Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: ns2MKgBXkoGpyeKeWWecdg9U/5HpLCYvs77s62hJlXU=
Subject key identifier: 20:17:97:C1:5A:51:92:2C:7B:25:A8:8C:0A:FE:4B:1C:22:38:E1:76
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 0198D73B00CAC1FF8960729EA514E35429AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 158B
Signing time: Sat 23 Aug 2025 14:00:24 +0000
Manifest this update: Sat 23 Aug 2025 14:00:24 +0000
Manifest next update: Sun 24 Aug 2025 14:00:24 +0000
Files and hashes: 1: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (hash: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: hDIzGOGe0oH/wCkYmqc7gnmj7i0MB/zLc7ZtRUK9Lic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:00:ca:c1:ff:89:60:72:9e:a5:14:e3:54:29:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Aug 23 14:00:24 2025 GMT
Not After : Aug 24 14:00:24 2025 GMT
Subject: CN=201797c15a51922c7b25a88c0afe4b1c2238e176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:e7:e2:44:b9:64:ea:cc:8e:d2:23:7f:73:
d6:b1:c4:89:31:bb:7c:00:99:36:31:07:00:2f:05:
7d:a0:fb:27:1e:ec:84:c8:6e:97:26:f0:0f:03:88:
7e:dd:d7:a6:16:f1:9d:9f:63:2a:7b:71:ba:1c:26:
1f:e3:14:f3:39:a5:5e:44:9d:1a:24:d4:6a:0e:f5:
43:13:f3:11:b9:b9:de:d3:61:46:40:de:ce:ff:2e:
82:2c:b6:34:f4:3d:8a:e0:97:cc:d7:3f:9f:da:e9:
05:44:f9:72:19:7e:c8:d5:78:3d:d0:49:2b:90:c7:
11:60:b1:c1:24:46:23:0e:59:87:87:f3:e6:d9:77:
90:45:96:7b:b8:24:43:a8:3b:84:94:13:3a:88:59:
b3:9b:8b:3e:67:84:d2:40:2f:d3:04:4a:eb:b9:ae:
7e:60:b3:c0:4b:29:77:08:47:29:45:97:da:63:fe:
79:96:06:c3:c5:3f:b4:bf:c8:f2:8f:2b:b5:dd:7a:
42:c3:37:37:09:19:f1:d6:44:8d:dc:fa:7f:b2:a4:
55:11:ea:0b:4c:3b:3d:ac:c8:05:4b:e1:c6:44:22:
7a:ec:f6:ea:66:8e:68:c5:73:0f:30:03:b2:d7:f3:
f9:60:85:ab:39:7b:7d:5c:cd:49:d4:1b:4a:f5:ca:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:17:97:C1:5A:51:92:2C:7B:25:A8:8C:0A:FE:4B:1C:22:38:E1:76
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:34:b0:de:a5:30:36:bc:0c:fc:d9:9b:5a:6c:6a:c7:48:7d:
27:59:4e:ca:30:03:e4:6f:78:13:67:b1:ba:b9:46:9b:e4:ad:
7a:1d:f3:76:be:dd:fe:76:5c:55:b6:9d:e2:11:90:1b:f5:33:
5e:50:ad:e2:cf:43:27:9d:b6:0f:29:35:8c:70:a3:77:45:48:
a5:b8:ab:59:88:91:3e:f7:8e:f8:d8:1e:f2:b4:57:07:1f:84:
52:03:6c:83:1b:ec:61:ef:b5:03:84:7e:c0:51:97:e1:1b:c6:
b5:89:27:4c:e9:9f:da:5d:2f:78:85:87:59:78:9e:ab:4b:61:
ee:3d:7a:9d:28:a0:70:ce:89:ae:c4:b3:5b:7d:4b:06:b5:2e:
ef:dc:1e:d4:88:8c:e0:7b:3f:36:90:35:6a:5d:29:28:17:e5:
72:86:b1:bd:91:22:0d:b7:01:5b:53:98:ab:10:78:5a:68:46:
d9:91:64:2e:a0:29:dc:0a:00:8d:e1:01:b8:29:10:e2:cc:50:
76:68:73:3e:3c:ae:92:08:af:c1:19:16:70:37:f7:e7:86:a8:
56:10:f9:f7:bf:7b:d2:9e:aa:0d:6d:d4:d8:c5:3f:82:74:c4:
1b:ff:09:fe:6d:73:77:0f:d6:09:08:09:62:11:61:7c:6e:83:
f9:5e:31:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOwDKwf+JYHKepRTjVCmsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDI2YzNkMTFjOWYyNGFjYzBhMWQ4NDU0Y2JjOTYwNDg2
NWE4MDkwHhcNMjUwODIzMTQwMDI0WhcNMjUwODI0MTQwMDI0WjAzMTEwLwYDVQQD
EygyMDE3OTdjMTVhNTE5MjJjN2IyNWE4OGMwYWZlNGIxYzIyMzhlMTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssnn4kS5ZOrMjtIjf3PWscSJMbt8
AJk2MQcALwV9oPsnHuyEyG6XJvAPA4h+3demFvGdn2Mqe3G6HCYf4xTzOaVeRJ0a
JNRqDvVDE/MRubne02FGQN7O/y6CLLY09D2K4JfM1z+f2ukFRPlyGX7I1Xg90Ekr
kMcRYLHBJEYjDlmHh/Pm2XeQRZZ7uCRDqDuElBM6iFmzm4s+Z4TSQC/TBErrua5+
YLPASyl3CEcpRZfaY/55lgbDxT+0v8jyjyu13XpCwzc3CRnx1kSN3Pp/sqRVEeoL
TDs9rMgFS+HGRCJ67PbqZo5oxXMPMAOy1/P5YIWrOXt9XM1J1BtK9cpOOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAXl8FaUZIseyWojAr+SxwiOOF2MB8GA1UdIwQY
MBaAFHJCbD0RyfJKzAodhFTLyWBIZagJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYt
YmU5MGIwZmQxZjc4LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYtYmU5MGIwZmQxZjc4
LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzSw3qUw
NrwM/NmbWmxqx0h9J1lOyjAD5G94E2exurlGm+Steh3zdr7d/nZcVbad4hGQG/Uz
XlCt4s9DJ522Dyk1jHCjd0VIpbirWYiRPveO+Nge8rRXBx+EUgNsgxvsYe+1A4R+
wFGX4RvGtYknTOmf2l0veIWHWXieq0th7j16nSigcM6JrsSzW31LBrUu79we1IiM
4Hs/NpA1al0pKBflcoaxvZEiDbcBW1OYqxB4WmhG2ZFkLqAp3AoAjeEBuCkQ4sxQ
dmhzPjyukgivwRkWcDf354aoVhD597970p6qDW3U2MU/gnTEG/8J/m1zdw/WCQgJ
YhFhfG6D+V4x+w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:15 2025 by rpki-client