Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: QRyoRjwg5ukzlTFwQPShNQTQtmHuy4EuB7ZDgo2C0pI=
Subject key identifier: 3E:E1:D0:C2:B2:84:01:9B:7F:23:09:EB:BC:AF:BD:10:5A:12:D4:94
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 0199FC8FA60068942FDAB28593587600F8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: 7UVhoxwKA1Sn0mOw0+U2hjZ+o2RITjCYLdQepi8LNIw=)
2: tICvfkE-wd7ljGY6sghDtS75C50.roa (hash: EofEa7cxTHv8xJhHBChQPwYV0i7JZnqjIowIrpKVJDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a6:00:68:94:2f:da:b2:85:93:58:76:00:f8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=3ee1d0c2b284019b7f2309ebbcafbd105a12d494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:9b:92:ef:a1:18:e6:cb:77:5a:28:58:b7:
68:7f:6f:3c:0e:37:6d:58:5b:72:05:9d:7f:6a:19:
ec:b0:f4:91:46:da:db:8d:79:79:9a:2e:a7:42:6c:
d4:87:e7:a6:5b:37:d7:e3:02:59:e6:80:27:25:79:
11:d9:48:79:41:7b:9e:0d:56:2b:11:b2:dc:13:c7:
8c:0f:f9:e5:63:02:5a:3c:db:b7:9c:67:51:a8:f0:
2a:b6:0d:8b:28:60:32:fa:57:29:2d:44:09:3f:8d:
53:fe:61:7b:f5:c7:41:7f:9f:94:41:2b:f1:15:d9:
0a:3d:ac:6c:5c:58:f7:49:c1:f5:66:6a:e9:69:8b:
66:f3:e7:f0:b8:1f:21:09:a8:ec:3e:ff:fe:8d:fe:
41:9b:11:c2:f1:eb:85:2e:dc:8a:b1:84:c4:cb:39:
9b:4f:dd:a0:3d:ec:71:bc:70:86:e5:51:f5:88:c6:
51:03:38:c9:3b:90:38:9f:a0:19:c7:ed:53:87:99:
54:5d:91:47:12:3d:34:68:b3:16:40:e4:53:d6:c3:
fd:2f:60:5a:96:6a:ab:7d:ed:b9:c5:ff:70:a1:b2:
42:c6:e7:54:03:95:3d:33:d1:24:4a:72:3e:7c:d7:
d4:c2:bf:42:5c:95:3b:4b:1b:b2:3c:b1:c2:00:ee:
ef:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E1:D0:C2:B2:84:01:9B:7F:23:09:EB:BC:AF:BD:10:5A:12:D4:94
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:05:7f:f0:1b:8d:36:71:c8:14:e8:f2:c5:0d:85:42:d5:ef:
dc:05:29:a3:fe:89:f5:e8:48:39:25:c2:0d:63:d2:ad:89:f2:
8d:c8:c0:96:91:1e:c2:61:a4:c3:e7:e9:6b:17:ae:dc:2e:5c:
14:35:74:fc:63:b4:f9:df:4d:b7:0d:b3:d1:a6:ba:9d:8a:24:
35:3d:43:aa:32:71:9f:82:49:47:6d:48:4e:9a:f0:af:75:ca:
10:db:69:cf:dc:38:af:cd:6d:73:03:7f:9b:b1:02:27:34:01:
c1:34:4c:00:61:66:75:cf:2a:e5:7c:fd:00:dd:31:b0:b7:96:
31:ce:00:e4:6f:2f:69:11:7d:aa:a3:fb:36:b2:12:50:a2:f7:
39:50:fd:7e:72:55:86:87:05:2a:c3:b2:9c:40:3f:d4:0c:cc:
49:09:8f:6b:cb:4d:34:7b:ee:31:24:2d:73:23:05:4a:91:34:
55:bd:81:0a:9f:99:32:06:3c:90:93:a1:f9:82:f3:44:a8:10:
88:3f:b9:76:a8:12:76:1d:5f:ff:e1:54:39:08:88:7e:a2:18:
8d:dd:f4:49:41:5d:f3:4a:6c:80:3e:3e:69:2a:4c:ae:43:16:
3e:39:18:9a:73:95:eb:99:bf:e9:92:5b:16:da:64:5a:80:41:
29:ab:0a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:42 2025 by rpki-client