Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: krg8+tB9wAfV2n6/nzZMCCZT7JSZkn+ix46QGpwuSm4=
Subject key identifier: C4:04:91:5C:E2:D3:45:5B:08:ED:C8:EF:E8:9E:31:69:E8:C2:A9:3A
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 0198D4A7DAF162E42A9F1E2C0DFE80795227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 05EF
Signing time: Sat 23 Aug 2025 02:00:26 +0000
Manifest this update: Sat 23 Aug 2025 02:00:26 +0000
Manifest next update: Sun 24 Aug 2025 02:00:26 +0000
Files and hashes: 1: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: 12KLpTg6Qy5TxLSMJGIQRRUZuVQIQQPhybq1seHgNFo=)
2: efoDT2af1r3VIxCXKIZiUqYjb70.roa (hash: Satp0B+ZSfcMrrpGb8DTBT0YLETw5Fxx+fyID/mnlcA=)
3: omka6JZ3cxuqRg8okuBPziVBWRs.roa (hash: 5reM5Q1cDG1s+QskdXUc/zeFl29KsaBLiyNK/rBISK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:da:f1:62:e4:2a:9f:1e:2c:0d:fe:80:79:52:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Aug 23 02:00:26 2025 GMT
Not After : Aug 24 02:00:26 2025 GMT
Subject: CN=c404915ce2d3455b08edc8efe89e3169e8c2a93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:91:5e:d3:61:40:55:df:1d:75:d0:e8:97:
54:a9:f0:00:bf:c1:b8:ec:db:d6:d7:b9:f4:3f:62:
9d:a4:55:4b:d8:a4:e3:ff:b3:37:85:41:6d:8a:04:
df:5f:ef:f7:05:00:e1:64:21:ab:08:33:77:a1:23:
ae:b5:2c:5f:94:f2:03:e3:88:c9:16:19:2f:01:6a:
e6:5e:3c:b7:fc:8f:56:09:34:06:ea:34:b0:89:d3:
48:04:f1:21:9c:70:25:63:60:eb:b0:d6:ea:83:7d:
59:45:4d:f6:03:5c:63:83:62:1a:6a:9c:2c:f6:c4:
ec:47:6b:88:dd:1c:2e:c6:b5:b7:5a:48:b9:57:8c:
4e:ad:88:24:7a:e0:93:4a:31:b9:1a:14:52:8b:34:
6b:36:5e:c6:ed:63:07:40:ff:f1:58:18:a6:10:8e:
5e:15:28:6b:3c:94:ee:5a:d4:57:c3:af:b8:38:51:
c6:4c:5e:77:62:cf:c8:42:c4:23:82:88:6e:bb:b5:
ec:f5:f2:a1:1f:bc:9c:a1:6a:09:fd:8d:6d:3a:a5:
ac:6d:be:db:28:a2:5b:93:92:11:c3:f7:c9:f2:1e:
57:b7:82:e4:ce:9e:9d:77:20:0a:06:ec:9a:99:5b:
68:5c:b8:40:a9:28:60:32:d9:fb:24:c1:4a:ac:60:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:04:91:5C:E2:D3:45:5B:08:ED:C8:EF:E8:9E:31:69:E8:C2:A9:3A
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:57:1e:bd:bf:76:d8:97:d9:3e:32:a2:7c:46:61:c2:94:e3:
83:a4:69:0d:13:d7:ff:7b:e8:37:a3:a3:40:ee:26:1a:d3:03:
62:b3:7b:c0:48:b5:59:7e:7a:f8:ef:cf:70:71:cc:63:a8:08:
09:b7:47:b0:d9:04:a8:d1:79:50:b6:62:7c:c0:9a:19:70:2d:
30:bf:74:92:79:d2:28:c9:93:7a:b5:c9:f4:3f:84:6c:1b:d3:
02:0b:15:cd:5a:39:bb:ba:8a:1e:73:ce:09:4a:7e:73:ab:69:
9f:a2:2f:62:cf:c3:15:21:66:a1:4e:83:9d:41:24:bc:20:49:
9e:61:5a:a2:49:c7:fc:e1:9a:28:23:e9:a8:d6:f7:43:e9:95:
3a:13:76:f4:d6:f2:93:8f:5e:a0:63:d4:5a:4c:5a:75:21:7e:
ac:ca:cc:eb:dd:45:dc:bc:d0:1b:80:fd:25:fb:34:17:67:a0:
dd:d5:33:3a:33:34:80:e2:75:fe:c0:e6:bb:f8:f9:bf:cd:42:
5f:de:fa:f7:e2:7e:45:1e:d1:19:da:28:d3:99:e8:15:17:39:
22:46:2c:14:59:3a:aa:74:60:68:23:9c:fd:39:b2:26:f1:a6:
3e:ae:75:ff:ee:a6:3e:0a:6d:ef:97:75:2b:d5:76:f8:03:fb:
47:84:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:24 2025 by rpki-client