Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
File: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json)
Hash identifier: V+F7YrZyZWojqk4F9ibVW5ytkCvXx9EyWYeJXp0uLag=
Subject key identifier: 87:24:A6:31:73:B8:E9:A4:18:2C:D4:1E:EA:01:7C:93:41:4F:44:C5
Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Certificate serial: 019A4E4F8CB0D43F331E8CD3B5F528E6F1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
Manifest number: 1365
Signing time: Tue 04 Nov 2025 10:00:27 +0000
Manifest this update: Tue 04 Nov 2025 10:00:27 +0000
Manifest next update: Wed 05 Nov 2025 10:00:27 +0000
Files and hashes: 1: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: TvlFHZTnG1FoxTKq3xoljQEBn5erAlkHzSJvh1QXAUk=)
2: h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa (hash: h0MwBLTN+JJQsx/mfZTZMMTWn2GxCEc+/y4Gt6r0rFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:8c:b0:d4:3f:33:1e:8c:d3:b5:f5:28:e6:f1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Validity
Not Before: Nov 4 10:00:27 2025 GMT
Not After : Nov 5 10:00:27 2025 GMT
Subject: CN=8724a63173b8e9a4182cd41eea017c93414f44c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:8a:c9:a1:c2:cc:99:de:28:d4:7b:fa:9e:
01:0d:95:20:5f:f3:e4:0f:79:db:49:7e:44:9b:ae:
b2:56:85:45:de:93:96:d4:7a:ea:0d:30:c2:1b:19:
2d:21:3b:38:7a:e9:48:f9:2d:a8:33:ea:35:d8:ea:
c1:43:87:75:22:21:c1:db:ee:a2:4b:2a:0b:22:f1:
7e:3a:7d:38:0f:54:ea:a5:34:ee:28:b7:a0:d5:d7:
a7:fd:e5:cc:61:67:dc:e4:94:5d:98:3e:02:9d:f6:
f5:c2:be:3d:38:c7:43:c3:ea:d8:87:c4:97:d4:e8:
54:dc:58:b5:ac:44:b8:e4:44:f7:e6:8b:cc:d1:94:
e0:f8:d3:84:35:ea:8d:34:ad:09:54:74:64:d2:b1:
d3:3c:2c:1e:99:d6:1b:c7:52:e7:8d:4f:21:1f:9e:
98:94:1f:21:c6:f1:75:92:ec:f6:04:ac:21:f7:45:
08:16:14:3d:92:91:b9:d1:56:02:b4:b8:8f:c2:06:
12:46:37:5b:8f:16:c4:d8:7f:f7:8f:08:6b:6d:2a:
12:83:10:a3:bc:4a:de:ea:2f:8b:2b:4c:a7:38:7c:
79:b6:c9:13:38:b6:a8:ca:19:19:75:b3:c7:48:5e:
bf:ce:cf:e8:cf:72:fc:36:10:e3:40:f3:ba:91:00:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:24:A6:31:73:B8:E9:A4:18:2C:D4:1E:EA:01:7C:93:41:4F:44:C5
X509v3 Authority Key Identifier:
keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c8:8d:85:9c:9d:c4:68:48:e3:34:97:59:bc:a6:8c:ac:24:
c2:64:6a:06:ce:2b:d7:87:22:cb:8d:35:6d:a2:91:3e:4e:f0:
f7:ef:44:ba:72:df:5f:45:29:63:8d:55:d6:1a:97:7b:58:1d:
c6:83:1c:3f:ea:d4:7e:11:88:22:41:b1:ac:0b:e0:a7:aa:0a:
74:4b:fa:4a:bb:cd:7c:cc:39:83:d9:35:b3:88:13:8f:2d:27:
af:44:34:d5:03:81:2a:0e:84:be:22:60:83:c2:6b:a6:ed:4a:
6f:c8:2a:1b:a4:be:4c:43:26:7c:6a:5c:68:5b:8f:c3:f9:be:
25:56:6a:45:ac:8b:97:c0:47:b4:0d:56:78:f8:e2:7e:6d:64:
74:08:18:63:1e:24:3e:da:4a:ed:b8:fd:57:1e:90:7a:e5:d6:
02:42:5c:9d:ae:38:30:33:9e:f6:f8:fb:ce:fb:1f:dc:00:9b:
8f:c4:6e:cd:dd:ec:f1:f8:67:22:3d:bb:9d:f6:e6:a6:4b:4d:
58:38:ce:58:4d:06:ae:e8:e9:9e:49:b5:11:25:74:0b:9f:6c:
96:89:4f:c0:89:b4:e3:07:94:c5:35:7a:7f:d4:2d:af:a6:b2:
e6:44:cc:49:be:83:10:0d:5a:f4:16:67:ef:0c:76:55:fc:38:
83:06:fa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:04 2025 by rpki-client