Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
File: ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json)
Hash identifier: yLhNptw/0qxix+CrC0RTqN2QAeom9UlR66NMdYwKid4=
Subject key identifier: AA:B6:75:E6:34:8F:A4:85:25:49:9C:4D:24:50:C3:35:EF:AC:50:5E
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Certificate issuer: /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial: 0199FDD9494C08A4DEA5CB535AE04C495F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
Manifest number: 0947
Signing time: Sun 19 Oct 2025 19:01:39 +0000
Manifest this update: Sun 19 Oct 2025 19:01:39 +0000
Manifest next update: Mon 20 Oct 2025 19:01:39 +0000
Files and hashes: 1: XeS-j2IYyupPYwAd3k1rQhL0Pjk.roa (hash: LaZnavonJdxkwg+OL44y91TnIY6G41jXIPEjOAmHc4s=)
2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: lUmv2jLcUY9xlR24gfP1RCuLyuXubYT/fniqbwuj10Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:49:4c:08:a4:de:a5:cb:53:5a:e0:4c:49:5f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Validity
Not Before: Oct 19 19:01:39 2025 GMT
Not After : Oct 20 19:01:39 2025 GMT
Subject: CN=aab675e6348fa48525499c4d2450c335efac505e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:a3:e5:cf:0f:84:6b:c6:3d:bc:2c:28:02:
bf:48:7a:c1:40:e9:a0:12:8f:ef:d2:e0:9f:65:92:
86:f7:85:cb:f4:87:64:7b:1c:fd:f1:c2:23:85:bc:
f6:f4:44:3a:bd:e5:ff:c2:17:4c:53:30:d0:ad:3a:
5a:82:26:79:b5:8c:ea:ef:72:ca:f0:d9:04:cd:29:
f5:76:2d:59:d6:be:d1:cc:ad:3d:f7:fc:08:39:c1:
e2:3a:a2:25:9c:96:07:b4:b4:41:7b:07:d6:04:1f:
6e:1b:a7:51:22:24:78:4d:c6:41:66:56:69:08:d0:
14:59:ac:17:aa:11:ef:68:f7:41:71:4d:7d:23:c0:
89:ef:d7:59:06:76:18:99:1f:97:5b:5f:11:d4:ed:
b3:e9:3b:c1:15:33:47:c9:21:50:e8:9c:3c:52:41:
79:69:6b:41:52:ab:4a:80:3b:c9:21:4b:27:65:9c:
14:a7:aa:8a:f3:26:72:9a:9b:84:1c:7e:c4:0f:de:
69:cf:cf:6e:5f:6f:48:5d:94:03:da:c1:a0:25:2b:
c0:21:fa:2b:6a:de:e2:11:de:bc:f2:b6:84:d8:3b:
ec:cf:cb:64:86:cf:a2:41:b6:38:ed:7a:f4:c4:a7:
54:24:5b:84:90:b5:48:fe:f4:28:4a:ee:d2:8b:0f:
c9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B6:75:E6:34:8F:A4:85:25:49:9C:4D:24:50:C3:35:EF:AC:50:5E
X509v3 Authority Key Identifier:
keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ea:1c:de:01:37:19:97:ec:ae:55:5f:7d:97:c9:f7:17:aa:
8e:99:45:b5:c5:65:06:fe:c9:5d:18:e8:38:43:41:cb:6a:3f:
a8:ae:99:47:6e:6e:cd:db:5c:2a:62:91:c4:07:fc:f5:67:90:
00:3f:49:fb:b1:cb:12:ac:2b:01:7d:14:f0:39:e3:5e:20:06:
a0:8b:94:7a:b0:08:3c:e8:45:0a:86:f1:76:da:48:ed:30:06:
1e:38:c3:bc:19:6d:28:96:02:9d:af:e7:d0:ec:78:c5:ae:6d:
87:74:d3:b6:c9:19:65:0c:30:a1:c2:d0:ba:dd:06:20:f1:aa:
de:73:1f:3a:4e:a0:0c:43:ba:79:34:25:d7:0c:ea:a6:82:0a:
40:12:c5:4a:27:f3:f5:75:43:73:bf:43:b1:30:fe:49:af:2f:
f4:af:e0:d8:eb:60:8b:1a:ea:e1:fa:f3:ea:f4:4c:52:74:f0:
d4:b5:e4:e9:33:8c:5b:79:30:c1:6e:c3:e1:38:ec:05:aa:e5:
c1:ef:23:b2:82:ae:97:f9:e1:41:c7:08:1b:0b:22:c7:38:da:
8a:f5:a8:5a:47:2a:17:e6:6f:7e:fe:af:06:16:ca:51:04:11:
be:0b:0b:a1:1e:7c:fc:12:8b:89:80:43:0d:4d:ab:08:f1:f8:
e0:44:77:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92UlMCKTepctTWuBMSV89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDBiYTc0NGUwOWUxZDM2Y2I3MDQ2Y2I1ODk5NWMxZTM1
MTMyMjAwHhcNMjUxMDE5MTkwMTM5WhcNMjUxMDIwMTkwMTM5WjAzMTEwLwYDVQQD
EyhhYWI2NzVlNjM0OGZhNDg1MjU0OTljNGQyNDUwYzMzNWVmYWM1MDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY6j5c8PhGvGPbwsKAK/SHrBQOmg
Eo/v0uCfZZKG94XL9Idkexz98cIjhbz29EQ6veX/whdMUzDQrTpagiZ5tYzq73LK
8NkEzSn1di1Z1r7RzK099/wIOcHiOqIlnJYHtLRBewfWBB9uG6dRIiR4TcZBZlZp
CNAUWawXqhHvaPdBcU19I8CJ79dZBnYYmR+XW18R1O2z6TvBFTNHySFQ6Jw8UkF5
aWtBUqtKgDvJIUsnZZwUp6qK8yZympuEHH7ED95pz89uX29IXZQD2sGgJSvAIfor
at7iEd688raE2Dvsz8tkhs+iQbY47Xr0xKdUJFuEkLVI/vQoSu7Siw/JwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq2deY0j6SFJUmcTSRQwzXvrFBeMB8GA1UdIwQY
MBaAFHJAunROCeHTbLcEbLWJlcHjUTIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tDNmRFNEo0ZE5zdHdSc3RZbVZ3ZU5STWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82MTRkNzctZDM0Yy00ZmJhLTk0ZTMt
MmI1ZWM2NTJhZjZkLzEvY2tDNmRFNEo0ZE5zdHdSc3RZbVZ3ZU5STWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82MTRkNzctZDM0Yy00ZmJhLTk0ZTMtMmI1ZWM2NTJhZjZk
LzEvY2tDNmRFNEo0ZE5zdHdSc3RZbVZ3ZU5STWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOoc3gE3
GZfsrlVffZfJ9xeqjplFtcVlBv7JXRjoOENBy2o/qK6ZR25uzdtcKmKRxAf89WeQ
AD9J+7HLEqwrAX0U8DnjXiAGoIuUerAIPOhFCobxdtpI7TAGHjjDvBltKJYCna/n
0Ox4xa5th3TTtskZZQwwocLQut0GIPGq3nMfOk6gDEO6eTQl1wzqpoIKQBLFSifz
9XVDc79DsTD+Sa8v9K/g2Otgixrq4frz6vRMUnTw1LXk6TOMW3kwwW7D4TjsBarl
we8jsoKul/nhQccIGwsixzjaivWoWkcqF+Zvfv6vBhbKUQQRvgsLoR58/BKLiYBD
DU2rCPH44ER3gA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:02 2025 by rpki-client