Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: AKul+KkXno7jTuHhnWHnJqlbv2sfUbxSfi+7HkyYJqM=
Subject key identifier: AF:0A:4B:03:79:E6:87:19:ED:69:F3:B4:6B:7B:71:98:48:41:8E:04
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 019A4F621761B55D49A38E00CD5604452430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 16C7
Signing time: Tue 04 Nov 2025 15:00:19 +0000
Manifest this update: Tue 04 Nov 2025 15:00:19 +0000
Manifest next update: Wed 05 Nov 2025 15:00:19 +0000
Files and hashes: 1: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: jmuugzl7OXqz16gCZSf8+o8U+Wcw6AGB7gsKTXqgbJ4=)
2: Wy1LhCK9kxP-C2UiE5R2K8JtffM.roa (hash: DYS7fnBaD9Os9bSnRtbqX/rsXfSVI5HQGNbOlzCHNGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:17:61:b5:5d:49:a3:8e:00:cd:56:04:45:24:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: Nov 4 15:00:19 2025 GMT
Not After : Nov 5 15:00:19 2025 GMT
Subject: CN=af0a4b0379e68719ed69f3b46b7b719848418e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:0f:39:09:b3:1c:55:e7:37:aa:92:8c:53:
45:aa:c5:6c:56:88:8e:b0:ca:34:c8:b5:f6:47:64:
10:3b:03:94:5c:dd:90:19:ac:f6:2e:80:28:71:68:
b8:0c:84:97:98:9b:2e:99:35:07:cc:96:1d:b6:22:
0f:c5:e5:cb:4e:8f:6e:b9:6a:a2:10:8c:c6:3b:99:
26:32:ce:23:8b:d7:fb:02:6d:3a:8c:f0:dc:06:77:
2b:46:74:c3:6c:7d:87:05:34:a8:74:c5:8e:f0:aa:
c2:59:4b:62:9e:57:37:2b:9f:70:32:62:fc:d9:f2:
82:e0:4e:fa:55:7b:65:c8:e9:2f:c2:6b:2f:68:9e:
a4:94:8b:da:d2:e5:21:56:44:f3:34:41:0a:3c:29:
c5:75:87:7e:e7:2b:dc:37:38:cc:1f:63:54:f3:61:
02:91:15:fa:99:97:39:81:2a:97:08:7b:70:2a:d1:
af:e5:71:78:e2:1d:be:61:80:46:7f:4b:5b:68:a0:
2c:de:46:12:59:8c:9b:ff:6a:33:42:73:78:27:fe:
56:5f:f3:f1:cf:5e:f5:b2:53:07:45:1c:70:12:63:
aa:d3:77:76:22:b5:e5:3d:b9:ef:20:45:0b:fa:cd:
82:17:ef:07:03:cf:a0:1a:4f:29:16:15:73:0b:de:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0A:4B:03:79:E6:87:19:ED:69:F3:B4:6B:7B:71:98:48:41:8E:04
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:52:0f:09:d2:eb:17:a3:39:ca:d9:83:09:ec:47:02:51:ab:
cf:92:e9:b5:50:36:08:8f:e6:ef:90:23:97:bf:7b:90:7e:d6:
2e:10:4a:1b:d7:4d:10:8e:d3:62:eb:42:b8:d6:2a:2c:ba:25:
bb:3f:82:f6:72:8d:66:f7:f1:96:57:de:37:17:a2:7a:c7:e9:
dd:da:6a:ef:2b:ab:06:a4:f2:cc:c4:74:49:a8:47:01:a0:a2:
12:26:63:25:34:8b:2c:94:0d:97:b9:c9:b4:91:8b:4f:e3:33:
69:91:f4:1b:be:45:bd:4b:c9:7e:dd:a8:7f:c9:d5:4e:00:81:
c3:b2:2f:2f:ae:e1:a1:79:29:8b:68:19:61:d4:6d:38:61:28:
d5:5b:5a:0a:b1:96:c3:e9:75:31:62:c6:25:45:71:75:a9:8c:
ef:1a:f7:46:d7:d4:b8:41:07:e9:41:86:ab:5f:55:2a:26:c7:
5f:2b:e6:ed:35:eb:61:dc:30:1e:d3:e9:41:86:aa:6c:4e:74:
93:41:ab:de:35:e0:ea:7c:05:0a:63:f5:fa:fb:a7:94:02:5d:
d1:12:c0:ea:50:5b:26:75:89:71:3b:ad:66:2a:8a:85:35:79:
b0:58:ed:ef:cd:b1:a8:00:9d:bb:bc:b8:8b:28:90:7d:c9:ff:
a1:64:b5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:13:02 2025 by rpki-client