Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: zIw3xfebyPV4kH+Fv0VnkX2XLuN7hTaTVfcvM0rmxfk=
Subject key identifier: 51:18:0D:B5:2C:21:F5:EB:60:5E:1B:0D:E6:B5:A7:85:90:7F:43:B1
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 0198D7A89372354A76770506FFBF713ABD79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 16:00:05 +0000
Manifest this update: Sat 23 Aug 2025 16:00:05 +0000
Manifest next update: Sun 24 Aug 2025 16:00:05 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: AlWmBv0KjjiWK6EFt6A60s7Lw5aB0YefO5fPl8KmR/0=)
2: yW1cS9Mx29vTOamtTRsFT6bLIXw.roa (hash: PZBuxnii3Pq+stD6k3qQUstIcPbrvHDexZJKpw32ONQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:93:72:35:4a:76:77:05:06:ff:bf:71:3a:bd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Aug 23 16:00:05 2025 GMT
Not After : Aug 24 16:00:05 2025 GMT
Subject: CN=51180db52c21f5eb605e1b0de6b5a785907f43b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:a2:ab:f5:2c:6d:dc:ea:64:01:82:9a:ad:
4c:c7:af:97:0a:91:d1:54:21:0e:ef:98:b0:6a:6f:
da:45:57:ae:02:ee:82:44:b2:d6:20:e5:4c:9f:97:
e3:ea:4e:69:73:7e:95:d0:52:07:79:03:48:f9:a1:
ca:06:bd:51:4f:3f:49:a4:8d:19:0d:56:b0:87:0f:
cf:a2:af:1b:ea:c9:3d:8c:b3:79:26:86:1c:5f:8b:
a7:df:ca:7a:50:54:f2:83:8f:94:9b:73:e1:a1:9f:
30:e0:e5:80:f0:90:52:01:02:ae:15:3d:5f:5f:0b:
13:52:06:0c:43:57:b7:a6:a3:13:bf:e4:4d:16:0f:
8d:55:9e:35:b9:92:34:6b:49:c8:ee:c9:92:4f:72:
a1:6f:c3:32:b7:fd:ac:c7:a5:0b:73:f3:70:bb:ec:
d6:80:26:93:48:38:45:ab:57:99:cf:a8:29:99:fd:
68:4f:d9:9a:9f:0d:ee:0b:39:e2:6a:46:db:ac:13:
f5:ee:a0:e8:3c:6d:de:9c:37:f4:88:57:f4:a9:69:
6e:af:fe:4e:df:a1:e3:9b:0e:af:42:c9:5c:23:71:
21:40:5e:50:d0:d2:81:08:eb:6f:e6:96:4b:01:27:
69:14:23:02:b3:cd:02:1b:af:3e:30:bb:69:46:93:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:18:0D:B5:2C:21:F5:EB:60:5E:1B:0D:E6:B5:A7:85:90:7F:43:B1
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b5:a8:3a:d8:05:10:28:50:b7:93:78:67:ac:ff:03:40:37:
cc:56:f7:aa:9a:7f:6f:22:23:13:53:40:84:e7:8e:7d:31:bc:
d8:6e:1a:fb:9f:27:42:cc:b9:68:d6:a6:67:4e:dd:b2:de:dd:
2b:96:d3:0a:f5:4e:e7:05:44:6d:e1:15:a2:ef:23:6c:48:e6:
dd:fd:da:b2:7b:dc:51:6e:7b:de:46:26:18:ab:c0:4d:34:58:
6f:08:0c:7d:d6:d7:ab:6c:e5:df:4b:15:b3:d7:f2:e1:4a:20:
a0:c8:7f:a4:ed:f3:d8:07:c8:bb:ba:d0:70:68:11:da:e2:75:
63:29:fa:dc:40:7d:b9:d6:21:19:16:99:cf:c2:b5:bf:56:cf:
4d:26:b6:99:93:fd:8c:7a:ad:a8:91:b0:ed:16:76:51:cb:82:
0e:d1:4a:87:1e:6a:97:20:d8:6a:4f:a1:82:2d:76:fa:66:2c:
19:df:7d:ed:b3:d2:55:5b:b6:88:09:07:1f:ce:a5:91:1b:12:
fb:be:94:c5:d6:e7:15:7a:13:12:df:d8:cf:b7:67:23:a6:2b:
81:f6:d6:62:7f:e0:f4:ef:50:50:ba:71:51:20:49:46:2d:aa:
fd:b7:1a:00:57:77:3d:d6:e8:69:e4:22:8e:63:97:7e:23:17:
fe:91:77:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqJNyNUp2dwUG/79xOr15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YTVjM2FiYTQyMWI3OGE3ZDVkMDliNzViNGNlM2JlNTI3
M2NhYWMwHhcNMjUwODIzMTYwMDA1WhcNMjUwODI0MTYwMDA1WjAzMTEwLwYDVQQD
Eyg1MTE4MGRiNTJjMjFmNWViNjA1ZTFiMGRlNmI1YTc4NTkwN2Y0M2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHyiq/UsbdzqZAGCmq1Mx6+XCpHR
VCEO75iwam/aRVeuAu6CRLLWIOVMn5fj6k5pc36V0FIHeQNI+aHKBr1RTz9JpI0Z
DVawhw/Poq8b6sk9jLN5JoYcX4un38p6UFTyg4+Um3PhoZ8w4OWA8JBSAQKuFT1f
XwsTUgYMQ1e3pqMTv+RNFg+NVZ41uZI0a0nI7smST3Khb8Myt/2sx6ULc/Nwu+zW
gCaTSDhFq1eZz6gpmf1oT9manw3uCzniakbbrBP17qDoPG3enDf0iFf0qWlur/5O
36Hjmw6vQslcI3EhQF5Q0NKBCOtv5pZLASdpFCMCs80CG68+MLtpRpMN5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEYDbUsIfXrYF4bDea1p4WQf0OxMB8GA1UdIwQY
MBaAFAilw6ukIbeKfV0Jt1tM475Sc8qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83YmQ4Y2YtMmE2MS00Yjc0LTg2MGQt
MzY0ZmFlN2M3MmM0LzEvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83YmQ4Y2YtMmE2MS00Yjc0LTg2MGQtMzY0ZmFlN2M3MmM0
LzEvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabWoOtgF
EChQt5N4Z6z/A0A3zFb3qpp/byIjE1NAhOeOfTG82G4a+58nQsy5aNamZ07dst7d
K5bTCvVO5wVEbeEVou8jbEjm3f3asnvcUW573kYmGKvATTRYbwgMfdbXq2zl30sV
s9fy4UogoMh/pO3z2AfIu7rQcGgR2uJ1Yyn63EB9udYhGRaZz8K1v1bPTSa2mZP9
jHqtqJGw7RZ2UcuCDtFKhx5qlyDYak+hgi12+mYsGd997bPSVVu2iAkHH86lkRsS
+76UxdbnFXoTEt/Yz7dnI6YrgfbWYn/g9O9QULpxUSBJRi2q/bcaAFd3PdboaeQi
jmOXfiMX/pF3Xw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:59:04 2025 by rpki-client