Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: M9Qp0/YbNZth13p52KH0kdg1wWiOI+rTWIOitmG0ymU=
Subject key identifier: 74:BC:04:BE:84:DB:B1:B5:A0:48:B0:2B:B2:C9:AB:F8:FB:33:83:AC
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 019A559B2EAC2FE17ED1B2AA2B5176CF8112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 8A
Signing time: Wed 05 Nov 2025 20:00:24 +0000
Manifest this update: Wed 05 Nov 2025 20:00:24 +0000
Manifest next update: Thu 06 Nov 2025 20:00:24 +0000
Files and hashes: 1: F1_fRjsO4dTqumxtDsL76pdCtg4.roa (hash: 0XgVQRPzj0PEWIzWBzMdSrLlPSlfOiNqMdtsfXPisjk=)
2: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: yoUt1rdlM+4lC2kP1GbZgPvOWeBwjC6KH9rv3x+9bj4=)
3: mNWhV9Hvaf2yXpnhOSbY3EKbOiU.roa (hash: xbTjMWQPzIJQuFzWCStCIwa5zKEG4q5JVM9fdDMAgcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:2e:ac:2f:e1:7e:d1:b2:aa:2b:51:76:cf:81:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Nov 5 20:00:24 2025 GMT
Not After : Nov 6 20:00:24 2025 GMT
Subject: CN=74bc04be84dbb1b5a048b02bb2c9abf8fb3383ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:38:62:94:53:1c:36:0f:15:90:99:49:3a:
bb:37:86:ce:c6:03:d9:1f:22:cf:06:e5:9b:9f:39:
b7:7d:ba:f5:60:37:32:b3:a1:22:f5:86:e8:38:2c:
db:4d:86:cb:a8:45:d6:fd:f6:56:5f:16:90:13:0e:
47:0b:ab:09:d4:55:be:3b:fc:dd:10:c5:6a:91:75:
89:c7:63:76:ef:a6:0e:9b:43:c5:27:a6:bd:95:22:
bc:87:bd:f7:0c:9c:8b:44:64:ef:a4:74:89:af:2c:
ba:49:4c:2b:07:2e:ad:8e:73:cd:fd:2d:cc:ca:fe:
3b:c5:43:70:92:d1:e0:8b:ab:21:d5:f4:49:af:7c:
79:0b:fb:93:86:ae:85:fe:8f:05:5b:c6:73:d9:7f:
98:7e:95:5d:53:a0:51:d2:7e:f9:6a:51:a5:91:2b:
5c:01:77:de:f0:98:01:89:93:eb:db:13:44:eb:f3:
dd:8a:04:21:41:9c:1a:84:64:0b:cf:81:0b:a8:b9:
6c:f1:17:c6:2b:8c:a0:b2:09:fc:39:69:02:82:c5:
6a:9b:4c:83:d7:82:72:61:9b:c1:9c:1e:eb:45:77:
4e:0b:3e:c0:e9:06:a9:25:d8:b9:54:51:3d:4b:07:
ea:70:28:82:31:c9:ea:b6:33:2e:17:76:0c:c5:28:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BC:04:BE:84:DB:B1:B5:A0:48:B0:2B:B2:C9:AB:F8:FB:33:83:AC
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c1:16:92:03:bd:d1:96:ca:09:f0:12:a5:dc:9b:a1:e0:66:
59:f3:b8:71:16:ad:6e:7d:68:ed:2f:d0:8f:01:aa:b0:37:db:
fb:ab:8f:7d:bd:02:e8:2a:bb:85:26:31:dd:cc:c6:47:4e:69:
0c:77:18:c7:54:4a:08:ac:b2:d2:19:72:c2:22:8d:bd:19:71:
cc:42:8b:f6:db:30:95:44:e5:b7:e7:0f:ea:ab:14:a3:69:47:
6d:af:3e:b9:7b:0c:0e:c2:75:a4:f1:70:65:12:d8:7c:97:84:
78:7b:02:50:d5:a6:0e:d6:35:c9:c9:7c:0f:d9:fc:2f:64:b2:
a3:f4:72:13:e3:36:9a:f3:de:ed:8d:dd:38:b4:7d:47:2b:3f:
53:52:44:67:66:34:9c:7e:9a:ca:ad:e5:1b:06:c6:c0:39:d2:
8a:1e:0d:c9:b8:5f:d3:4d:8e:54:b5:7f:c8:df:3a:ce:2d:d5:
c9:1a:67:c6:c2:3f:0f:59:a4:38:cf:fa:21:20:5d:8b:a9:f0:
87:3e:f2:1f:d7:2c:cc:68:fa:89:a4:0f:2a:d5:91:d3:24:62:
43:c0:7f:a6:7a:81:44:02:ba:aa:76:df:68:26:3c:3c:17:b6:
e5:2e:51:21:90:13:b1:43:ea:97:d0:2a:04:a5:f1:62:5a:f2:
e8:e8:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:44:02 2025 by rpki-client