Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: nhXXj6kVPSa+zAHAc9s3KhenGG72s0DTDs0OmTWKCzs=
Subject key identifier: 9A:08:70:52:BF:FA:0D:D0:1D:8B:8A:F0:99:DB:3A:E4:C7:ED:01:86
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 0199FEEBF8C3ADBBFDFE9D42170023F21340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 16EC
Signing time: Mon 20 Oct 2025 00:01:41 +0000
Manifest this update: Mon 20 Oct 2025 00:01:41 +0000
Manifest next update: Tue 21 Oct 2025 00:01:41 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: Md/QH0Erx7tVQVrrLakAtV8ouBqsuWU3ZpJUjbj1i5s=)
2: OZJAkQeWPGiu0MMG4YGewg2oUhI.roa (hash: kvD4Jh7HATnFEhZqQFNvhTQZ3Ir8ynHCKw0hu3/CQds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:f8:c3:ad:bb:fd:fe:9d:42:17:00:23:f2:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Oct 20 00:01:41 2025 GMT
Not After : Oct 21 00:01:41 2025 GMT
Subject: CN=9a087052bffa0dd01d8b8af099db3ae4c7ed0186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:07:97:53:c0:a6:d6:d9:59:6c:3a:be:c1:
c1:11:85:06:7f:fa:58:ff:19:2a:ce:66:90:51:95:
3c:cf:18:65:73:39:ea:a5:d2:58:60:21:cc:ca:7f:
2d:9f:01:f1:d2:1b:50:2e:d8:10:82:08:90:35:0b:
53:af:8e:c5:77:46:b7:0e:fc:ce:a3:67:d3:90:76:
00:70:f5:72:2c:2e:19:25:2e:b6:73:f3:7d:27:62:
0b:14:37:67:9e:0c:67:23:1e:c6:71:ba:ca:09:db:
69:a1:ae:f3:47:e3:f1:e4:11:d2:f4:c3:1e:ce:b9:
f9:73:14:ec:34:b7:37:ce:17:39:04:11:2a:93:0b:
b8:f8:de:16:80:4a:98:70:7b:a6:0e:94:4f:d0:a3:
bf:24:83:f6:be:70:e3:55:85:2d:d0:2d:ea:59:ac:
5a:25:12:6d:b5:50:40:d3:f1:15:cb:e6:76:05:77:
cb:d0:a8:2c:ac:53:f2:5d:64:d4:08:de:a4:a0:82:
a4:f3:e7:96:01:00:d7:37:7d:38:ce:e9:94:ed:bc:
40:22:2d:a2:24:6a:4e:b9:00:54:94:38:a2:18:e3:
d3:9d:59:89:fd:a8:ae:88:e4:51:95:b4:02:1f:6d:
94:32:e0:b5:dc:12:0a:7f:ec:d5:68:22:83:6a:3e:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:08:70:52:BF:FA:0D:D0:1D:8B:8A:F0:99:DB:3A:E4:C7:ED:01:86
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ec:17:f1:cc:3f:79:3b:b7:a0:7f:34:5e:4b:35:f2:b5:67:
74:76:88:ab:ac:cd:7a:1a:c3:20:14:a2:49:28:49:5a:35:d1:
3d:44:e3:91:5e:d0:8a:48:6d:b5:a0:33:6d:d7:c0:bd:28:14:
d9:66:7c:c0:14:64:11:49:97:d1:75:df:d3:09:8c:23:16:c1:
4e:d7:5e:36:52:ec:cd:c3:9e:c6:83:c8:cd:e6:19:9b:6b:bf:
f1:bc:0b:2f:46:af:cb:70:ad:ca:27:86:e2:dd:95:c7:92:36:
a8:82:38:a3:5b:f5:c7:22:d8:b9:52:2f:b4:a7:8e:55:df:f8:
af:d7:6f:6e:8d:83:74:f0:f3:b5:98:3f:30:f0:a5:4a:d5:9d:
ad:82:fc:4b:98:eb:e9:3b:d1:9f:61:db:0c:fd:10:31:b8:b3:
6b:1a:8d:75:e4:f1:97:cb:9c:67:81:47:e7:2d:54:a1:d0:2a:
ec:fb:4b:73:5b:6b:e5:9f:ff:9a:6d:2b:20:14:ff:3e:c8:5e:
32:94:e5:6a:45:4a:c4:21:b6:6e:f5:d7:33:55:d1:b7:0b:72:
c6:82:8a:fd:e7:94:ee:79:c5:0b:ee:60:0a:1e:33:3a:4b:5a:
9d:39:e6:92:a9:c8:79:0d:4e:da:95:d6:81:ab:93:f1:14:f5:
82:24:a3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:05 2025 by rpki-client