Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: gzpqmuYqjkdiCsf5u+rbrAmZ/L4zRYg/cAq0XwLe38w=
Subject key identifier: 6F:E3:78:CA:89:44:89:4D:91:C6:13:9D:AB:FE:B7:43:07:71:4D:5E
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 0199FD342EF1EE64E9DCEB03BE050E6401C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: sk9HnIEq4J534xewbPPjR3s+msc1GbmBe3uj0H4YhOY=)
2: yW1cS9Mx29vTOamtTRsFT6bLIXw.roa (hash: PZBuxnii3Pq+stD6k3qQUstIcPbrvHDexZJKpw32ONQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2e:f1:ee:64:e9:dc:eb:03:be:05:0e:64:01:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=6fe378ca8944894d91c6139dabfeb74307714d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:0e:ae:3b:5b:e3:9a:c1:0e:24:12:45:d2:
1f:85:85:a2:df:0e:c1:47:5e:62:40:5c:c0:5f:60:
47:3a:02:00:c1:d1:a6:6d:46:89:5b:fe:2b:a4:74:
c9:fe:2d:cc:80:c9:1b:e2:cb:3c:39:8a:07:37:92:
1c:96:0a:9b:ee:64:a0:b9:77:ea:1c:2a:9b:a4:86:
61:fe:77:4a:71:db:fd:d6:20:ca:eb:71:1c:81:ab:
6b:1e:5a:90:0f:d1:a1:18:45:08:ea:8c:c9:2a:d2:
da:d7:ea:8a:6e:e7:eb:22:c3:c7:d4:90:66:1e:4b:
96:fc:30:f9:6b:cc:f1:4a:30:22:02:23:83:b8:59:
a1:e3:64:38:59:96:d9:33:4c:02:53:6f:82:cb:41:
a2:74:66:13:b6:3d:11:00:20:ee:7e:88:ca:db:51:
01:d3:99:cd:a4:f9:95:94:35:e4:e1:37:4a:37:e2:
1d:7a:f0:9f:6e:79:84:d7:22:83:08:f9:c0:83:02:
61:a3:9f:ee:b6:3f:9f:8e:95:78:cc:51:e9:4d:5c:
ff:b9:24:3e:3c:fb:49:da:01:c7:a3:ac:9b:cf:8f:
ee:75:3b:e5:f8:2b:43:10:be:1f:c5:f4:65:88:39:
3a:fd:36:49:c9:46:8e:80:37:3c:42:0a:b0:77:4c:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E3:78:CA:89:44:89:4D:91:C6:13:9D:AB:FE:B7:43:07:71:4D:5E
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7a:84:99:1b:3b:c0:a0:a2:b8:63:b7:9e:d2:30:e3:dd:43:
6b:97:63:88:fb:31:c8:ce:dd:2e:c6:09:c7:e3:35:5c:58:ea:
a0:44:e4:a7:96:0e:34:e9:0c:84:a8:c5:41:3e:fd:ed:94:72:
a5:22:0c:09:a3:c0:d6:23:cc:d1:05:71:3e:1d:7b:13:cc:6e:
15:e1:93:cc:b5:65:b6:e7:bb:bd:40:88:9d:cc:9b:82:0e:1f:
8b:f3:72:8f:6a:47:02:27:2f:7b:8f:44:56:92:d3:4a:45:f7:
a0:51:4d:d9:84:6f:a7:c4:dc:98:5a:b1:44:56:f4:50:92:c4:
6a:55:b2:0c:9a:61:ac:c3:d8:31:14:4e:12:35:f3:17:b9:78:
7e:a1:3d:2a:a7:db:3c:fb:be:1d:f0:df:da:4d:c8:95:d8:e5:
00:38:1d:f1:cd:62:20:f3:be:36:b7:cb:c2:df:b5:2c:0c:8e:
cb:51:56:38:85:61:14:64:27:03:99:6e:90:ae:b1:b7:60:1e:
e9:78:08:26:11:b0:13:af:35:7e:dc:32:da:4a:32:02:de:09:
05:49:6b:a2:43:be:3c:43:bd:2f:c0:2b:40:cb:aa:d4:de:f8:
e4:6b:99:87:5e:3c:16:98:55:58:21:59:66:24:bd:d7:f2:79:
59:75:95:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NC7x7mTp3OsDvgUOZAHEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YTVjM2FiYTQyMWI3OGE3ZDVkMDliNzViNGNlM2JlNTI3
M2NhYWMwHhcNMjUxMDE5MTYwMTE5WhcNMjUxMDIwMTYwMTE5WjAzMTEwLwYDVQQD
Eyg2ZmUzNzhjYTg5NDQ4OTRkOTFjNjEzOWRhYmZlYjc0MzA3NzE0ZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp4Orjtb45rBDiQSRdIfhYWi3w7B
R15iQFzAX2BHOgIAwdGmbUaJW/4rpHTJ/i3MgMkb4ss8OYoHN5Iclgqb7mSguXfq
HCqbpIZh/ndKcdv91iDK63EcgatrHlqQD9GhGEUI6ozJKtLa1+qKbufrIsPH1JBm
HkuW/DD5a8zxSjAiAiODuFmh42Q4WZbZM0wCU2+Cy0GidGYTtj0RACDufojK21EB
05nNpPmVlDXk4TdKN+IdevCfbnmE1yKDCPnAgwJho5/utj+fjpV4zFHpTVz/uSQ+
PPtJ2gHHo6ybz4/udTvl+CtDEL4fxfRliDk6/TZJyUaOgDc8Qgqwd0yhmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/jeMqJRIlNkcYTnav+t0MHcU1eMB8GA1UdIwQY
MBaAFAilw6ukIbeKfV0Jt1tM475Sc8qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83YmQ4Y2YtMmE2MS00Yjc0LTg2MGQt
MzY0ZmFlN2M3MmM0LzEvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83YmQ4Y2YtMmE2MS00Yjc0LTg2MGQtMzY0ZmFlN2M3MmM0
LzEvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXqEmRs7
wKCiuGO3ntIw491Da5djiPsxyM7dLsYJx+M1XFjqoETkp5YONOkMhKjFQT797ZRy
pSIMCaPA1iPM0QVxPh17E8xuFeGTzLVltue7vUCIncybgg4fi/Nyj2pHAicve49E
VpLTSkX3oFFN2YRvp8TcmFqxRFb0UJLEalWyDJphrMPYMRROEjXzF7l4fqE9Kqfb
PPu+HfDf2k3IldjlADgd8c1iIPO+NrfLwt+1LAyOy1FWOIVhFGQnA5lukK6xt2Ae
6XgIJhGwE681ftwy2koyAt4JBUlrokO+PEO9L8ArQMuq1N745GuZh148FphVWCFZ
ZiS91/J5WXWVeQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:18 2025 by rpki-client