Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: lBm3lvbtFeWYIL1DByIWtlisvzIOGXz1yvCAm72oqds=
Subject key identifier: 4C:C0:2F:3A:CD:E1:82:7B:B1:B6:1F:0B:55:DA:40:F4:3C:6C:A0:37
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 019A5608D9C3E3B7370167CFF5FFB6BF187B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 1715
Signing time: Wed 05 Nov 2025 22:00:11 +0000
Manifest this update: Wed 05 Nov 2025 22:00:11 +0000
Manifest next update: Thu 06 Nov 2025 22:00:11 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: ahbuX4NuxPDtQmc93Y37yF/wLbRrDk0vDIfXyFDfSnQ=)
2: yW1cS9Mx29vTOamtTRsFT6bLIXw.roa (hash: PZBuxnii3Pq+stD6k3qQUstIcPbrvHDexZJKpw32ONQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:08:d9:c3:e3:b7:37:01:67:cf:f5:ff:b6:bf:18:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Nov 5 22:00:11 2025 GMT
Not After : Nov 6 22:00:11 2025 GMT
Subject: CN=4cc02f3acde1827bb1b61f0b55da40f43c6ca037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1f:49:33:88:85:83:e8:ec:4f:41:5d:f5:80:
4e:79:a8:17:50:a8:30:bd:3f:24:19:3d:a0:d9:e4:
58:16:b9:e3:3a:d1:7b:32:7f:89:59:f9:d3:8d:c4:
43:50:4d:c6:81:8c:96:05:62:4c:27:cb:95:36:0d:
7d:dc:3e:de:22:8e:b9:55:88:32:8a:4a:71:42:64:
35:c5:b3:7a:97:14:35:7c:37:c9:b2:3c:63:18:36:
50:1f:61:23:5f:01:a6:4c:e8:d3:b5:c1:0e:a2:5c:
bb:7a:ae:b4:d1:fd:6e:cb:aa:34:de:50:ee:b8:3f:
d3:90:ef:15:23:5b:27:90:dd:c6:73:2e:96:af:93:
1b:8c:13:e9:ab:93:ef:e2:d4:33:41:1b:b5:2b:32:
2b:75:55:78:15:bc:4c:bb:65:4e:54:46:71:ad:f1:
03:f5:23:13:1e:0c:d9:59:9d:3e:85:ac:60:0c:5a:
38:6a:66:3c:49:c9:5b:be:50:55:11:63:e1:6c:66:
ba:61:d2:89:a6:66:74:9e:c2:98:f3:4f:53:c2:89:
d3:79:d2:f9:07:97:0f:46:80:cd:8b:36:2e:3d:af:
2c:da:00:44:70:92:98:b3:e2:8b:b6:94:79:ef:4f:
9d:e6:35:06:33:ad:e5:a2:b8:06:4a:31:bc:66:99:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C0:2F:3A:CD:E1:82:7B:B1:B6:1F:0B:55:DA:40:F4:3C:6C:A0:37
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:db:66:50:08:01:55:84:6b:c5:fd:41:92:c6:61:dd:95:30:
50:ff:56:0a:6a:ee:36:aa:21:8b:e4:99:36:38:72:85:99:07:
b3:a9:03:4c:48:e7:fe:11:14:37:86:da:87:70:bf:61:a1:3b:
60:a9:b3:6d:4d:24:a0:de:5f:e2:03:4e:de:48:81:e6:db:f4:
f4:55:ed:4d:6c:20:14:2f:a8:4d:f3:09:ac:23:e7:11:ac:ae:
a4:37:5f:27:5d:c0:18:b1:0b:3a:ad:6f:73:0f:41:2d:13:e3:
77:7c:1a:7c:8e:64:c5:79:d3:2a:57:31:c3:d3:31:c3:8d:7b:
16:a1:8e:88:1d:a4:80:00:dd:66:58:be:ce:9c:32:16:c3:23:
55:ad:6d:ca:89:96:78:d9:31:d3:70:89:db:46:f0:1a:37:6c:
d8:c0:43:79:15:7f:2a:22:aa:c4:61:67:d0:f2:7f:34:71:3a:
b3:e9:69:a9:72:c9:4b:2e:76:3e:88:ff:23:be:87:47:87:c9:
0f:68:c5:ed:60:3e:70:af:2c:ee:13:d7:80:bf:09:77:83:9f:
e9:52:fe:ce:b9:d3:05:12:56:3b:d5:cf:3e:14:8c:5f:2a:1f:
67:3c:9b:2e:f6:29:46:43:53:49:f5:ed:1f:b3:64:fe:fb:c9:
c8:b5:8d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:37:03 2025 by rpki-client