
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: MiW+mYlkWEhcFBg0tWoF1ZpmKc8y7msQO99wNcvvisU=
Subject key identifier: 1B:12:92:7B:9C:FB:80:E9:EE:16:56:96:E4:B0:F7:89:86:A8:28:F1
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 01987CE4DB0639661784AF1DEB4385D6DC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 01:00:29 +0000
Manifest this update: Wed 06 Aug 2025 01:00:29 +0000
Manifest next update: Thu 07 Aug 2025 01:00:29 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: XOEKhDkBEi51xwFazqcEw2c9iqj4dEP/GHwjKEVo5pI=)
2: yW1cS9Mx29vTOamtTRsFT6bLIXw.roa (hash: PZBuxnii3Pq+stD6k3qQUstIcPbrvHDexZJKpw32ONQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e4:db:06:39:66:17:84:af:1d:eb:43:85:d6:dc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Aug 6 01:00:29 2025 GMT
Not After : Aug 7 01:00:29 2025 GMT
Subject: CN=1b12927b9cfb80e9ee165696e4b0f78986a828f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:91:74:e7:d1:9f:09:2b:f7:c8:e9:9b:09:67:
20:87:e4:d6:13:8b:38:cc:2f:3f:44:a1:9f:dc:6c:
3d:82:f8:3b:01:b3:e1:68:fa:7b:8a:84:1c:77:57:
e0:a6:18:54:f0:a8:d8:6a:22:ec:d2:99:9f:5e:e1:
3c:3d:cc:1a:e1:5e:ea:e8:ef:87:c8:9d:00:61:e1:
be:8f:a3:9e:af:80:6f:21:b8:6c:56:84:25:04:f5:
88:8f:d1:eb:40:a0:09:af:83:97:3b:99:18:06:51:
ae:33:ea:40:bf:fd:f1:e5:ad:c7:3d:ad:e0:83:e3:
9d:66:60:27:9a:d7:15:7d:8a:9d:a7:c3:3d:d5:51:
5a:d9:c5:4c:50:9e:df:52:5d:13:bd:ad:45:d8:e7:
f2:7d:63:b4:f7:21:a9:da:94:d8:ba:f3:8a:8c:74:
7e:81:48:cc:4b:82:2f:6d:c0:a6:64:2f:1d:22:61:
cc:4c:e6:a0:5d:3b:77:1b:e1:bd:ab:81:f0:25:2f:
07:f5:fe:df:90:88:1a:20:24:f4:48:ba:9b:72:9b:
25:5d:42:29:ec:d1:43:53:e3:06:a3:cc:7b:cd:10:
1e:29:a8:c5:b1:cf:a2:46:2f:11:2d:e2:37:a0:65:
94:be:04:2d:6e:04:54:90:74:d3:f8:92:17:43:56:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:12:92:7B:9C:FB:80:E9:EE:16:56:96:E4:B0:F7:89:86:A8:28:F1
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2d:83:4d:c8:3d:9e:26:2c:3a:b0:1c:8f:33:7d:a9:98:10:
85:da:72:30:60:6b:f5:51:d1:23:74:3f:c5:f5:a6:34:23:32:
f9:81:30:4b:4b:7b:33:0a:e8:aa:70:1c:9a:4e:9e:39:46:3f:
43:f1:39:88:bd:90:6d:09:e0:3d:f9:e5:a9:9b:4a:38:79:88:
2c:f3:e6:33:c9:73:76:38:3e:5a:ee:fa:2f:f2:02:a8:28:1b:
4f:45:ea:d3:fc:26:01:79:63:82:11:62:71:07:80:eb:4b:bd:
ee:c1:f6:42:0f:f2:22:75:26:72:20:29:d2:78:ae:8e:f0:4c:
b2:b8:69:e6:65:dd:9c:c7:6c:47:02:5a:ba:0d:bf:04:e5:54:
db:09:a6:c1:69:c3:f1:08:b6:09:f9:f4:94:54:b8:04:11:d7:
99:48:52:3a:f0:25:5b:91:94:b5:5c:f4:64:54:a7:03:4b:90:
1e:51:e9:8c:cd:f7:21:a0:05:aa:c4:03:8d:d4:6d:ce:39:9a:
22:5a:d2:2b:c7:2c:53:bb:3e:fc:d4:53:49:dc:4a:4f:e8:26:
b3:d5:ab:96:fe:44:2b:24:9b:93:33:48:bd:c6:df:f5:da:4d:
bf:83:79:bd:db:7b:fa:60:c5:c7:6c:73:14:3e:c5:ee:2f:d6:
38:14:99:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh85NsGOWYXhK8d60OF1twKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YTVjM2FiYTQyMWI3OGE3ZDVkMDliNzViNGNlM2JlNTI3
M2NhYWMwHhcNMjUwODA2MDEwMDI5WhcNMjUwODA3MDEwMDI5WjAzMTEwLwYDVQQD
EygxYjEyOTI3YjljZmI4MGU5ZWUxNjU2OTZlNGIwZjc4OTg2YTgyOGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZF059GfCSv3yOmbCWcgh+TWE4s4
zC8/RKGf3Gw9gvg7AbPhaPp7ioQcd1fgphhU8KjYaiLs0pmfXuE8Pcwa4V7q6O+H
yJ0AYeG+j6Oer4BvIbhsVoQlBPWIj9HrQKAJr4OXO5kYBlGuM+pAv/3x5a3HPa3g
g+OdZmAnmtcVfYqdp8M91VFa2cVMUJ7fUl0Tva1F2OfyfWO09yGp2pTYuvOKjHR+
gUjMS4IvbcCmZC8dImHMTOagXTt3G+G9q4HwJS8H9f7fkIgaICT0SLqbcpslXUIp
7NFDU+MGo8x7zRAeKajFsc+iRi8RLeI3oGWUvgQtbgRUkHTT+JIXQ1ba0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsSknuc+4Dp7hZWluSw94mGqCjxMB8GA1UdIwQY
MBaAFAilw6ukIbeKfV0Jt1tM475Sc8qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83YmQ4Y2YtMmE2MS00Yjc0LTg2MGQt
MzY0ZmFlN2M3MmM0LzEvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83YmQ4Y2YtMmE2MS00Yjc0LTg2MGQtMzY0ZmFlN2M3MmM0
LzEvQ0tYRHE2UWh0NHA5WFFtM1cwemp2bEp6eXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAki2DTcg9
niYsOrAcjzN9qZgQhdpyMGBr9VHRI3Q/xfWmNCMy+YEwS0t7MwroqnAcmk6eOUY/
Q/E5iL2QbQngPfnlqZtKOHmILPPmM8lzdjg+Wu76L/ICqCgbT0Xq0/wmAXljghFi
cQeA60u97sH2Qg/yInUmciAp0niujvBMsrhp5mXdnMdsRwJaug2/BOVU2wmmwWnD
8Qi2Cfn0lFS4BBHXmUhSOvAlW5GUtVz0ZFSnA0uQHlHpjM33IaAFqsQDjdRtzjma
IlrSK8csU7s+/NRTSdxKT+gms9Wrlv5EKySbkzNIvcbf9dpNv4N5vdt7+mDFx2xz
FD7F7i/WOBSZHg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:24:58 2025 by rpki-client