
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: DzZVTHkXEdbn9hytUlEgxaiHt+F+VT7vuC2otpZpR+4=
Subject key identifier: DE:DB:68:E8:4A:4B:8E:EA:FE:0C:59:E7:33:51:71:38:8A:75:5C:6F
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 019872CF4E73921F51DC3FB606C44FAD6DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 1557
Signing time: Mon 04 Aug 2025 02:00:45 +0000
Manifest this update: Mon 04 Aug 2025 02:00:45 +0000
Manifest next update: Tue 05 Aug 2025 02:00:45 +0000
Files and hashes: 1: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (hash: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: a1CFk6jZ/iOhbPuX3nuPPcYlLavOEPWGqDJGdEixH+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:4e:73:92:1f:51:dc:3f:b6:06:c4:4f:ad:6d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Aug 4 02:00:45 2025 GMT
Not After : Aug 5 02:00:45 2025 GMT
Subject: CN=dedb68e84a4b8eeafe0c59e7335171388a755c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:cd:a7:90:7d:4f:6b:f8:63:c2:70:50:d1:
e9:a2:cf:61:57:95:32:e1:fd:ac:0e:d9:aa:d6:26:
e1:5a:66:9e:dd:88:dc:96:a9:65:d9:1b:ce:64:86:
00:60:fb:b2:af:0e:73:e6:f8:c7:cf:97:8f:4d:51:
fe:36:9b:09:c6:e6:7f:cc:53:0b:13:05:1f:a0:b3:
26:c1:d1:0b:36:54:f1:64:ee:86:5a:85:1f:17:6f:
4c:16:d9:84:bc:36:24:ae:c3:43:55:89:c9:b4:4b:
88:ee:99:61:07:3e:5e:2e:24:b1:d7:82:e2:b7:f4:
6e:65:1f:49:10:1e:0a:0e:76:e5:da:0b:5d:ac:3c:
df:a1:9f:e9:69:3e:a0:86:b8:fb:02:6f:42:cc:0b:
b9:2b:0a:de:8e:f1:36:a0:1c:10:f0:3d:83:ae:ac:
e7:9d:00:9d:8e:f7:42:c4:b3:bd:a9:5c:ac:04:e8:
aa:38:2b:0a:44:71:77:21:4c:c9:e2:6e:62:e2:a6:
98:29:6f:c6:97:c6:29:cd:9d:91:26:30:3d:23:85:
de:1c:3e:57:41:8b:05:38:51:ee:a3:df:d9:c4:69:
3f:a6:35:1a:53:2f:9f:a4:e6:92:28:8e:6e:4c:e3:
01:9c:2c:f4:cc:74:df:a0:d7:ba:7b:cc:26:84:d6:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DB:68:E8:4A:4B:8E:EA:FE:0C:59:E7:33:51:71:38:8A:75:5C:6F
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8f:97:53:32:33:0c:50:fb:d2:cf:f0:9b:04:ac:91:fd:be:
4d:31:0a:ea:00:8e:25:2c:45:f6:a3:d8:63:21:dc:e1:74:57:
af:93:1b:0f:54:04:31:29:09:67:96:60:9a:15:1a:49:4a:5f:
68:45:93:b1:d6:02:66:53:fd:7f:10:0b:ed:0b:1d:3a:c2:18:
8c:1a:58:e6:ac:d1:b2:b9:93:f5:19:02:01:cd:ab:af:57:5d:
16:85:e1:1c:9a:e8:27:2e:85:55:8b:7d:31:f3:8c:e3:75:38:
ff:3b:5d:25:c2:6d:d4:42:22:97:8d:20:02:c9:45:71:13:5b:
9d:04:e9:12:33:94:6d:a7:b2:b7:0d:a2:d2:29:b6:69:4a:ad:
12:12:47:aa:69:8e:76:dc:a9:4b:0f:4e:3a:8a:11:1c:47:58:
62:38:de:0a:99:cf:11:0f:26:f9:f3:35:9e:32:99:a5:7c:e2:
42:41:42:1a:71:d8:ab:63:e6:63:31:d9:fe:e4:20:ca:e0:c8:
38:4f:77:50:b4:f7:13:8a:09:44:43:66:c4:56:d8:4e:61:dc:
e9:79:03:ac:1e:88:5f:ad:98:2c:67:b6:e6:7e:fa:68:64:8b:
00:3e:62:d2:28:6b:d7:28:86:d9:19:91:2e:a6:a2:d9:77:25:
c9:9f:d9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:15 2025 by rpki-client