Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: jIUt6AfDCaZDBWwQriq+Ou/m0tzBYWMSopVxkKdmPCM=
Subject key identifier: 11:FE:8E:96:84:DC:8F:D5:41:67:5D:24:45:9D:91:44:A2:68:7D:35
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 0198D583DC885458DC5B64DA2D833DF45DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 06:00:45 +0000
Manifest this update: Sat 23 Aug 2025 06:00:45 +0000
Manifest next update: Sun 24 Aug 2025 06:00:45 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: xZq7o7spTPOhyRF4cft3pkrxJSTZQWr3obXMqwVr4Kc=)
2: OZJAkQeWPGiu0MMG4YGewg2oUhI.roa (hash: kvD4Jh7HATnFEhZqQFNvhTQZ3Ir8ynHCKw0hu3/CQds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:dc:88:54:58:dc:5b:64:da:2d:83:3d:f4:5d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Aug 23 06:00:45 2025 GMT
Not After : Aug 24 06:00:45 2025 GMT
Subject: CN=11fe8e9684dc8fd541675d24459d9144a2687d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:4b:d9:4f:80:e1:66:74:67:df:f9:98:18:
ba:bf:65:32:eb:a1:9e:45:a6:a5:29:b3:5f:ca:12:
ee:45:c6:4c:91:52:6f:ae:6b:2e:00:dd:bf:f7:2b:
6f:28:1e:0d:3b:ac:d8:28:b6:bb:52:7e:da:55:cf:
ee:18:7b:43:00:f0:5a:e9:30:12:86:dd:e3:0f:cb:
94:53:6e:43:53:8a:82:5a:a6:ec:12:ea:3f:ce:b2:
fe:d5:ea:50:68:12:25:df:ee:42:20:f0:11:e1:23:
50:82:bf:e9:67:f7:d2:26:50:c3:08:4a:97:aa:fa:
15:e9:8d:05:cd:bd:76:c4:50:60:e7:6c:f3:52:9c:
3c:b9:bf:20:c9:d3:55:7b:b9:19:2a:e5:c4:f8:46:
7e:15:53:67:a9:51:16:6b:6b:e4:63:14:d9:16:0f:
18:5c:02:03:89:5c:55:84:a3:80:ee:b3:bf:76:a1:
ba:67:66:d7:a5:c5:bf:ea:9c:5e:30:19:ae:36:af:
29:30:62:00:6d:b4:ed:88:69:dd:6f:87:b6:92:04:
f5:47:81:6c:cb:5b:38:fa:07:d1:fa:85:8c:35:8c:
fd:a2:91:16:9d:de:57:ab:d6:be:a8:57:42:6a:61:
67:eb:c7:69:55:d5:e4:3f:ae:98:81:f7:16:b1:0d:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FE:8E:96:84:DC:8F:D5:41:67:5D:24:45:9D:91:44:A2:68:7D:35
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3e:6f:6d:6f:11:6b:c1:28:61:a9:b6:6b:e1:3a:56:c1:e8:
c6:f5:1d:b8:dd:3b:8d:ab:0d:89:04:5f:22:0e:c5:c7:0b:67:
92:8b:bf:ae:aa:41:ea:5a:a1:34:1f:9f:bf:be:8a:5c:fa:55:
c8:31:84:d5:08:f6:b7:f4:ac:8c:8c:9f:1d:5c:95:e6:2c:12:
9a:dc:10:e5:27:0f:b8:2a:8e:62:c3:a5:d6:e8:13:46:67:a4:
ba:0b:df:50:48:b9:42:3f:93:1f:40:1b:ff:2f:ba:71:92:13:
ae:2e:2a:23:22:be:9a:bd:23:73:e5:55:81:a2:f2:df:6a:5a:
8b:68:dd:14:91:cd:23:63:e9:b8:d7:e1:7d:ac:aa:4a:79:77:
3d:59:65:5c:a3:6c:b8:8c:9d:a1:9c:77:24:25:3b:38:b8:4d:
4c:95:f6:af:bd:ab:d3:5d:6a:9d:0b:f6:86:06:46:ab:9b:75:
60:d6:1d:9b:bd:97:06:90:e5:3e:8d:13:b9:8f:38:03:29:6d:
96:7c:70:64:10:d7:13:55:92:cc:bc:1d:0a:e7:d5:d2:42:3e:
cd:b4:c6:9e:78:fb:95:d2:f0:7f:98:80:89:17:36:f1:91:ce:
37:44:41:70:8a:3a:50:78:a2:b3:03:0b:3f:75:4d:d7:33:31:
73:82:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:20 2025 by rpki-client