Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: W8J6ukrhKQabadz1KBiBxu8TUJC6Qu7YlowqZwFbZlc=
Subject key identifier: 13:67:EB:C4:90:3A:49:78:64:17:1E:58:82:FD:4E:7B:9B:AE:9B:81
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 0199FAD7DE18AA29389097265C4EB48D54D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 5B
Signing time: Sun 19 Oct 2025 05:01:14 +0000
Manifest this update: Sun 19 Oct 2025 05:01:14 +0000
Manifest next update: Mon 20 Oct 2025 05:01:14 +0000
Files and hashes: 1: F1_fRjsO4dTqumxtDsL76pdCtg4.roa (hash: 0XgVQRPzj0PEWIzWBzMdSrLlPSlfOiNqMdtsfXPisjk=)
2: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: j+E8EP+EJZGQDMWNfv0RB2uC5jPx/jXo7M49sKAAKwA=)
3: mNWhV9Hvaf2yXpnhOSbY3EKbOiU.roa (hash: xbTjMWQPzIJQuFzWCStCIwa5zKEG4q5JVM9fdDMAgcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:de:18:aa:29:38:90:97:26:5c:4e:b4:8d:54:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Oct 19 05:01:14 2025 GMT
Not After : Oct 20 05:01:14 2025 GMT
Subject: CN=1367ebc4903a497864171e5882fd4e7b9bae9b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:92:6b:cb:23:96:c1:e3:76:90:21:f3:71:
c5:c7:a6:c4:29:af:5d:d4:1e:0f:5d:e2:67:0e:f2:
0a:ef:64:d4:4b:1d:2b:d3:37:d4:99:53:01:80:52:
04:79:1e:3d:75:49:bf:11:c3:f6:20:fe:ea:73:37:
63:a2:55:78:65:5f:d5:11:80:b5:be:74:c9:10:d3:
89:59:af:c9:e2:16:5f:f9:78:d4:73:a6:e4:03:3d:
bd:23:f0:14:5f:e3:70:45:03:57:0a:3b:12:12:cc:
b5:dd:bb:ac:13:d6:3b:30:80:81:5f:95:15:19:d7:
26:66:fc:55:96:6e:f1:e2:73:4c:b7:ee:ef:1f:4c:
67:91:e2:71:7a:70:73:0e:df:ab:b8:a5:85:98:fe:
c7:44:ea:bb:d3:23:bf:38:2e:30:d1:11:cc:00:ef:
4d:58:64:93:31:37:fa:ea:5e:72:9d:ce:f9:63:fc:
82:fa:1e:e0:37:3f:fe:4d:b8:3f:14:78:8f:cb:25:
18:4d:9d:86:b9:60:c0:a1:d0:61:f9:86:92:5c:1d:
e2:54:7f:1f:20:3d:0f:7c:89:fd:ca:21:85:8e:d9:
ce:8d:50:17:cf:23:23:af:4c:2f:58:70:7a:31:1f:
80:50:16:8f:f2:fd:fd:90:f0:34:e9:2b:b8:6c:72:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:67:EB:C4:90:3A:49:78:64:17:1E:58:82:FD:4E:7B:9B:AE:9B:81
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:08:a0:7b:1f:a9:b2:3f:19:ac:15:c9:8a:1b:3e:17:31:37:
67:a5:4c:6e:fa:6e:81:8b:e1:ec:ed:26:60:19:6b:7b:bc:4e:
18:87:fd:f9:5c:7e:c5:25:bd:49:a6:3b:2e:2b:58:1e:43:a5:
e3:ba:02:35:eb:bf:0a:b4:c8:12:f1:95:4e:f1:24:57:5b:8a:
3e:3d:84:e1:47:53:ee:49:9a:23:4a:4d:ea:74:6d:c0:8b:ce:
c5:99:b9:12:bd:a8:6d:0f:26:24:1c:89:c1:f2:e5:87:3b:44:
4f:5a:01:f0:61:50:fd:c2:b8:80:14:94:4b:c4:1b:44:02:8e:
38:4a:3b:fa:31:ec:49:dd:5c:10:d9:a2:40:60:c7:d4:b1:c7:
4f:de:39:f9:2a:bc:22:29:b6:df:ae:c1:da:ac:10:53:78:21:
e9:3b:76:eb:e6:40:f5:25:1b:93:ae:c5:39:05:de:08:7c:86:
78:bc:ff:4f:e9:1d:61:e7:4d:76:04:a1:53:94:88:8f:86:05:
ed:36:ef:1a:b4:ca:8a:da:a1:33:a7:71:73:ad:95:7b:ca:cf:
46:e9:27:95:d2:d4:e8:89:0d:b8:e8:fd:da:47:40:31:2a:28:
09:83:4e:03:c1:a5:f4:85:01:10:fe:1e:cf:db:37:36:49:62:
4a:4c:7f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:32 2025 by rpki-client