Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: WK2xbOTkNHqEhOQiCpzLkd9tfFQHXZfJpqcfMV5pTyU=
Subject key identifier: AD:9F:C9:7C:19:2C:10:7D:B8:DA:92:85:8C:D0:34:E2:FA:46:14:C4
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 019A01B4C93537AB48F4D51D855A6AC3AB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 13:00:16 +0000
Manifest this update: Mon 20 Oct 2025 13:00:16 +0000
Manifest next update: Tue 21 Oct 2025 13:00:16 +0000
Files and hashes: 1: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: yyGEnQeGGPiOfmMS9Ftqfal8NSRBzhV8qgpVmWE3UjY=)
2: hER6wRwe_hUZJ0u9RImVrBTy1as.roa (hash: iyJ20Ahzbr3qZY7vMtDGjDttWYIPJenArxH2H2QEoYE=)
3: qKN97IS00Dw-fIUwd184Vx9Y1MM.roa (hash: InDA9nhPg1Xj964zVuEzcl5j+yZyNDumD+IkyAj4yPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:c9:35:37:ab:48:f4:d5:1d:85:5a:6a:c3:ab:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Oct 20 13:00:16 2025 GMT
Not After : Oct 21 13:00:16 2025 GMT
Subject: CN=ad9fc97c192c107db8da92858cd034e2fa4614c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:92:b1:6c:e1:e5:f4:38:a0:ef:0c:a0:87:
6d:9d:8f:da:d0:b0:69:21:ca:35:93:fc:d8:ab:e3:
9c:89:22:a6:57:3a:12:9f:5c:92:22:92:51:2f:f3:
82:87:56:9b:5d:bc:25:c5:09:e9:3e:be:01:d4:57:
06:85:ce:b0:be:90:71:2a:8c:9a:cf:bb:09:d1:65:
08:72:cf:1f:f8:85:f9:e4:18:f1:68:da:b9:a9:31:
d3:a4:67:b7:9a:a6:cf:08:86:fb:4e:7e:46:4d:93:
cb:57:f4:0f:c5:43:bc:84:72:08:05:dd:a6:ee:b8:
bf:5c:0e:60:ad:ea:c5:71:3d:74:cf:4d:97:b0:3a:
45:dc:37:83:8f:4f:7a:5a:59:4e:c2:88:7d:81:db:
cd:d3:53:db:de:9a:8e:3c:84:48:de:61:84:b8:ff:
c5:d3:e8:b0:4a:e0:e5:ea:2c:3c:1c:5e:75:9d:ad:
52:56:00:61:9b:a6:a7:4e:bf:03:c0:45:8a:f4:c7:
77:ae:30:34:c7:3c:6c:c0:04:2d:1d:12:9a:02:96:
31:c0:2d:cf:8d:d1:5a:b0:75:b5:81:da:b6:6b:eb:
ce:26:95:44:f8:26:b3:b5:d5:41:0a:e9:2e:3e:4e:
9f:b2:1e:61:42:9b:ef:7c:b5:5c:be:9e:5b:09:9a:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9F:C9:7C:19:2C:10:7D:B8:DA:92:85:8C:D0:34:E2:FA:46:14:C4
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0d:0a:a2:1e:74:01:ff:9f:cd:d8:e6:aa:7e:b0:e2:03:47:
cd:65:88:2f:6b:df:9c:b8:f2:9f:d1:7d:be:88:36:09:80:20:
81:46:fa:30:d1:80:fb:f4:43:e0:dc:07:8e:a9:f5:75:bb:4c:
d2:4d:1b:c8:20:31:8f:8f:97:7c:1e:70:1f:29:4e:21:a1:db:
19:b4:36:cd:75:48:b3:1b:f4:5d:45:70:81:53:56:b1:b5:d2:
0b:08:da:be:c7:2b:99:93:30:fe:96:10:c2:27:4a:da:77:0d:
e8:6d:94:b2:30:79:1d:1e:cd:5a:6b:a3:96:4c:1d:3d:f7:5c:
96:d3:ae:a4:b3:6c:9a:db:90:e7:6a:7c:b7:9b:0a:72:9c:4c:
dc:c4:b7:26:b9:bc:f1:45:b4:cd:6d:33:71:e6:9d:73:a1:38:
52:96:7a:0e:9c:32:b9:95:e0:7b:a4:40:d4:81:e5:27:4e:66:
65:98:36:f6:6d:8d:16:9c:02:40:20:b0:a1:2e:28:c2:ab:7d:
58:df:00:75:cb:f8:3f:16:c8:a0:01:d4:c4:7c:91:6f:2f:cd:
42:5c:ab:53:79:8a:2b:dd:cd:a0:e4:8c:90:e4:94:1c:13:c6:
9d:14:26:ea:63:44:01:98:c1:7f:5b:b9:30:80:dd:67:6e:b4:
7f:41:64:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:55:20 2025 by rpki-client