Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: UvQNPMMncwgiLpFp7eUmlvjI0/oOiPCfbs1SyP6xVKQ=
Subject key identifier: 70:8A:52:E7:4D:9A:5A:FD:E9:D0:1A:77:A5:8C:73:4A:74:F4:F4:CB
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 0198D4736A8D149B1F7DC6F815001C39644C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 01:03:10 +0000
Manifest this update: Sat 23 Aug 2025 01:03:10 +0000
Manifest next update: Sun 24 Aug 2025 01:03:10 +0000
Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: ClqknRzd2fl+PveaFqKWfIqyjTt55mJA5xfyRGsHETw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:6a:8d:14:9b:1f:7d:c6:f8:15:00:1c:39:64:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Aug 23 01:03:10 2025 GMT
Not After : Aug 24 01:03:10 2025 GMT
Subject: CN=708a52e74d9a5afde9d01a77a58c734a74f4f4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0c:c9:39:25:0e:08:6b:e4:43:cd:0a:80:56:
c8:74:28:a8:da:49:f3:5b:2b:c8:10:cd:f9:31:e6:
c5:dc:ee:da:27:60:60:78:31:4f:64:d5:48:d9:e5:
eb:76:16:f7:a0:a0:7d:8c:e1:2d:8a:3d:4b:a2:57:
02:c3:2c:11:cd:1a:aa:8a:0b:f2:b8:9e:1a:b5:0d:
8e:ec:51:52:a8:77:e1:3b:a3:88:a6:ef:a9:1f:da:
54:2e:85:8d:7f:ee:97:0c:41:16:95:60:27:eb:87:
18:06:29:10:63:97:45:2d:60:30:ad:0a:30:d3:03:
70:86:c5:b3:4e:18:93:9a:03:1e:d6:50:04:b5:ae:
93:a4:e2:ad:5a:43:2d:55:a5:11:83:8a:b9:39:23:
04:42:88:91:64:67:1d:c1:55:72:d5:da:fe:04:09:
23:7c:70:45:c4:28:b7:f5:a6:0c:13:2f:29:a9:fe:
53:09:e6:c4:64:d6:3c:07:5c:4d:9d:4e:dd:b8:d9:
2f:e5:a0:19:13:c3:e5:96:5a:66:7f:13:d2:a3:0b:
5c:af:cc:51:a6:e8:e5:fa:a1:51:e6:3e:d3:4a:7d:
28:8c:00:15:ca:e2:01:aa:f1:6d:55:f5:d1:72:87:
a8:0e:39:f8:aa:09:cf:39:ca:7b:f4:7c:f8:33:c4:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8A:52:E7:4D:9A:5A:FD:E9:D0:1A:77:A5:8C:73:4A:74:F4:F4:CB
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:89:db:40:82:7c:90:d0:19:9f:71:71:cc:ef:60:59:27:0c:
16:02:f0:73:5f:84:77:90:83:43:3b:9c:99:e1:bb:97:53:67:
56:15:05:42:53:40:45:cf:f2:6d:de:c3:0f:2b:3e:70:5b:bb:
01:93:96:26:bc:f8:4d:df:1f:d2:7e:08:44:49:d0:8b:db:44:
fb:4f:af:8e:63:ec:82:41:a8:ab:5a:a0:96:99:1a:06:6c:b8:
1f:0e:56:a5:c7:37:36:6b:75:20:bd:f0:28:17:c3:7d:b4:c0:
7a:23:ec:ef:4c:df:64:19:9e:cc:3e:27:9c:1d:c9:bd:86:42:
3f:92:25:95:2a:17:95:1c:dd:11:c5:42:2a:ac:2c:e6:6a:52:
79:0a:30:59:b9:a7:8f:53:a4:70:70:6f:ac:32:46:34:a0:b0:
bf:f4:a8:b2:15:51:f3:5f:95:2c:03:df:ba:ce:57:ff:58:f6:
7a:22:9d:9a:67:16:79:ec:de:f6:ff:80:7a:af:c6:cd:e1:bd:
a7:0b:0e:98:6d:d3:29:3c:96:58:d9:a2:41:de:61:13:9d:5b:
eb:49:f8:50:ec:25:74:66:c9:31:ab:0b:92:4b:6e:8d:75:da:
76:b8:04:67:3a:9f:1c:02:93:aa:62:49:f9:f8:72:b0:24:5e:
18:2e:62:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:38 2025 by rpki-client