Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft (raw, json)
Hash identifier: AF0Gz4mdsaU/5pvYiggCWFNnZN+WDbD6wOF4fzwuNg8=
Subject key identifier: D0:96:FE:E3:B3:9B:D8:C9:B9:49:61:52:FD:CB:34:3E:EB:45:62:51
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 0199FBEC2C555923CE0252DE023A1C761F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:03:03 +0000
Manifest this update: Sun 19 Oct 2025 10:03:03 +0000
Manifest next update: Mon 20 Oct 2025 10:03:03 +0000
Files and hashes: 1: CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl (hash: O2SK0usuEAhdA5TY/khVhW5pWe3fB58SMJbFEBD9E8A=)
2: FmAmhG0AvPG6yVB64Qfw6xRip4M.roa (hash: 84/kBc6q38BYMUmioROiS2CF0R9+3DZAaiOiDJ9PSD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:2c:55:59:23:ce:02:52:de:02:3a:1c:76:1f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Oct 19 10:03:03 2025 GMT
Not After : Oct 20 10:03:03 2025 GMT
Subject: CN=d096fee3b39bd8c9b9496152fdcb343eeb456251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:5e:c9:9b:92:64:ec:83:a4:a2:bc:c6:b6:
25:d4:fa:4f:d9:f6:8a:17:ad:15:bc:ed:28:b2:a7:
74:c0:a0:bb:49:c0:11:85:64:95:41:b2:a3:5b:7d:
88:04:a0:e4:80:df:ee:74:d0:51:29:f0:80:70:71:
26:4e:2c:cf:e1:89:2e:82:b5:82:19:3e:02:ff:b2:
c3:ef:04:d1:ca:ff:dd:c7:c2:d4:7a:e8:d2:b6:0c:
28:5c:e6:ef:50:e9:f0:c3:0a:5e:11:83:8e:16:de:
a7:69:ef:ec:58:aa:04:75:eb:37:59:72:ee:86:24:
3c:5d:84:3d:e2:f5:cc:5e:d5:56:a7:8e:56:cd:f7:
fd:4a:a1:b7:e4:c2:53:e5:74:1f:6e:f9:36:cf:92:
dc:f5:1b:43:13:9f:05:70:7c:99:59:2f:5b:bd:a7:
de:93:16:75:a3:a9:fc:4a:5c:bd:c2:3c:6d:03:65:
50:6c:4f:94:f1:12:39:e2:5c:e1:9b:e7:6c:ef:db:
f1:44:f6:f2:f5:cf:6c:cd:b7:7d:6b:ad:b2:0a:4c:
aa:d9:b2:0d:68:ca:c1:23:60:cb:19:fc:a8:82:92:
7f:ee:e7:fa:30:0d:c2:3d:d4:96:79:46:8c:dc:6d:
aa:ab:51:b1:3f:4b:23:dd:9c:f5:b2:98:3e:ec:7b:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:96:FE:E3:B3:9B:D8:C9:B9:49:61:52:FD:CB:34:3E:EB:45:62:51
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:10:4b:30:91:a0:8b:07:43:e8:ad:e7:a3:09:89:aa:53:0a:
6a:e9:3d:12:fc:a4:b2:3d:9a:40:b2:5f:65:38:c8:44:31:ec:
14:28:f4:06:08:07:31:2b:ad:a6:0e:50:a1:fc:49:c5:75:fb:
42:7a:d9:7d:05:67:d0:ca:56:5f:b3:c2:40:c3:dc:f0:9d:08:
cb:f7:2d:32:4b:f3:3c:de:6f:02:7a:b3:92:cd:03:f5:cb:56:
ab:69:44:82:ca:1b:4b:7e:73:1f:17:29:63:ec:12:df:ba:6d:
17:79:b2:29:f9:b1:42:e7:0d:8c:c9:eb:cb:d1:05:1e:f2:2a:
a9:ac:51:60:25:d3:58:2c:46:49:94:51:d4:d3:06:28:55:af:
b9:00:d5:96:52:0f:bf:d1:06:89:21:91:fe:83:72:38:d4:e3:
46:d2:93:a8:06:bf:e8:17:b3:ed:83:f8:fd:f6:24:9f:62:ff:
13:58:aa:e3:d7:96:e2:14:69:0b:8f:5c:3b:c5:58:21:05:6f:
5a:fb:17:b8:58:2a:b7:5e:7f:10:52:35:5a:11:75:db:8d:3a:
5b:14:cf:a9:1c:5a:dd:40:0a:d8:15:e3:8b:57:29:73:06:9c:
f2:52:83:23:8c:03:87:8a:5b:07:79:3b:4a:af:6d:9a:34:8d:
cc:c0:bf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:51 2025 by rpki-client