:82:48:6e:90:32:e6:e2:fc:63:f9:25:fa:
e3:16:cb:0f:ad:92:68:48:cd:2f:4c:84:40:2f:b2:c5:e3:8a:
8b:eb:ff:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:42 2025 by rpki-client