Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: mbGCeLUc4dzjcXmk8OlvvysQc9VXAzg8r7n9cK4Q1xc=
Subject key identifier: 92:E1:B4:26:7B:2B:4B:E8:BC:92:94:48:D3:54:5F:48:94:4B:5C:08
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 019A4E18C671A1ABC2317A1684750758A5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 1650
Signing time: Tue 04 Nov 2025 09:00:37 +0000
Manifest this update: Tue 04 Nov 2025 09:00:37 +0000
Manifest next update: Wed 05 Nov 2025 09:00:37 +0000
Files and hashes: 1: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: UHValENe1SF82K/1iWsZ3goZB4FpEpuWCasFhqkspIk=)
2: hML-Tag6b9qlpG18VlhLUkClkKg.roa (hash: LEX7BjdOFqa/vQo+qGyu7UsdS3xFcEis6fY7DeQDRek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c6:71:a1:ab:c2:31:7a:16:84:75:07:58:a5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Nov 4 09:00:37 2025 GMT
Not After : Nov 5 09:00:37 2025 GMT
Subject: CN=92e1b4267b2b4be8bc929448d3545f48944b5c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:8f:d8:08:a6:9e:6a:81:0b:e7:f2:af:3e:
f3:ef:c3:59:1f:6b:a5:24:e0:74:74:e6:8e:d7:87:
9e:5e:40:a8:0b:13:a2:94:fa:7f:69:69:41:64:8a:
c1:4e:16:fb:5b:b7:4e:c8:c1:e4:13:d1:3d:ae:c6:
66:b3:67:b9:10:4f:33:ff:8e:b4:98:f5:a6:de:85:
1f:e6:25:21:ae:a4:b0:bc:9d:d0:73:9e:3c:55:da:
19:9e:fc:ea:89:4c:51:15:ea:10:ba:62:cf:4e:7d:
7b:b8:e3:0e:2a:72:5d:e3:3d:7d:8d:d7:b5:d0:d4:
8d:be:fc:f9:f0:81:7d:bc:81:42:af:5c:5a:18:19:
f4:5b:b6:f9:3f:45:8c:dc:21:97:c6:d2:7d:b7:a9:
54:0a:33:03:6f:a7:21:1e:b3:b3:02:e9:8b:a4:60:
36:48:0e:83:5b:ed:e4:2f:d6:e6:76:29:7d:4c:49:
16:73:ea:ac:f9:44:93:71:19:35:52:e1:c3:c0:eb:
41:46:97:73:d2:9c:cb:c5:67:ca:00:2b:03:b9:d6:
25:62:97:6f:59:06:26:60:c8:47:b9:7c:c6:35:4c:
da:bb:f4:92:e9:37:f8:d7:0a:1a:62:02:07:66:bf:
69:06:9d:4c:f1:ef:81:b2:d6:c1:5c:aa:d1:b8:3b:
ea:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E1:B4:26:7B:2B:4B:E8:BC:92:94:48:D3:54:5F:48:94:4B:5C:08
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:4a:68:8c:34:86:9f:f9:10:16:6b:2d:6a:f6:8c:d0:5b:eb:
4f:59:51:92:3a:bb:a1:36:83:b1:92:63:af:25:3c:a9:51:04:
26:2a:5f:bd:c4:dd:42:96:97:3e:25:48:58:a5:ae:81:90:76:
3d:18:f1:e2:b3:fc:b3:97:83:20:85:e7:50:b5:e7:e2:32:f7:
79:3e:6a:bb:d8:53:b0:c9:43:1e:45:b5:8d:3a:6e:33:55:d7:
f7:b0:0b:98:51:2b:38:42:36:e5:91:a0:0f:42:d5:60:4e:c5:
34:a0:03:64:1e:29:d1:d2:34:f4:97:ae:79:c6:2e:bb:b2:80:
01:42:eb:4a:06:f8:4a:be:1e:d0:57:0f:6b:77:bc:51:a0:b9:
21:f6:b8:71:60:7d:d7:12:1f:be:29:83:86:b4:44:d6:07:88:
4c:b7:3a:2d:be:3a:35:d6:71:8e:3f:be:cf:49:e6:a3:23:88:
c9:e1:ab:11:dd:51:1e:b1:d2:ac:79:7a:df:3c:ed:51:a6:c8:
bf:65:a2:76:1a:84:59:9d:3f:61:eb:8c:1c:d7:f6:3f:7e:61:
fc:1f:51:79:c5:62:39:83:a4:16:43:d1:de:5f:2b:eb:20:b0:
68:03:f4:99:fa:6b:9f:8d:e3:c6:6b:d0:89:38:98:37:a8:09:
7a:f3:7b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:32 2025 by rpki-client