Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: nmNU0e2DgpN95sldSAfh0VbCb/R2n+ayQmFpDRNeO+4=
Subject key identifier: E8:D7:A8:47:51:B8:04:5F:11:AC:12:BE:BB:84:A9:57:FB:8F:3F:46
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 019A51BE97AE729B71C26C431A599C82298D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 164F
Signing time: Wed 05 Nov 2025 02:00:36 +0000
Manifest this update: Wed 05 Nov 2025 02:00:36 +0000
Manifest next update: Thu 06 Nov 2025 02:00:36 +0000
Files and hashes: 1: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (hash: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: 7NL9Bqrki7ICxe20+QT3HOz5xGrESdg0wlVXoVnrL5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:97:ae:72:9b:71:c2:6c:43:1a:59:9c:82:29:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Nov 5 02:00:36 2025 GMT
Not After : Nov 6 02:00:36 2025 GMT
Subject: CN=e8d7a84751b8045f11ac12bebb84a957fb8f3f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:6f:26:8f:c2:f6:71:90:1a:df:24:92:91:
3b:98:3f:31:d6:2f:32:10:d3:fe:cc:4f:41:bb:f8:
bd:8e:d1:dd:aa:2e:6d:15:91:ec:28:30:39:32:16:
3c:01:aa:4d:41:15:90:a6:6f:9c:b9:ab:12:71:52:
f7:d7:f9:85:26:32:de:29:fb:f8:a6:cb:81:4d:59:
bb:87:0a:50:2e:75:08:d1:8e:5e:69:36:4f:10:3d:
fc:27:2b:65:67:1b:f1:08:02:e1:74:f2:22:3d:35:
a0:d3:9c:53:6a:d1:de:c9:b0:e8:1b:d8:eb:40:1a:
93:19:95:19:c2:21:d7:c7:db:46:39:cf:4c:72:b3:
9d:08:6f:df:ee:6b:fb:8e:57:aa:e4:e7:9f:01:a0:
75:78:e0:c8:34:92:d6:2e:e6:b3:6a:8d:2f:9d:27:
4f:6e:79:26:44:61:55:83:29:3c:4d:ba:3b:f2:70:
ff:f7:46:43:b8:21:b8:ad:e0:f0:39:6e:59:01:95:
fd:fa:be:74:97:ef:ff:0d:57:f8:bc:e5:04:90:30:
b4:d8:54:d7:bc:2d:2b:2e:fe:70:83:33:0d:fd:bb:
dc:53:5c:9b:6e:3b:bc:3d:69:b0:b3:93:ae:76:78:
2e:e7:ec:b7:bb:83:68:80:fe:cb:c1:4d:5c:ed:51:
72:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D7:A8:47:51:B8:04:5F:11:AC:12:BE:BB:84:A9:57:FB:8F:3F:46
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9b:ab:0e:8c:40:50:6e:4c:05:be:93:14:35:aa:3b:eb:c9:
7a:4d:de:fc:9f:85:ef:d0:54:8f:e4:d9:17:c3:21:ed:65:fc:
46:33:90:ed:5a:f7:ba:13:68:74:62:a8:97:01:34:6e:4d:7c:
21:74:72:e1:84:12:a3:98:e4:d0:09:40:a7:9d:52:b8:58:41:
7d:dd:61:4f:c0:8c:a3:c6:ce:62:7f:90:56:22:6b:43:e9:f5:
0f:24:55:33:d7:c4:a7:a1:13:2b:9e:ae:a2:b0:08:16:56:3e:
08:b9:94:2b:48:23:47:c3:b2:83:1d:3c:a5:ea:8a:dc:77:31:
ff:e2:54:f2:dc:2e:ea:89:b5:d0:1c:c5:e0:37:89:f7:25:79:
bc:54:ca:2f:98:b4:60:bb:6f:4a:82:87:a3:f5:4e:a2:d3:b1:
b4:eb:54:b9:94:26:43:3c:e2:a4:6f:e6:1a:0f:6e:c4:f7:a8:
14:a5:c1:80:3d:f9:59:da:0b:26:7e:91:a1:3e:05:7b:44:7d:
7b:4c:1c:73:d7:95:79:f1:65:56:8e:27:28:82:0e:77:4b:56:
e9:da:a1:84:1d:16:90:e3:34:cb:f4:43:02:ff:16:f5:00:d7:
cd:e1:79:74:c1:e5:bb:38:1b:8a:15:b5:c3:af:b9:e9:61:53:
4e:80:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:15 2025 by rpki-client