Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: 0PHLkbMCGdPJrDr1Ghj4cc3HuzrU9n3NXdC11K0SBHA=
Subject key identifier: B0:EA:CD:88:D5:39:5D:40:6F:BA:70:F6:0C:E0:4F:10:F1:23:20:28
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 0199FC213F451380309300F507375A9652E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 03C6
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: o0qgwL8DTaEmGaLUHxd4iVOAPjhpmc+qqor9nCjH9sk=)
2: kMy_Ytqu-62SnckodYKnIddoAV4.roa (hash: DNh5a1DbxWEI9P2LYvBxRTY+TTerG2Ce0TBwgUaWhng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3f:45:13:80:30:93:00:f5:07:37:5a:96:52:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=b0eacd88d5395d406fba70f60ce04f10f1232028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:8c:a0:28:95:c4:6b:42:aa:bc:3c:58:bc:
57:4f:90:ce:dc:75:5d:c2:f8:6e:2a:9b:c3:08:92:
e2:4b:42:03:f2:9b:a6:8c:5f:a9:0c:5b:ae:28:16:
6b:06:6d:12:54:5d:02:e8:f9:c1:39:15:44:c2:fb:
47:77:c8:25:67:21:99:1e:83:dd:ac:b3:29:d6:90:
5e:19:24:e7:13:c8:58:e1:1f:9c:8a:e2:3f:c8:59:
97:92:62:cd:b8:04:cf:5c:65:69:c1:cd:fd:71:39:
58:39:a6:0b:e7:32:3c:c3:7a:3e:68:cd:28:6f:1d:
8c:74:5f:9c:ed:89:d4:22:40:df:87:8d:93:26:82:
a9:a9:42:c6:ee:c7:89:2b:f2:89:2e:dd:b3:02:7c:
76:52:1e:4e:fa:3a:ef:8b:24:b7:39:9e:1b:8b:18:
12:55:57:cc:cc:42:29:d4:4b:42:b7:f4:8e:19:59:
42:71:7b:0d:63:3d:b0:3b:78:d5:30:c3:e1:8b:82:
af:b8:10:c3:51:1f:e8:54:03:97:01:40:93:13:87:
73:36:a4:dd:62:02:45:4c:c0:11:98:ae:85:a0:e4:
af:7a:e7:9b:60:27:d8:91:70:06:a5:0f:3c:53:4f:
61:e9:70:4f:a1:cb:6f:ea:80:c5:0f:a4:51:a8:a0:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EA:CD:88:D5:39:5D:40:6F:BA:70:F6:0C:E0:4F:10:F1:23:20:28
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:be:b6:56:c2:f5:1b:96:f4:d9:5d:79:15:7f:fd:ec:07:bb:
2e:07:13:e7:d3:5b:6a:d5:44:b6:64:d7:92:f5:9c:e1:fd:45:
a1:35:80:b4:2e:74:64:e5:e6:04:f2:6a:fe:c9:24:a3:7b:1d:
e7:bb:72:ac:15:9a:96:92:cc:35:28:4e:7f:b6:db:c5:2d:1c:
97:a6:f4:06:06:70:6f:76:6c:23:dd:c5:9e:20:6d:6d:9d:15:
41:d0:1b:74:d6:4e:44:85:2a:8f:a1:f1:1a:69:66:47:29:89:
7d:e8:61:de:a3:74:06:c3:6d:d1:e6:44:4a:c3:62:27:7c:48:
3e:ae:32:3c:5d:16:6c:d9:1a:6a:81:1d:22:ee:5f:72:c3:c6:
87:5c:f7:3b:a4:25:ca:98:47:72:ac:22:5d:5d:42:9c:1f:cc:
b9:69:6b:f8:ad:cb:27:46:7b:ea:b3:be:ed:f9:fd:1d:f5:de:
f4:c0:87:0d:fc:05:87:d9:a6:c6:64:ec:e8:18:c7:cd:93:42:
c9:64:44:fd:49:9a:43:73:06:33:8c:b5:57:96:d3:89:88:9c:
ed:af:06:1c:c8:da:40:fa:ae:10:07:2c:aa:30:3b:8a:d8:c8:
34:fe:bc:90:a9:aa:51:0a:db:a2:5a:9b:bc:84:4d:8b:bd:61:
d4:98:c3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:54 2025 by rpki-client