Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: nY74OS2hfanqRrcAEKC3GPAAeF9cEV8CGyQd7MY1g3E=
Subject key identifier: 11:D2:D4:CA:FF:EF:C0:68:14:B1:F8:F3:68:C1:81:C5:0E:AE:25:A1
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 0199FC218088FE29A92C04BF42CDA932AAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 0688
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: u3+2IVzrDLXnMmC28nUb+TQ8sMuPgLOwIZDPBXtqjPM=)
2: efoDT2af1r3VIxCXKIZiUqYjb70.roa (hash: Satp0B+ZSfcMrrpGb8DTBT0YLETw5Fxx+fyID/mnlcA=)
3: omka6JZ3cxuqRg8okuBPziVBWRs.roa (hash: 5reM5Q1cDG1s+QskdXUc/zeFl29KsaBLiyNK/rBISK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:80:88:fe:29:a9:2c:04:bf:42:cd:a9:32:aa:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=11d2d4caffefc06814b1f8f368c181c50eae25a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:51:f7:3b:d1:f4:22:73:1d:13:3b:bd:30:
9d:ad:04:b9:6d:8b:5e:39:e0:10:f6:c6:54:b5:61:
35:6a:8f:21:25:b1:5b:a3:79:44:7e:d6:83:a2:54:
5e:80:2c:b9:db:0a:2d:a3:9e:4c:b1:13:89:19:b3:
94:46:1f:08:92:f0:87:da:7d:ef:5d:2a:d0:9d:af:
25:c9:ce:45:37:40:ae:e8:4b:04:65:cb:7c:6c:15:
ea:ec:d7:46:d1:36:75:ba:b9:2c:7f:e6:ea:62:4d:
88:6a:25:95:86:dc:08:de:06:ba:f4:a0:39:cc:bf:
e4:09:66:b3:b0:03:ee:78:d6:c3:4a:03:49:55:f8:
fe:dd:49:a5:02:88:58:3e:b1:c8:c1:32:56:98:6e:
85:19:ae:78:5d:d2:2f:1d:9e:d7:c5:14:4b:66:1f:
bd:0e:1d:0a:04:91:86:70:ff:a8:0e:38:71:57:68:
21:db:2e:1b:b7:ec:3d:e8:ec:7e:de:19:45:13:5d:
7c:b6:32:4a:66:da:9f:7b:34:e0:0b:44:c8:12:3d:
74:cf:ec:5d:20:df:74:fa:8d:fe:43:b3:ca:fd:ad:
e6:18:41:f9:b6:78:61:1e:bb:af:78:e8:27:62:ef:
2e:cd:48:6b:e6:71:b5:69:5c:5f:e9:a1:48:12:1d:
76:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D2:D4:CA:FF:EF:C0:68:14:B1:F8:F3:68:C1:81:C5:0E:AE:25:A1
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4f:29:5b:b3:83:d1:e7:1a:49:15:25:44:ba:14:ae:db:6c:
85:b3:4b:e6:ce:25:29:f3:b9:55:b4:27:3b:86:10:ba:30:f2:
40:49:3b:91:f2:21:7f:05:7c:57:c3:eb:93:a9:e7:7e:e5:5e:
ea:50:ce:68:91:3e:bd:23:96:59:a3:32:16:6e:24:69:14:dc:
ba:93:65:9d:cd:9e:d7:2a:f2:fd:35:fb:ad:91:c4:32:11:07:
a2:45:6c:8e:a7:1b:eb:05:7b:fe:7e:46:f7:85:d1:5a:20:4c:
85:2e:f2:90:f0:ce:10:1e:28:af:20:18:92:2d:c5:aa:4c:79:
ed:d2:c9:75:f2:bf:9e:25:2c:10:34:9a:68:4c:2c:2c:7a:2d:
ab:42:58:a2:9e:74:05:d6:92:ba:ba:de:e6:a6:d3:28:57:89:
a4:98:d6:36:44:b1:8a:93:ab:37:a7:f6:90:7c:1f:40:74:b4:
62:64:f4:08:a2:16:94:ec:ae:a9:b6:46:d0:4a:b7:1d:bb:76:
45:91:79:44:49:3b:e8:3c:94:c9:cd:e6:89:67:1d:76:84:3b:
e9:f1:8b:51:de:b2:6a:4b:62:ef:ad:83:ac:54:10:7e:23:b5:
51:6e:69:65:2e:02:fb:54:e7:71:a7:e3:77:ab:92:b9:f6:91:
76:18:a4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:32 2025 by rpki-client