Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft (raw, json)
Hash identifier: GtUwMG56KWzQvSo9vlY4vFAvG8O6NLGwDHY2DloTEls=
Subject key identifier: C5:15:F5:CB:4A:91:18:59:C7:AF:11:DC:46:6A:0E:06:C0:25:EB:83
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 0198D65FF301B392CAE3AB8BB5D2602957BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:01:08 +0000
Manifest this update: Sat 23 Aug 2025 10:01:08 +0000
Manifest next update: Sun 24 Aug 2025 10:01:08 +0000
Files and hashes: 1: CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl (hash: Bdn0JWUCI8wWRQHFOEpIBVPS/77mGFG/J6BeWZrHgIk=)
2: FmAmhG0AvPG6yVB64Qfw6xRip4M.roa (hash: 84/kBc6q38BYMUmioROiS2CF0R9+3DZAaiOiDJ9PSD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f3:01:b3:92:ca:e3:ab:8b:b5:d2:60:29:57:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Aug 23 10:01:08 2025 GMT
Not After : Aug 24 10:01:08 2025 GMT
Subject: CN=c515f5cb4a911859c7af11dc466a0e06c025eb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:4c:dd:d6:75:c6:f6:11:bc:1a:bf:a7:5b:
ba:28:45:16:61:bf:f4:8b:5a:66:cd:64:73:dd:91:
24:70:39:0c:73:34:5a:e5:5d:4e:a4:6b:9d:d0:4b:
8f:02:48:af:45:4d:b3:d9:04:2d:81:2f:13:28:f0:
ae:6b:73:78:f9:b8:13:a9:0a:56:3d:73:29:75:f6:
1c:81:ad:72:43:8f:24:39:0e:aa:63:03:d9:f7:52:
ba:ff:c2:ba:f3:4b:d4:5f:17:60:f1:a6:bb:7f:29:
a7:e1:a1:c2:17:5b:25:4c:b8:3f:35:02:2d:67:27:
70:ba:61:1b:83:35:98:e9:b9:1a:a0:bd:f0:34:59:
d1:ce:17:86:ba:29:0a:86:e0:20:c6:09:95:99:08:
71:df:d2:73:b1:66:e8:f3:0a:14:a9:a5:0b:7d:e8:
07:29:cb:e5:c4:da:76:70:60:e9:d1:c5:0d:d1:80:
5c:cb:8e:19:93:99:b1:d5:21:c7:8f:ed:b4:e2:68:
74:47:88:2f:21:67:2b:cc:0c:4a:8a:bc:59:5d:96:
3a:4e:8d:98:97:20:fd:a7:9f:fc:4d:77:a2:e8:28:
2f:b9:23:e1:1a:60:b8:ea:64:fa:9d:03:c4:9a:4b:
ef:64:6e:1f:70:c9:f0:6e:9c:70:79:6b:6e:cf:03:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:15:F5:CB:4A:91:18:59:C7:AF:11:DC:46:6A:0E:06:C0:25:EB:83
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:40:34:20:39:ce:f7:0c:8c:a0:1a:9b:45:33:63:15:12:cb:
08:fb:d1:74:6a:67:78:b8:51:5e:7a:48:68:04:f9:67:c7:d9:
54:22:d0:b7:6a:2d:8c:a9:c0:7a:d2:f5:95:4a:2f:64:0d:89:
48:57:13:3c:1b:0c:45:84:28:50:25:36:89:30:c4:0a:b3:02:
15:9e:b7:5b:50:7d:44:62:97:dc:81:a6:37:9a:b5:a7:69:09:
58:73:20:3d:48:ac:df:3f:3e:32:5d:ec:88:57:8a:83:0b:5c:
2a:58:42:2f:9b:54:38:c0:7e:07:b1:43:86:be:d6:ec:7a:ef:
54:96:4a:f8:56:89:b7:41:e4:28:b6:70:da:87:46:21:2e:86:
fc:2a:2b:05:1d:68:8f:a7:93:15:30:50:10:d2:d2:3a:84:32:
51:13:44:fa:3a:d5:54:81:1d:a0:ff:da:a2:b6:9b:9d:b5:2d:
d5:be:e3:ca:4b:75:14:1e:f1:08:0d:d2:02:86:0b:aa:71:62:
4c:42:e4:ae:15:b2:b8:ca:8a:c4:10:cc:71:a4:16:5a:f9:9e:
3a:24:ff:94:27:3e:c0:ae:f3:64:2c:1a:c0:2b:3b:c5:76:09:
7b:12:48:4f:15:4b:12:79:35:14:15:5b:28:0b:cc:91:09:d5:
e4:0d:94:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX/MBs5LK46uLtdJgKVe7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDFhOTI1ZjhkNjY4NGM4NjEwN2QyNzU2YjRhYTkzODgx
ZjAyYWUwHhcNMjUwODIzMTAwMTA4WhcNMjUwODI0MTAwMTA4WjAzMTEwLwYDVQQD
EyhjNTE1ZjVjYjRhOTExODU5YzdhZjExZGM0NjZhMGUwNmMwMjVlYjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUxM3dZ1xvYRvBq/p1u6KEUWYb/0
i1pmzWRz3ZEkcDkMczRa5V1OpGud0EuPAkivRU2z2QQtgS8TKPCua3N4+bgTqQpW
PXMpdfYcga1yQ48kOQ6qYwPZ91K6/8K680vUXxdg8aa7fymn4aHCF1slTLg/NQIt
ZydwumEbgzWY6bkaoL3wNFnRzheGuikKhuAgxgmVmQhx39JzsWbo8woUqaULfegH
KcvlxNp2cGDp0cUN0YBcy44Zk5mx1SHHj+204mh0R4gvIWcrzAxKirxZXZY6To2Y
lyD9p5/8TXei6CgvuSPhGmC46mT6nQPEmkvvZG4fcMnwbpxweWtuzwOFiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUV9ctKkRhZx68R3EZqDgbAJeuDMB8GA1UdIwQY
MBaAFApBqSX41mhMhhB9J1a0qpOIHwKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tHcEpmaldhRXlHRUgwblZyU3FrNGdmQXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMzdkMWQtZDRmYi00OTZjLWFmNDkt
MzQyMDY4NGM3ZTQxLzEvQ2tHcEpmaldhRXlHRUgwblZyU3FrNGdmQXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lMzdkMWQtZDRmYi00OTZjLWFmNDktMzQyMDY4NGM3ZTQx
LzEvQ2tHcEpmaldhRXlHRUgwblZyU3FrNGdmQXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEA0IDnO
9wyMoBqbRTNjFRLLCPvRdGpneLhRXnpIaAT5Z8fZVCLQt2otjKnAetL1lUovZA2J
SFcTPBsMRYQoUCU2iTDECrMCFZ63W1B9RGKX3IGmN5q1p2kJWHMgPUis3z8+Ml3s
iFeKgwtcKlhCL5tUOMB+B7FDhr7W7HrvVJZK+FaJt0HkKLZw2odGIS6G/CorBR1o
j6eTFTBQENLSOoQyURNE+jrVVIEdoP/aorabnbUt1b7jykt1FB7xCA3SAoYLqnFi
TELkrhWyuMqKxBDMcaQWWvmeOiT/lCc+wK7zZCwawCs7xXYJexJITxVLEnk1FBVb
KAvMkQnV5A2UqA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:42 2025 by rpki-client