Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: J+YIjqInQGYaF5fHgK5cOzd+fP7QbMX5KMYxmZMRoRU=
Subject key identifier: 10:1E:40:0C:84:64:80:DC:A5:94:C3:32:EC:29:E6:4B:07:AB:B3:D2
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 0199FFC81414E630F86F462F5FB88EBD7A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 04:02:06 +0000
Manifest this update: Mon 20 Oct 2025 04:02:06 +0000
Manifest next update: Tue 21 Oct 2025 04:02:06 +0000
Files and hashes: 1: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: nxY+lihFQ0frC/AqU1SwowCDmeIo9X/u/UrqCXZgvrk=)
2: hER6wRwe_hUZJ0u9RImVrBTy1as.roa (hash: iyJ20Ahzbr3qZY7vMtDGjDttWYIPJenArxH2H2QEoYE=)
3: qKN97IS00Dw-fIUwd184Vx9Y1MM.roa (hash: InDA9nhPg1Xj964zVuEzcl5j+yZyNDumD+IkyAj4yPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:14:14:e6:30:f8:6f:46:2f:5f:b8:8e:bd:7a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Oct 20 04:02:06 2025 GMT
Not After : Oct 21 04:02:06 2025 GMT
Subject: CN=101e400c846480dca594c332ec29e64b07abb3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a4:df:20:46:26:c3:9d:54:64:57:86:13:3f:
ab:b3:d1:3c:6a:7f:7e:a0:a3:1f:ba:6b:fe:0b:fd:
b1:dd:ce:e4:db:33:c0:c9:2b:33:f3:a7:9d:40:9a:
24:e5:11:c2:60:e4:ff:65:60:33:25:34:61:7a:2e:
af:3b:a3:52:84:13:fc:2a:a6:d0:ec:1a:db:a3:9a:
2f:9b:f5:d6:4c:66:65:31:ef:d5:f9:05:b4:45:00:
3c:d7:70:22:30:86:db:a5:f6:11:ca:38:04:f7:a6:
af:9a:72:20:3f:77:a8:8d:a8:02:35:28:38:44:5b:
30:77:e7:e9:5e:b7:fe:3d:13:91:63:4e:c3:d0:c6:
95:a7:a0:0a:f7:43:90:f9:85:66:47:e4:b2:22:6c:
d4:6d:33:0d:9b:06:3d:b3:8c:1f:64:fb:14:57:35:
ab:ea:34:34:a2:cb:57:fc:1e:bc:46:24:ff:28:5a:
75:af:4f:bb:14:52:59:7b:91:ae:bf:74:f1:57:10:
38:2c:0c:d2:a8:45:cf:32:e2:2f:0e:0a:15:b7:25:
22:7f:df:b7:ce:18:d2:8d:90:cd:35:a6:6a:86:1c:
5f:36:aa:0b:25:85:a5:b2:8e:86:e0:31:be:16:43:
be:a0:fb:3a:57:56:82:02:88:d9:5b:d9:61:1b:81:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1E:40:0C:84:64:80:DC:A5:94:C3:32:EC:29:E6:4B:07:AB:B3:D2
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:04:52:08:b6:bd:5c:a8:4f:26:36:d0:85:fe:9c:03:61:fa:
a8:61:be:5b:67:86:b6:f9:ea:da:9e:5a:16:59:d7:8f:61:1a:
4e:e8:6e:d1:e1:62:28:95:dc:5c:f0:3f:7d:4c:84:c6:bd:69:
90:c6:8a:37:5f:09:e8:2d:f1:3e:f1:ae:be:b8:dd:af:0d:67:
da:89:61:c7:00:45:10:d3:d4:ed:9c:31:9d:e7:aa:7b:40:b7:
50:66:f8:58:3a:8f:80:86:1f:6a:9c:76:05:e3:cf:63:a9:92:
a9:ed:0c:4d:54:d2:15:84:b3:c2:71:08:51:41:ca:fe:d6:b7:
72:bb:7c:4b:a6:26:88:23:6b:60:5e:fa:51:ed:24:ca:07:d6:
58:3a:57:27:a2:9a:14:bb:2b:e2:d7:b0:ce:f0:4c:6a:8d:13:
b4:3f:4e:9b:03:d7:a9:31:95:d7:ef:da:5e:7d:b3:6f:92:13:
a7:a5:ac:25:bc:31:b4:48:15:be:c4:13:52:34:94:1e:44:41:
a7:05:7e:de:cd:aa:23:30:62:a5:f3:40:bb:9e:07:72:f6:6c:
f3:29:78:bd:b9:b2:dd:c6:6b:9f:68:64:b5:90:dd:f7:30:14:
9c:16:b5:fc:38:75:8e:4f:84:fc:18:bc:92:3d:38:00:e6:c2:
0d:87:25:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yBQU5jD4b0YvX7iOvXqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDFhNWEyYTE4MzM5NjI5Y2MxMzAzZTZkZWM4YmI2MDVk
ZGNhNjUwHhcNMjUxMDIwMDQwMjA2WhcNMjUxMDIxMDQwMjA2WjAzMTEwLwYDVQQD
EygxMDFlNDAwYzg0NjQ4MGRjYTU5NGMzMzJlYzI5ZTY0YjA3YWJiM2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aTfIEYmw51UZFeGEz+rs9E8an9+
oKMfumv+C/2x3c7k2zPAySsz86edQJok5RHCYOT/ZWAzJTRhei6vO6NShBP8KqbQ
7Brbo5ovm/XWTGZlMe/V+QW0RQA813AiMIbbpfYRyjgE96avmnIgP3eojagCNSg4
RFswd+fpXrf+PRORY07D0MaVp6AK90OQ+YVmR+SyImzUbTMNmwY9s4wfZPsUVzWr
6jQ0ostX/B68RiT/KFp1r0+7FFJZe5Guv3TxVxA4LAzSqEXPMuIvDgoVtyUif9+3
zhjSjZDNNaZqhhxfNqoLJYWlso6G4DG+FkO+oPs6V1aCAojZW9lhG4Gm0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAeQAyEZIDcpZTDMuwp5ksHq7PSMB8GA1UdIwQY
MBaAFApBpaKhgzlinMEwPm3si7YF3cplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kNDNjMmMtNzRlOS00N2Q0LWJmNjIt
ODBmN2ZkNmVhOWM5LzEvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kNDNjMmMtNzRlOS00N2Q0LWJmNjItODBmN2ZkNmVhOWM5
LzEvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgRSCLa9
XKhPJjbQhf6cA2H6qGG+W2eGtvnq2p5aFlnXj2EaTuhu0eFiKJXcXPA/fUyExr1p
kMaKN18J6C3xPvGuvrjdrw1n2olhxwBFENPU7Zwxneeqe0C3UGb4WDqPgIYfapx2
BePPY6mSqe0MTVTSFYSzwnEIUUHK/ta3crt8S6YmiCNrYF76Ue0kygfWWDpXJ6Ka
FLsr4tewzvBMao0TtD9OmwPXqTGV1+/aXn2zb5ITp6WsJbwxtEgVvsQTUjSUHkRB
pwV+3s2qIzBipfNAu54HcvZs8yl4vbmy3cZrn2hktZDd9zAUnBa1/Dh1jk+E/Bi8
kj04AObCDYcloQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:54 2025 by rpki-client