Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: 3YcN+AZXY9VnJnkG0D5Db7uoSbzHv643Lk1QXBCSafw=
Subject key identifier: 70:72:DD:C0:2F:FB:BA:2B:10:34:D2:02:27:91:72:95:77:36:D7:40
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 0198D705EB2071D12D326160CA1F7CA203E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:25 +0000
Manifest this update: Sat 23 Aug 2025 13:02:25 +0000
Manifest next update: Sun 24 Aug 2025 13:02:25 +0000
Files and hashes: 1: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: n1bfOi10UO8HZilGHSsW/FFR/AIAwCTkMmG1TJe3sPY=)
2: tICvfkE-wd7ljGY6sghDtS75C50.roa (hash: EofEa7cxTHv8xJhHBChQPwYV0i7JZnqjIowIrpKVJDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:eb:20:71:d1:2d:32:61:60:ca:1f:7c:a2:03:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Aug 23 13:02:25 2025 GMT
Not After : Aug 24 13:02:25 2025 GMT
Subject: CN=7072ddc02ffbba2b1034d202279172957736d740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:49:9f:31:90:e2:75:91:29:6e:d0:b7:80:
93:4d:2f:0f:46:a0:63:af:e3:10:2d:e4:72:0b:75:
e3:59:ac:c3:b1:77:f6:6c:60:e7:12:8a:3b:e7:5a:
5e:8c:c1:fc:a4:2a:cf:04:90:dc:9d:ed:f9:44:8c:
31:95:fa:5a:84:38:d4:f8:d7:ce:9e:dd:16:b2:ad:
b4:11:dd:7a:ad:21:23:d2:69:a3:30:1e:5f:9e:31:
5a:db:bc:dc:44:d2:aa:9b:0a:15:84:74:73:72:55:
aa:41:ae:0f:6d:09:ea:50:bc:d1:e4:d3:20:da:d6:
55:93:f3:75:a4:9d:c6:81:d2:85:4c:9e:5d:f5:26:
94:f5:97:a5:e2:93:42:74:b6:36:bd:d6:d5:aa:b2:
20:00:ef:5f:e4:28:6f:5a:3f:ff:9e:23:c3:94:0d:
33:08:d1:b6:96:c7:1d:2f:17:1a:b6:01:0e:1e:c5:
d8:be:52:b2:02:b4:99:1d:34:b6:c5:35:43:d7:53:
b1:67:19:27:26:55:83:bb:28:ee:c7:83:51:96:d7:
fa:26:f7:d3:ce:d2:b0:df:31:4d:fe:54:cc:53:06:
b6:4a:fc:4c:c8:ca:dc:6f:89:f9:17:03:59:16:df:
8e:23:c5:c8:1b:92:69:44:a8:6f:74:ce:e8:35:e3:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:72:DD:C0:2F:FB:BA:2B:10:34:D2:02:27:91:72:95:77:36:D7:40
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7c:fb:eb:d3:0f:ac:5c:bc:cc:10:6e:01:92:3a:83:f1:df:
a4:97:12:36:be:0e:8f:6c:6d:c2:a4:d7:25:85:f7:2b:f8:9e:
73:1e:1c:d4:86:0d:ad:14:87:15:42:4c:82:8d:94:9d:93:93:
e2:a2:df:b8:5c:41:47:f2:92:cd:72:f4:e5:db:a9:48:31:73:
fc:3c:6c:6a:77:c0:e3:a7:1d:c4:b8:c3:6a:76:b0:fa:94:4e:
48:b9:82:f9:e1:4f:69:c9:31:d0:de:d4:75:10:73:33:8a:aa:
d7:b2:df:e5:79:f2:0a:91:31:11:bd:b5:82:1e:7b:94:d5:ad:
ce:20:84:98:f4:c4:7b:9d:5c:5a:9c:68:57:ea:6e:b0:e2:ac:
fa:7e:0e:9f:6c:a0:fe:bf:4c:e6:02:c0:3a:4d:ab:53:53:21:
e4:23:2c:06:9b:f1:6d:0d:d4:66:c2:3b:60:fb:44:e8:dc:35:
98:f4:5f:d2:06:bc:51:2b:ba:e0:f0:43:5f:9e:ea:16:f2:23:
22:95:0e:36:aa:75:2c:88:b5:91:ca:04:8f:d4:3b:2c:4a:d7:
e1:f8:f0:f6:1c:97:f9:bd:2d:e5:f4:6a:86:bb:55:ef:fd:90:
d6:f3:03:9f:62:c4:7f:7f:e2:76:4c:dc:d2:40:33:eb:63:b6:
d4:93:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:30:15 2025 by rpki-client