Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: 1RjOMHGkVC+zL4gd+ioiWU0dc5mhsBz4LbZhEHrcnMc=
Subject key identifier: 2A:A8:9F:F8:BD:5D:C5:C3:82:8A:8E:0B:04:B4:EB:28:52:9C:8A:2E
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 019A4E18BF07D01CC1EB2999770239D8C79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 09:00:35 +0000
Manifest this update: Tue 04 Nov 2025 09:00:35 +0000
Manifest next update: Wed 05 Nov 2025 09:00:35 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: hZL04uknTiBG8ytBfjgPn0QT6mO1C7NhUhmoi1ysXOM=)
2: OZJAkQeWPGiu0MMG4YGewg2oUhI.roa (hash: kvD4Jh7HATnFEhZqQFNvhTQZ3Ir8ynHCKw0hu3/CQds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:bf:07:d0:1c:c1:eb:29:99:77:02:39:d8:c7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Nov 4 09:00:35 2025 GMT
Not After : Nov 5 09:00:35 2025 GMT
Subject: CN=2aa89ff8bd5dc5c3828a8e0b04b4eb28529c8a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:b8:88:66:19:ba:10:35:0d:47:ce:53:57:
7d:66:0b:39:64:26:41:ef:74:a1:e8:83:41:d3:fa:
aa:58:12:f2:47:ff:79:54:b2:77:cf:ee:e8:48:be:
82:1f:b4:72:73:60:aa:1f:cf:f3:18:1f:a6:9a:43:
02:0b:94:ce:c5:0a:f3:18:ac:e6:61:9e:1f:99:5e:
c8:4f:44:02:d2:a5:77:07:8a:9d:e8:08:4a:fc:04:
d9:5b:b5:63:2c:34:74:3e:0a:d3:56:a2:4b:64:9a:
49:ab:b3:35:60:45:c5:7c:66:ca:0c:7a:d4:2d:07:
6a:d7:ad:68:c3:b5:cf:7b:ac:5d:f8:e3:d8:fe:3d:
9d:b6:14:a9:f6:10:e6:92:80:44:02:ac:e0:0a:aa:
f1:75:50:6d:6d:ba:b6:60:29:1a:04:44:1a:94:ac:
4e:7f:fd:e4:67:9c:5f:7d:bb:c1:19:0b:53:34:0d:
4e:39:a0:79:59:e1:2b:90:a0:de:8c:80:43:1f:14:
78:a4:af:e7:4d:55:46:47:86:9f:91:28:11:c7:ad:
49:5c:98:a1:c8:37:5e:21:4f:9b:0e:85:3f:c8:c1:
d5:d5:01:00:da:28:6c:5c:5f:16:ef:ee:b9:05:80:
1a:bd:a5:98:f8:db:01:28:53:12:08:bd:d7:86:05:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A8:9F:F8:BD:5D:C5:C3:82:8A:8E:0B:04:B4:EB:28:52:9C:8A:2E
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4e:c1:f4:7a:64:3b:c9:c0:9b:60:93:5a:4a:d7:62:4b:bf:
9c:f2:e8:fd:ea:b4:f8:c9:c8:de:6b:12:28:e0:e0:97:14:95:
ed:4c:c0:59:5e:2e:17:a3:43:d2:bb:b8:06:d4:1a:ba:da:be:
a4:53:55:04:f4:c4:e7:79:58:48:d4:48:19:65:50:db:5e:b7:
ba:7c:6f:1c:1f:ab:d2:3f:02:ff:05:11:35:f6:21:26:76:f1:
36:7e:48:4a:42:99:53:72:e5:90:42:99:f0:68:2e:8d:c5:bb:
f1:33:5a:a4:6f:94:a2:92:1d:ea:4c:ad:ae:a6:df:f3:5e:47:
6c:a2:d1:be:90:3c:8e:a1:4a:8a:0d:b4:fb:81:52:7a:f9:cc:
d8:42:4f:23:19:8b:9d:e3:42:b4:13:39:3d:29:92:a6:6f:22:
c9:9f:29:23:ce:52:b9:22:52:8d:ef:6a:f1:b3:29:87:b7:31:
d8:ce:61:db:6e:26:c8:8f:7f:d9:d3:d9:61:7b:f9:91:ad:40:
ac:f9:2f:08:97:fa:56:a6:df:d4:16:7b:a8:d4:8b:29:e4:91:
51:64:22:74:40:e0:c5:41:8f:8d:0c:d0:1a:b2:81:9e:34:21:
20:0c:4e:c1:b3:c2:b5:26:e9:e8:80:9d:80:43:f5:31:6d:e2:
0a:a7:a7:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGL8H0BzB6ymZdwI52MefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGE4NjFkN2MxNGI0Y2E1ZTZkMWM3ZDYwYWFlZWIzMmVh
OGVmNjEwHhcNMjUxMTA0MDkwMDM1WhcNMjUxMTA1MDkwMDM1WjAzMTEwLwYDVQQD
EygyYWE4OWZmOGJkNWRjNWMzODI4YThlMGIwNGI0ZWIyODUyOWM4YTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7e4iGYZuhA1DUfOU1d9Zgs5ZCZB
73Sh6INB0/qqWBLyR/95VLJ3z+7oSL6CH7Ryc2CqH8/zGB+mmkMCC5TOxQrzGKzm
YZ4fmV7IT0QC0qV3B4qd6AhK/ATZW7VjLDR0PgrTVqJLZJpJq7M1YEXFfGbKDHrU
LQdq161ow7XPe6xd+OPY/j2dthSp9hDmkoBEAqzgCqrxdVBtbbq2YCkaBEQalKxO
f/3kZ5xffbvBGQtTNA1OOaB5WeErkKDejIBDHxR4pK/nTVVGR4afkSgRx61JXJih
yDdeIU+bDoU/yMHV1QEA2ihsXF8W7+65BYAavaWY+NsBKFMSCL3XhgW5gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqon/i9XcXDgoqOCwS06yhSnIouMB8GA1UdIwQY
MBaAFApKhh18FLTKXm0cfWCq7rMuqO9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2It
OTRkYmYzZmQwZTJkLzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2ItOTRkYmYzZmQwZTJk
LzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAak7B9Hpk
O8nAm2CTWkrXYku/nPLo/eq0+MnI3msSKODglxSV7UzAWV4uF6ND0ru4BtQautq+
pFNVBPTE53lYSNRIGWVQ2163unxvHB+r0j8C/wURNfYhJnbxNn5ISkKZU3LlkEKZ
8GgujcW78TNapG+UopId6kytrqbf815HbKLRvpA8jqFKig20+4FSevnM2EJPIxmL
neNCtBM5PSmSpm8iyZ8pI85SuSJSje9q8bMph7cx2M5h224myI9/2dPZYXv5ka1A
rPkvCJf6Vqbf1BZ7qNSLKeSRUWQidEDgxUGPjQzQGrKBnjQhIAxOwbPCtSbp6ICd
gEP1MW3iCqenCA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:38 2025 by rpki-client