
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: L5+ZxKCRH6MHp7+df49N1vHFfo04rJ08Tlb1iCpVSEA=
Subject key identifier: 54:48:A0:2B:87:9F:41:FC:2D:2F:ED:E0:C0:03:3B:5D:83:0E:2F:AB
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 0198D705A8FFDD588E6DF403D0E188A59F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 1604
Signing time: Sat 23 Aug 2025 13:02:09 +0000
Manifest this update: Sat 23 Aug 2025 13:02:09 +0000
Manifest next update: Sun 24 Aug 2025 13:02:09 +0000
Files and hashes: 1: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: /BCC2kOPFeLpb8FV2u77r6ncgK4LqYWXhTGqVlgk4iY=)
2: Wy1LhCK9kxP-C2UiE5R2K8JtffM.roa (hash: DYS7fnBaD9Os9bSnRtbqX/rsXfSVI5HQGNbOlzCHNGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a8:ff:dd:58:8e:6d:f4:03:d0:e1:88:a5:9f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: Aug 23 13:02:09 2025 GMT
Not After : Aug 24 13:02:09 2025 GMT
Subject: CN=5448a02b879f41fc2d2fede0c0033b5d830e2fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:cb:68:88:5a:89:37:9c:85:6b:98:9e:e5:
dc:3b:65:d5:d4:39:58:0d:44:c3:25:1f:25:6f:c9:
12:59:98:f4:29:f9:80:f6:a2:07:c7:6d:66:0c:bd:
8d:8b:8a:92:b8:21:81:cb:9b:cd:2d:9a:d0:57:0c:
c1:60:4d:d9:44:ed:c8:83:ec:b1:b8:b1:2c:a0:a0:
85:ac:98:75:a9:01:1a:46:d4:87:bb:08:cd:43:19:
33:f9:06:ff:ef:f3:49:3c:c2:47:f6:72:72:ea:ed:
bd:1e:40:2e:6d:90:00:3f:b1:c9:fb:f3:b6:4a:ef:
ba:55:9d:5b:35:7b:ba:4d:cb:30:d8:4a:d2:e3:82:
0f:de:18:87:28:c4:61:dc:47:4d:37:3d:cf:1e:48:
b4:65:92:4a:00:ff:35:c6:44:08:66:41:4c:c8:76:
45:74:bf:1f:bd:3e:e0:b4:13:d8:3a:8d:b1:1f:50:
dd:2c:0e:2c:59:af:6d:d2:e8:6e:ba:0e:3d:ef:c5:
f9:f6:10:6f:4d:d2:e0:bd:a6:6a:15:21:60:3f:ae:
fb:57:e6:5f:cd:77:1c:3d:61:33:01:5f:08:0c:31:
92:f8:f3:08:ac:47:94:b1:b1:f8:36:47:a4:75:a1:
1b:38:65:d7:61:9f:48:2d:ca:21:7d:78:9a:4c:5d:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:48:A0:2B:87:9F:41:FC:2D:2F:ED:E0:C0:03:3B:5D:83:0E:2F:AB
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9a:47:5e:53:ce:3d:90:85:f3:c6:60:6b:25:25:d5:fd:b1:
6c:ea:1c:59:83:49:61:4a:76:d0:33:f7:03:26:d3:1c:be:50:
10:41:d7:6a:28:83:57:17:b6:41:ad:69:53:62:6d:9e:76:6a:
10:a5:9b:f6:8d:5c:33:e5:9d:a3:b1:02:67:f7:dc:4b:0d:97:
9e:16:6f:a8:ad:b1:e3:31:61:52:19:ef:e6:9b:60:f8:bb:bc:
b9:68:a9:1f:2b:06:5a:86:ef:97:78:e9:b3:4e:e2:b0:58:e6:
15:14:39:79:69:7a:e6:49:0d:2f:f2:2e:b4:54:19:55:eb:e5:
e7:ac:b0:36:47:87:3d:ed:60:5e:f6:69:48:fe:f8:dc:99:7a:
71:25:9e:b1:75:9a:bc:ba:20:fd:3c:f3:28:2a:fd:e2:d7:db:
65:8b:77:55:ef:24:42:f8:d4:3c:90:e1:fd:c6:14:db:92:01:
90:a9:a7:af:62:cf:8a:c3:33:35:8c:07:7a:ac:79:e8:ad:71:
10:03:f1:e2:e7:1c:96:ed:52:b2:7f:40:ff:0c:d2:87:ca:2d:
c7:14:02:09:b0:a7:5c:32:ac:5c:b0:be:fd:7f:2a:6c:3a:a9:
f2:93:00:e8:f8:e0:ca:69:2b:36:62:cf:73:2e:d3:b4:01:8b:
59:aa:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:49:13 2025 by rpki-client