Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: Fy1E4WAZWR3XlCpuiOarG6FCPYCROnWrZp7eS0156sk=
Subject key identifier: B1:D0:8C:D7:22:0E:4F:E2:6B:08:C9:04:15:5B:0C:50:9D:AF:D8:E8
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 0198D6988C1F79C95CB2D78DA270C07215F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 032E
Signing time: Sat 23 Aug 2025 11:02:58 +0000
Manifest this update: Sat 23 Aug 2025 11:02:58 +0000
Manifest next update: Sun 24 Aug 2025 11:02:58 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: sxHjwGomQyhdq9OjeIBM5dXLx1Pjr3Horjl3Le9dF0A=)
2: kMy_Ytqu-62SnckodYKnIddoAV4.roa (hash: DNh5a1DbxWEI9P2LYvBxRTY+TTerG2Ce0TBwgUaWhng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:8c:1f:79:c9:5c:b2:d7:8d:a2:70:c0:72:15:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Aug 23 11:02:58 2025 GMT
Not After : Aug 24 11:02:58 2025 GMT
Subject: CN=b1d08cd7220e4fe26b08c904155b0c509dafd8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:c9:6e:ce:e5:92:2b:6e:48:0d:e1:aa:85:
a6:c1:f3:e9:c3:97:84:b8:fc:c4:8b:20:7b:2c:e9:
19:5c:c7:ba:39:ef:a7:6b:4a:65:ee:e9:7c:c2:95:
6d:29:f6:86:b2:c6:f1:d0:4b:a5:51:26:bb:9c:af:
08:04:5a:55:ec:78:60:b2:2a:9f:dd:10:52:2b:a9:
ba:57:ce:03:88:f3:95:4c:5d:b5:ef:36:fe:db:bc:
e9:3f:42:91:6b:8f:1c:2c:35:93:6a:1c:7e:71:5f:
30:20:d8:bb:22:c3:c4:e6:82:3a:62:db:a4:2c:81:
b4:9b:0c:fb:1a:90:4d:56:b6:14:30:c3:48:ac:c6:
30:11:3c:f7:f3:29:63:d0:a0:80:ff:78:26:51:ea:
05:0f:31:13:5c:a4:7e:b7:c8:17:18:70:af:39:56:
07:e0:82:0e:26:23:31:66:c4:08:43:3b:9f:74:da:
fd:81:d8:4a:1e:3b:21:ee:ce:67:2b:72:f4:32:16:
b1:81:89:02:5b:22:8b:33:dc:3d:fc:88:97:32:14:
62:cc:d4:0c:b1:a3:e3:c9:96:c7:8f:c5:02:77:7d:
2a:92:cd:ac:64:1a:c6:24:a9:59:35:cb:7d:c2:5a:
7a:44:cb:1a:2f:15:c0:86:66:50:a2:9c:81:be:e6:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D0:8C:D7:22:0E:4F:E2:6B:08:C9:04:15:5B:0C:50:9D:AF:D8:E8
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ca:c8:f0:c9:ea:b0:54:34:99:b0:93:17:f1:3e:01:87:5a:
2b:e7:e9:9c:ba:56:a7:43:b2:50:53:18:7b:59:57:c1:eb:cf:
6e:45:a5:58:18:73:b8:5b:15:3c:68:2f:20:2a:a0:68:31:ee:
d1:f0:7e:13:fb:8f:ed:67:0a:4a:92:ae:a5:72:6c:fc:b1:26:
c7:46:1f:fe:b3:79:d5:85:c4:00:08:69:8d:0a:3e:f2:93:c3:
8a:e0:43:66:9a:e6:45:5c:ce:9c:08:4c:d6:b0:68:80:55:58:
c2:c5:74:b6:6e:d1:31:e6:9f:b1:0d:61:c7:3e:82:5a:5c:9b:
b8:66:dc:a3:e6:67:d2:69:8f:ea:77:74:82:1b:7e:56:eb:bc:
a1:63:8c:4c:62:4f:f4:8f:09:e2:2d:d0:57:09:4b:71:b4:d9:
f0:07:c5:66:77:2e:b8:47:0d:91:70:c6:73:d0:7b:98:3e:39:
de:47:f5:4c:2d:84:9c:f8:e9:d0:1f:89:6f:05:16:a6:90:b7:
24:7f:ab:8f:59:c9:f7:75:ae:72:96:ca:62:3c:56:eb:03:96:
d2:93:e1:d9:36:4c:90:61:9b:ca:e0:08:0f:c5:48:4f:ba:eb:
09:f0:57:a0:97:21:5d:36:b1:3e:0c:1e:fd:3c:d3:38:98:b1:
31:72:31:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:26:15 2025 by rpki-client