Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
File: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json)
Hash identifier: pUIv6zCdbb5ENc0CcQdtr6GpsJTHcD+ajltCCfX+Ntw=
Subject key identifier: 38:3F:35:F1:E1:7C:2D:79:00:CA:5D:E4:AD:40:B7:92:56:08:ED:76
Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Certificate serial: 0198D5BBDF362BBB8157E9CDCF80B5FCE0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
Manifest number: 12A2
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: 8/hQn3MqDcizrzarh7v4cNtkr0Q7LConVtEkz3asVjI=)
2: h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa (hash: h0MwBLTN+JJQsx/mfZTZMMTWn2GxCEc+/y4Gt6r0rFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:df:36:2b:bb:81:57:e9:cd:cf:80:b5:fc:e0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=383f35f1e17c2d7900ca5de4ad40b7925608ed76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:13:e9:0f:56:20:d6:85:47:e3:f3:b1:a9:
d6:9d:e6:c5:f9:38:1a:25:84:cd:fe:27:32:91:76:
b0:c7:2b:d8:16:ce:cb:80:89:68:61:87:65:df:55:
38:6a:eb:63:96:5a:03:a6:40:c5:00:58:7e:84:a2:
7f:14:1e:89:59:d1:39:91:12:23:cf:9c:3d:5b:10:
b6:25:66:f2:71:3c:cb:36:f5:ad:f8:82:bd:f7:0b:
5c:7c:07:00:b7:81:ca:8c:df:cc:08:d5:4f:56:a7:
c5:1a:68:40:4d:f6:68:44:6d:9a:46:b9:f8:92:d2:
6c:e8:55:2f:10:a8:93:4e:0a:4c:70:16:10:d7:1a:
f4:43:c4:f5:44:b7:5a:0f:7e:f3:49:15:19:15:30:
aa:a9:5b:9e:0b:90:a5:29:7f:5a:d7:81:5b:94:ff:
4e:97:53:77:31:fa:be:b2:15:3b:8b:11:60:84:bd:
e0:1f:04:ef:9a:32:24:5d:17:aa:14:e0:e8:a6:2e:
21:0c:8f:d3:50:11:04:c6:45:d5:b5:7c:dc:42:56:
0c:05:ae:1c:bc:5f:01:51:e4:db:35:54:df:79:ad:
03:d4:60:c1:7d:4d:95:dd:6d:49:2f:86:8e:c6:1f:
bd:03:12:93:e7:26:68:6c:7d:95:cf:4f:c2:62:9b:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3F:35:F1:E1:7C:2D:79:00:CA:5D:E4:AD:40:B7:92:56:08:ED:76
X509v3 Authority Key Identifier:
keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a8:fa:5e:2a:b0:51:1f:91:fc:2e:16:6a:4d:16:f8:82:cc:
ac:b7:a5:dc:8c:4c:ea:99:cb:a1:66:02:ef:c8:ac:35:60:21:
e2:f2:98:ce:ed:2b:8f:11:17:98:2b:ef:41:7a:b7:1f:20:5b:
a1:12:c4:d8:38:e6:95:77:48:a0:24:ba:36:74:3d:a2:8c:a9:
c0:fe:d7:6b:9c:1a:80:6b:5b:2d:e8:ac:b7:aa:d3:0d:63:f2:
bb:cd:fd:39:ee:ff:27:67:54:01:f1:a5:5d:ed:10:ad:a1:60:
10:6e:a3:24:55:14:1a:2c:7b:cb:c0:f7:4b:fc:a4:62:42:cf:
08:1b:45:d1:a1:ae:d6:2a:e3:9a:82:c4:26:aa:3a:e8:c1:f7:
98:09:63:76:f6:b0:a5:4f:2a:29:09:8f:66:77:66:b8:72:eb:
33:6f:4f:30:91:c1:25:82:4f:6d:52:3b:29:39:02:cb:12:ab:
31:18:0c:57:b5:51:31:82:b6:51:ce:90:ea:b6:a0:ee:2d:da:
81:33:73:1b:04:c3:61:fa:e9:be:b2:a5:2b:ea:80:65:9d:e5:
68:ad:50:6e:0e:89:ff:b4:c2:a8:41:f7:53:a0:20:03:4f:f6:
cc:08:cb:4a:39:36:68:09:3c:f1:43:19:d7:f0:4e:c3:ef:18:
f0:53:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:12 2025 by rpki-client