Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: GQvJNfRjV/5IVqQ67tMwzeJi0Dw8wKU5U0O09zbnuLE=
Subject key identifier: CC:8B:9B:7D:47:75:CA:37:47:0B:80:E6:29:7B:AC:44:D8:AE:BE:A0
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 0199FBEBAB38AF484E09E0F7D525C933790F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:30 +0000
Manifest this update: Sun 19 Oct 2025 10:02:30 +0000
Manifest next update: Mon 20 Oct 2025 10:02:30 +0000
Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: J/L/jSpm7bnizWwOWWp24alxV9pZHZ77uoY3Bq5RgoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ab:38:af:48:4e:09:e0:f7:d5:25:c9:33:79:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Oct 19 10:02:30 2025 GMT
Not After : Oct 20 10:02:30 2025 GMT
Subject: CN=cc8b9b7d4775ca37470b80e6297bac44d8aebea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:6e:0c:26:f3:4e:52:f0:a5:4d:46:5f:24:
42:2d:d8:ad:24:3c:4a:ac:49:28:79:6a:e1:d3:61:
3c:42:14:12:b7:cf:12:ab:2e:f6:0f:a5:5c:57:19:
d1:16:01:50:4c:68:d8:ff:c1:0a:65:c4:e8:41:93:
3a:a8:0d:74:1f:b0:65:f9:71:28:07:0e:5e:c3:93:
87:8b:ff:2f:d8:04:62:00:da:a0:e4:67:90:49:8c:
7a:b4:0b:c4:ae:05:95:58:a6:57:3f:0a:47:6e:f4:
e5:22:81:67:bb:5d:ef:04:63:6b:83:5b:4e:a2:96:
ba:6d:57:a9:e6:47:e5:e1:1b:3a:7d:d2:8c:e9:27:
19:46:10:d1:6b:fb:f3:f1:d2:0b:66:fd:2d:3b:06:
03:c5:69:8c:41:bb:4b:6b:22:2f:a9:a6:67:b6:67:
6f:a4:f4:ec:ee:e1:fd:90:ac:fc:5f:a9:25:ab:09:
66:e0:66:d5:f4:d7:55:42:bd:66:2a:9e:fc:0a:2c:
c0:29:e0:3c:0d:8e:ac:d5:18:05:05:d9:3a:e5:ca:
d8:97:ce:23:fe:51:4d:1b:f3:a1:01:5d:0e:b6:80:
57:22:e3:b8:10:9b:ab:76:2e:64:15:5d:29:c6:59:
d0:52:8d:64:fa:d2:63:23:66:1b:5c:7a:e8:87:da:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8B:9B:7D:47:75:CA:37:47:0B:80:E6:29:7B:AC:44:D8:AE:BE:A0
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2f:78:57:b2:0c:20:96:5a:5e:f0:87:75:21:26:6c:6e:9a:
98:a1:2e:58:4d:42:56:5d:76:96:d8:ca:e2:fb:ed:c2:1c:ac:
c8:c1:44:2b:66:d4:28:31:8c:f3:c3:ff:6e:e9:3d:2b:53:4f:
3c:73:9e:04:e3:8b:4d:3e:38:e8:49:26:d2:e3:21:24:b5:dc:
01:2c:8c:3d:d9:28:b6:d7:db:fd:9a:f7:f9:bf:cf:5a:06:36:
26:5c:8d:76:60:c1:54:ff:f6:df:23:d8:08:27:19:5b:f4:b1:
bf:70:e7:3f:a7:85:9d:f0:b7:0a:34:49:4f:f5:05:8b:52:77:
2d:b5:62:5b:0a:6a:5d:bf:75:a6:5d:08:89:9c:4c:01:38:fc:
32:60:4d:a7:92:9b:1a:78:27:0a:41:95:b3:3a:0e:2c:24:26:
48:21:70:4e:6e:f1:3b:97:84:d1:d9:46:66:f3:38:5e:4e:b2:
95:56:54:d5:4d:ac:99:2a:ec:5c:a4:e9:35:fa:a4:4e:c7:c1:
d3:e5:a6:85:cb:1d:5c:1a:6a:a4:83:82:72:97:67:cc:e4:ae:
e2:a0:bc:76:2f:b2:07:5b:97:c4:75:c4:ef:26:c8:aa:70:b0:
a5:c0:a4:9f:0d:a3:9a:1a:0a:b2:34:19:40:35:50:9b:21:d5:
d6:68:e6:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn766s4r0hOCeD31SXJM3kPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDUxOGE1NzA2OWNhZmQ4M2UyMWI1YzYwZmIyNjJkOGVk
ZjM0MmIwHhcNMjUxMDE5MTAwMjMwWhcNMjUxMDIwMTAwMjMwWjAzMTEwLwYDVQQD
EyhjYzhiOWI3ZDQ3NzVjYTM3NDcwYjgwZTYyOTdiYWM0NGQ4YWViZWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYduDCbzTlLwpU1GXyRCLditJDxK
rEkoeWrh02E8QhQSt88Sqy72D6VcVxnRFgFQTGjY/8EKZcToQZM6qA10H7Bl+XEo
Bw5ew5OHi/8v2ARiANqg5GeQSYx6tAvErgWVWKZXPwpHbvTlIoFnu13vBGNrg1tO
opa6bVep5kfl4Rs6fdKM6ScZRhDRa/vz8dILZv0tOwYDxWmMQbtLayIvqaZntmdv
pPTs7uH9kKz8X6klqwlm4GbV9NdVQr1mKp78CizAKeA8DY6s1RgFBdk65crYl84j
/lFNG/OhAV0OtoBXIuO4EJurdi5kFV0pxlnQUo1k+tJjI2YbXHroh9r+NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyLm31Hdco3RwuA5il7rETYrr6gMB8GA1UdIwQY
MBaAFHJFGKVwacr9g+IbXGD7Ji2O3zQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NTM1NTAtMDI2Ni00ZjJlLThkYzMt
N2Y0YmQ5YjU0ZTYyLzEvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NTM1NTAtMDI2Ni00ZjJlLThkYzMtN2Y0YmQ5YjU0ZTYy
LzEvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjC94V7IM
IJZaXvCHdSEmbG6amKEuWE1CVl12ltjK4vvtwhysyMFEK2bUKDGM88P/buk9K1NP
PHOeBOOLTT446Ekm0uMhJLXcASyMPdkottfb/Zr3+b/PWgY2JlyNdmDBVP/23yPY
CCcZW/Sxv3DnP6eFnfC3CjRJT/UFi1J3LbViWwpqXb91pl0IiZxMATj8MmBNp5Kb
GngnCkGVszoOLCQmSCFwTm7xO5eE0dlGZvM4Xk6ylVZU1U2smSrsXKTpNfqkTsfB
0+WmhcsdXBpqpIOCcpdnzOSu4qC8di+yB1uXxHXE7ybIqnCwpcCknw2jmhoKsjQZ
QDVQmyHV1mjmVg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:19 2025 by rpki-client