Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: csKDOhept9KmhFiGFOlu474cfZCBiUgj9R2BVM44pa0=
Subject key identifier: 5E:C1:63:E6:52:E8:E0:00:70:42:4A:48:68:64:F7:AB:D2:6C:E0:C6
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 019897B754355A2982EF0C66A641E0AEFF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 156D
Signing time: Mon 11 Aug 2025 06:00:30 +0000
Manifest this update: Mon 11 Aug 2025 06:00:30 +0000
Manifest next update: Tue 12 Aug 2025 06:00:30 +0000
Files and hashes: 1: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: BVxlXeVcC4V24rXd0g+v9GjPUE+Y1RgjSsH+fET7slM=)
2: hML-Tag6b9qlpG18VlhLUkClkKg.roa (hash: LEX7BjdOFqa/vQo+qGyu7UsdS3xFcEis6fY7DeQDRek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:54:35:5a:29:82:ef:0c:66:a6:41:e0:ae:ff:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Aug 11 06:00:30 2025 GMT
Not After : Aug 12 06:00:30 2025 GMT
Subject: CN=5ec163e652e8e00070424a486864f7abd26ce0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:f2:93:72:ae:50:47:ac:42:b5:96:60:f4:
38:3a:e4:94:8c:58:79:25:1c:76:e7:e9:af:9a:0d:
43:2f:b8:4f:ec:8a:23:98:5e:19:82:51:56:07:21:
b4:f5:7c:34:c5:38:c5:72:6c:6b:df:7b:0b:25:b9:
3f:41:95:48:5a:11:c7:35:bf:5c:b7:c3:e5:69:b8:
bc:b9:4d:d1:b7:65:30:a3:ca:f7:d3:8a:c4:6c:78:
76:0f:f5:fb:82:51:64:3e:df:e0:86:0e:8e:1b:8d:
df:36:02:63:cc:fe:75:7a:cd:25:cb:dd:f0:1f:e9:
0a:59:71:aa:16:f4:bf:7e:ff:06:ae:53:12:7b:c6:
4b:c6:70:ca:b2:84:23:ed:16:4c:f8:5c:48:42:e0:
f3:1c:a8:13:8b:39:38:f2:bd:e7:74:51:16:02:79:
0e:6a:b8:dd:27:f8:27:55:4f:c4:f7:e7:b9:6d:d1:
78:36:b9:ec:51:36:53:1c:93:87:f5:dd:c3:d9:57:
72:54:4b:24:8b:5c:cb:a9:54:d3:92:33:9f:e8:03:
e1:4d:7c:17:5d:f5:7b:97:69:02:86:18:c1:85:80:
12:11:6b:fc:37:e9:6d:ed:db:b7:34:c1:2e:89:cb:
e6:5f:fc:10:29:56:6a:04:dd:db:14:e4:e4:f8:9d:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C1:63:E6:52:E8:E0:00:70:42:4A:48:68:64:F7:AB:D2:6C:E0:C6
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:49:13:c7:4e:4c:f1:9f:91:bd:37:04:12:eb:26:b0:87:1e:
23:4d:fe:d1:e9:03:53:65:9c:ab:eb:43:97:8e:a2:16:88:23:
b4:ff:dc:e0:aa:d7:2b:06:03:38:31:d5:b2:30:91:47:f6:77:
37:b3:bd:b4:de:9a:d6:e6:aa:69:d5:1a:82:81:0d:20:ca:c7:
4c:89:77:6e:4e:6d:b6:98:44:61:12:c0:58:ba:a9:b8:10:00:
aa:a2:8e:e8:74:4e:cf:70:fc:c7:c2:8b:d8:a4:49:ef:85:24:
ff:96:7d:5f:ed:51:fb:c8:6f:45:6e:8d:34:8e:62:eb:96:e7:
37:0a:10:cb:81:b9:9a:bd:a7:05:5f:71:8f:73:a3:bd:b1:8e:
b1:79:ef:0d:46:a7:f9:03:9f:db:f0:e9:23:eb:e3:a3:45:8b:
f5:42:73:79:c0:c9:6b:ed:f6:14:85:1a:a7:d7:df:c0:38:c7:
7b:55:f6:20:fc:b6:8f:44:6b:59:78:01:e8:e1:de:1b:7c:cb:
75:d0:0a:48:a7:ee:ce:c7:1b:a6:be:f7:9d:7f:bc:c1:03:b7:
6b:17:35:05:a7:df:13:72:cb:00:c9:89:15:04:1a:e4:49:05:
fb:57:5b:60:cf:0c:d6:53:fc:1f:a1:3a:4c:9d:ba:be:85:74:
5b:1a:76:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXt1Q1WimC7wxmpkHgrv9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDgxZGQ5MGQxMDBiZDViYzIzYzA0YjEwYzBhODQzMWNj
OWE1YjUwHhcNMjUwODExMDYwMDMwWhcNMjUwODEyMDYwMDMwWjAzMTEwLwYDVQQD
Eyg1ZWMxNjNlNjUyZThlMDAwNzA0MjRhNDg2ODY0ZjdhYmQyNmNlMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHryk3KuUEesQrWWYPQ4OuSUjFh5
JRx25+mvmg1DL7hP7IojmF4ZglFWByG09Xw0xTjFcmxr33sLJbk/QZVIWhHHNb9c
t8Plabi8uU3Rt2Uwo8r304rEbHh2D/X7glFkPt/ghg6OG43fNgJjzP51es0ly93w
H+kKWXGqFvS/fv8GrlMSe8ZLxnDKsoQj7RZM+FxIQuDzHKgTizk48r3ndFEWAnkO
arjdJ/gnVU/E9+e5bdF4NrnsUTZTHJOH9d3D2VdyVEski1zLqVTTkjOf6APhTXwX
XfV7l2kChhjBhYASEWv8N+lt7du3NMEuicvmX/wQKVZqBN3bFOTk+J2XRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7BY+ZS6OAAcEJKSGhk96vSbODGMB8GA1UdIwQY
MBaAFHJIHdkNEAvVvCPASxDAqEMcyaW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2Qt
ZjE5OTBiMGM3MDVhLzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2QtZjE5OTBiMGM3MDVh
LzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0kTx05M
8Z+RvTcEEusmsIceI03+0ekDU2Wcq+tDl46iFogjtP/c4KrXKwYDODHVsjCRR/Z3
N7O9tN6a1uaqadUagoENIMrHTIl3bk5ttphEYRLAWLqpuBAAqqKO6HROz3D8x8KL
2KRJ74Uk/5Z9X+1R+8hvRW6NNI5i65bnNwoQy4G5mr2nBV9xj3OjvbGOsXnvDUan
+QOf2/DpI+vjo0WL9UJzecDJa+32FIUap9ffwDjHe1X2IPy2j0RrWXgB6OHeG3zL
ddAKSKfuzscbpr73nX+8wQO3axc1BaffE3LLAMmJFQQa5EkF+1dbYM8M1lP8H6E6
TJ26voV0Wxp2nQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:09:22 2025 by rpki-client