Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: 0Ni7aeXFBSP6rkNUf+ftkz0nz5bwhRosP4aALove86c=
Subject key identifier: 9B:C0:8E:AE:FD:14:C6:C4:D1:8A:04:C0:76:A1:9C:72:70:59:EB:E9
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 0198D472898A4CC73E73F588F6B4CD49789A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 01:02:12 +0000
Manifest this update: Sat 23 Aug 2025 01:02:12 +0000
Manifest next update: Sun 24 Aug 2025 01:02:12 +0000
Files and hashes: 1: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: 5Tr/6BeA/wTozCsWnzZdI3l8Nf1wJCPHvESiajBabBQ=)
2: NYpGsgvZZnS43WLsZ6IiOuK1URk.roa (hash: 1DbDkDpg7L2mWH/maxc8wFOk6zRLCwxEnE3jGY7E3oU=)
3: hER6wRwe_hUZJ0u9RImVrBTy1as.roa (hash: iyJ20Ahzbr3qZY7vMtDGjDttWYIPJenArxH2H2QEoYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:89:8a:4c:c7:3e:73:f5:88:f6:b4:cd:49:78:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Aug 23 01:02:12 2025 GMT
Not After : Aug 24 01:02:12 2025 GMT
Subject: CN=9bc08eaefd14c6c4d18a04c076a19c727059ebe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:f7:f3:32:6a:c3:aa:9d:74:bf:61:25:35:
2d:11:2a:b2:6f:51:12:5c:a0:a7:9f:e8:7b:9a:ed:
47:80:8e:64:30:7a:6d:cd:4a:86:a0:75:0a:91:ed:
8c:67:5b:ad:e5:1d:7e:63:73:f1:75:61:7b:5d:d6:
49:38:d4:5f:45:2f:08:d2:87:cf:81:76:e2:cc:05:
70:dd:76:94:1d:a8:8e:99:6f:01:f7:f0:d3:c2:8c:
2a:91:7e:4a:4b:89:85:bd:c7:ac:48:ce:15:5b:ce:
74:5e:99:8e:b7:bd:2c:bf:a4:a0:f6:a8:d4:60:90:
12:a9:15:e1:c4:96:ed:df:a3:5b:cf:f9:ee:49:d1:
87:f1:6c:a2:b5:37:5c:0d:ca:58:08:39:08:bc:ae:
7a:50:78:20:9a:af:1b:78:ad:2f:8f:d1:79:ab:f4:
e3:04:40:5b:b0:a9:f7:41:84:b4:cd:fe:11:3f:23:
68:d7:b2:ca:64:c6:ed:45:7e:7b:08:b9:30:13:00:
c7:c3:5e:63:11:53:a0:27:c4:2d:99:cb:da:ba:a7:
27:7f:ba:23:5e:af:de:2b:90:93:e0:a6:60:cf:2d:
74:48:46:75:c7:de:83:28:93:10:cb:06:82:ad:01:
e0:95:bb:b2:21:75:f5:96:b0:24:d2:e0:60:c9:43:
21:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C0:8E:AE:FD:14:C6:C4:D1:8A:04:C0:76:A1:9C:72:70:59:EB:E9
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d9:46:ea:53:42:c8:eb:f3:d9:d5:88:18:b2:8a:13:a1:d0:
08:28:6d:69:c4:4c:b1:de:9b:b0:c5:c1:45:4d:2e:d2:6c:ca:
6f:77:dc:3d:23:df:bc:0b:63:6a:29:65:b2:94:b0:a5:8f:1c:
6f:09:5e:1f:a9:11:55:72:4b:bb:85:13:a9:69:15:ad:7d:98:
fa:73:65:a2:0f:ad:74:0d:38:95:26:6f:fb:68:36:b1:11:ee:
b2:a8:bb:85:1e:c1:9a:9a:c8:48:f2:ea:bb:f8:b6:12:5b:8b:
55:2f:6a:ad:6b:2f:f5:31:70:7a:26:11:c9:45:c0:85:f9:f0:
fe:8e:2a:53:80:02:b6:89:6f:da:3c:ed:5e:60:e4:26:12:f5:
53:0c:ed:8c:52:09:24:79:ab:91:ea:44:19:90:11:11:7f:ed:
6e:42:5d:00:8a:13:d6:d6:60:af:87:73:c3:84:d1:c7:14:49:
53:2e:66:8d:7f:f6:3f:ca:57:37:6d:80:64:3d:89:69:a7:ce:
30:23:79:e6:43:46:97:8c:6a:d2:ec:76:52:48:26:f4:e4:5e:
63:59:eb:61:d5:53:3a:b4:81:01:af:30:71:c7:24:43:d2:be:
a6:f7:6a:64:2d:7a:52:91:27:a5:14:bd:c7:e8:8f:f9:94:05:
d5:11:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:42 2025 by rpki-client