Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: whIe3J2oeDaQdVOqaWULcF8WT2C1cMk/F9YVb08pYPo=
Subject key identifier: 3C:FA:D5:EA:C7:9E:50:C4:76:CE:C3:F8:58:08:CE:00:3F:54:3A:D1
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 0198D51626E26CBCA25DE02CD3FD73D4077E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 14E8
Signing time: Sat 23 Aug 2025 04:00:55 +0000
Manifest this update: Sat 23 Aug 2025 04:00:55 +0000
Manifest next update: Sun 24 Aug 2025 04:00:55 +0000
Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: /Z6dy18BDF3ytp9/aE6u5L+jzwt74D8Pk2tpWOF1Cfc=)
2: OH2h9N_hyzRLLEO1xxz2pS01OI8.roa (hash: KX0d4zyKelEiSPA5pJcqywoIBRSpP8vuqYcvjW39t40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:26:e2:6c:bc:a2:5d:e0:2c:d3:fd:73:d4:07:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: Aug 23 04:00:55 2025 GMT
Not After : Aug 24 04:00:55 2025 GMT
Subject: CN=3cfad5eac79e50c476cec3f85808ce003f543ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:14:93:a0:b3:e9:f6:1f:1c:27:91:59:94:
5e:d4:40:37:c9:8a:b1:c8:ff:b8:5e:c0:cd:b4:7a:
6f:98:f9:8a:95:8c:5d:fc:74:0f:2d:cc:47:f0:af:
96:79:04:50:6d:24:3f:ab:ff:fa:aa:28:78:82:6d:
7f:f2:0e:f2:fc:46:bc:eb:be:e6:04:2c:6c:cd:ec:
8c:a6:29:0c:aa:b1:13:81:27:b5:0d:b0:2e:1f:46:
cb:98:47:e9:b7:4c:1f:48:c1:14:bc:a2:fc:45:d5:
4c:dc:6b:1b:6d:08:a7:23:6a:62:72:c9:c4:54:26:
31:5b:cb:7c:43:76:0e:d2:64:ea:4e:6a:62:28:25:
36:a0:8b:9f:e6:bf:97:72:8b:11:d0:03:67:53:8d:
16:b2:33:b6:bf:91:a0:9d:e9:49:a9:2d:4e:ff:30:
4f:6d:49:da:11:e0:3c:51:6a:e0:40:a6:f9:b3:a3:
06:5b:cb:d3:90:f5:5e:4f:15:92:d2:6a:88:2f:a2:
b8:75:ea:bc:0b:0e:a0:72:ac:2a:6a:00:0d:1b:25:
94:27:69:f3:74:64:98:7f:07:40:18:c4:7c:23:a2:
7b:00:cd:89:ce:7e:55:1a:ad:78:e6:29:ff:4f:de:
dc:a6:33:59:99:b4:d5:60:df:51:8c:40:67:42:b4:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FA:D5:EA:C7:9E:50:C4:76:CE:C3:F8:58:08:CE:00:3F:54:3A:D1
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a3:2a:d7:9d:16:e0:1e:8a:44:50:c9:b5:b6:be:c0:aa:e3:
d2:16:f8:2c:92:ad:bb:58:46:ba:7d:5b:f7:61:79:b0:b9:5b:
f9:30:b6:73:47:b5:e7:e2:9f:e5:70:5f:e0:ca:28:1c:7b:08:
29:da:6a:91:e2:97:d8:7b:95:f1:e7:0c:39:d0:65:14:10:ca:
78:a0:62:b1:77:fe:ea:b2:be:82:c9:1c:23:75:04:5d:1f:85:
e8:c6:27:aa:40:96:e1:32:da:2f:4b:ba:c3:9f:c8:73:87:f1:
ee:73:31:de:ac:ae:1b:71:50:06:90:73:e2:99:14:90:43:11:
03:4f:30:9e:39:e5:a3:32:9d:c8:bc:ca:c8:d9:60:15:d0:0b:
8a:9b:d2:80:7b:54:82:56:fa:f3:86:45:89:4b:cc:20:eb:24:
cc:1c:f0:99:bc:6e:8d:9e:aa:3f:65:72:01:a3:2d:cf:b2:60:
0a:ad:e2:f4:c1:93:2a:63:f3:38:95:84:00:4b:26:7a:64:79:
12:51:c2:75:9f:fd:5d:01:22:7d:ba:02:22:1b:3d:cf:97:82:
d2:ac:eb:13:c9:3b:42:94:e8:f9:b7:97:f2:d8:af:d5:a4:de:
64:a9:ce:a0:5b:86:fa:ca:60:96:37:de:ad:3a:18:d2:5d:b0:
33:35:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:43 2025 by rpki-client