Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
File: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json)
Hash identifier: +qiaRWF5H73ZtoOcg8E+KB9LRloDQ3+3Puh4dC3mj5s=
Subject key identifier: D1:16:D0:43:0D:3B:09:7F:F5:19:FE:C7:98:C9:4D:FC:26:AA:4F:6A
Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Certificate serial: 01988C58B5D2F23D10853F0EE8A401584C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
Manifest number: 127C
Signing time: Sat 09 Aug 2025 01:01:20 +0000
Manifest this update: Sat 09 Aug 2025 01:01:20 +0000
Manifest next update: Sun 10 Aug 2025 01:01:20 +0000
Files and hashes: 1: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: NnpBoTwUxh23yXKfMLxaFwF0JRHDXCLsWGMDozQCl/k=)
2: h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa (hash: h0MwBLTN+JJQsx/mfZTZMMTWn2GxCEc+/y4Gt6r0rFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:b5:d2:f2:3d:10:85:3f:0e:e8:a4:01:58:4c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Validity
Not Before: Aug 9 01:01:20 2025 GMT
Not After : Aug 10 01:01:20 2025 GMT
Subject: CN=d116d0430d3b097ff519fec798c94dfc26aa4f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:bc:75:6a:67:0b:8c:24:7f:49:a3:c1:c5:
4c:c4:1c:14:7e:27:60:55:cf:b4:b0:17:df:02:46:
21:71:94:39:6e:99:f1:55:e9:cb:03:db:25:ef:13:
a9:08:84:56:20:7a:e4:5b:c3:93:9f:0d:fe:ae:a7:
19:82:ca:40:37:e5:a8:c3:77:be:c4:7a:70:a7:76:
00:fa:a0:98:73:a1:b9:59:a8:13:3b:13:17:a5:20:
2a:c0:f9:27:74:eb:85:ca:1d:c7:94:86:ad:13:01:
65:b1:d4:62:09:26:5a:a7:b5:27:06:d0:f7:df:39:
2a:5b:6f:df:96:f0:23:c9:36:24:65:63:48:ca:a2:
4a:b1:96:ff:ee:f6:97:c1:39:4b:51:b5:fd:97:00:
04:79:2d:8a:4a:1c:fc:13:03:54:d2:03:35:b1:e1:
73:df:58:d1:3e:1d:b3:0b:59:0a:a9:dd:e8:fe:95:
23:ae:f7:01:cb:4e:df:2b:e0:3d:28:8c:7a:ed:e0:
5e:94:98:b4:19:ab:de:27:45:aa:f5:9b:55:4e:04:
44:62:ac:9c:16:a3:1c:a1:bf:7d:07:d7:a7:e8:08:
91:6a:c1:1c:01:d9:c4:53:f2:b7:b1:0f:ed:2f:d6:
2f:25:cd:20:ea:1d:37:8a:c9:98:dc:42:27:40:1c:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:16:D0:43:0D:3B:09:7F:F5:19:FE:C7:98:C9:4D:FC:26:AA:4F:6A
X509v3 Authority Key Identifier:
keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bb:e8:33:4a:53:ca:07:62:ed:4c:c0:fc:cd:f7:03:72:f5:
b0:96:f5:ff:ef:27:71:c1:01:9e:ea:0a:a0:1b:15:59:12:cb:
69:cf:59:97:7c:fb:48:df:f2:7b:ca:77:27:76:f9:27:81:7c:
ec:c5:18:c1:d4:e8:bd:c7:0a:66:01:68:9b:74:62:dc:4f:93:
19:94:bf:7e:c2:17:80:8c:ff:12:90:91:58:3f:a8:5d:cc:d7:
0e:23:e9:da:ec:52:f4:c2:9f:5e:b3:f8:79:25:65:16:55:81:
6c:23:88:ee:a4:84:a0:e8:52:df:d6:9c:2d:f8:dc:1c:05:d4:
33:8e:2e:0e:7a:b7:eb:9f:e3:8b:a7:b6:ff:c1:b5:78:9d:d4:
03:e2:69:2b:b7:dd:f8:24:01:d3:0d:1b:5c:6c:ca:4b:1a:58:
48:03:a9:89:99:ee:e4:61:67:85:96:19:6e:5c:5e:1e:4e:cc:
6a:e7:a8:43:0c:fc:bd:00:7e:bb:05:a3:77:7e:e4:09:eb:50:
c8:28:da:55:ca:33:46:1b:e5:b3:9c:34:cc:18:29:c4:e0:c0:
39:90:fd:6b:16:7a:24:09:ce:59:76:65:18:53:c3:f5:f8:8e:
2e:4c:ff:b4:01:cf:7f:92:29:7b:de:94:81:8c:0d:33:ea:48:
6c:b3:03:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:59 2025 by rpki-client