Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
File: ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json)
Hash identifier: W7XO3nVC2xITnmU6erFaunfLHteDO57ECYNxcEhT2fc=
Subject key identifier: 39:11:6A:F3:B1:89:9D:4C:C8:36:D3:3A:44:A3:19:B5:F0:F6:1C:F4
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Certificate issuer: /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial: 019876073C7ACC11A84C740155910E06FA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
Manifest number: 087C
Signing time: Mon 04 Aug 2025 17:00:42 +0000
Manifest this update: Mon 04 Aug 2025 17:00:42 +0000
Manifest next update: Tue 05 Aug 2025 17:00:42 +0000
Files and hashes: 1: XeS-j2IYyupPYwAd3k1rQhL0Pjk.roa (hash: LaZnavonJdxkwg+OL44y91TnIY6G41jXIPEjOAmHc4s=)
2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: j0vSZYR42+aO9pfbALWKjABF7s6ysv918DqEos1xpeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:07:3c:7a:cc:11:a8:4c:74:01:55:91:0e:06:fa:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Validity
Not Before: Aug 4 17:00:42 2025 GMT
Not After : Aug 5 17:00:42 2025 GMT
Subject: CN=39116af3b1899d4cc836d33a44a319b5f0f61cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:59:48:5e:9e:9a:18:e6:94:4b:3b:e4:f4:
9e:6f:42:c2:ff:cc:e7:b3:40:7a:5e:41:00:3c:93:
e8:04:f2:bf:2c:a3:e2:0d:9f:55:5f:d0:b1:f8:cf:
bd:92:2c:e2:8e:2d:72:df:06:86:da:27:3d:f1:6a:
d7:66:85:be:5f:ec:b0:84:6b:dd:fa:b7:d6:c5:c1:
0e:c8:12:8e:89:cf:cc:bd:7f:46:b8:6e:5e:9b:76:
ff:41:52:bf:48:56:63:18:43:02:ef:f4:28:12:62:
81:fc:4f:ef:54:26:de:bc:ba:9f:04:e8:da:23:c3:
63:b9:68:d1:9c:5b:4a:24:1a:9d:38:52:04:d5:e1:
e6:7b:fe:e0:93:cf:f3:4e:56:2c:2d:2b:10:91:bb:
38:7c:f7:db:13:95:78:39:5e:ce:0d:e5:53:b1:26:
18:58:89:af:cf:c6:a3:aa:d8:d2:35:5e:cc:a6:28:
e9:bf:de:72:f1:12:54:6e:ef:fd:e1:6b:9d:3e:ed:
55:f0:64:b1:02:d6:86:48:8d:03:03:2b:37:8a:03:
e0:67:2f:26:48:4e:4a:0c:a1:8c:48:c6:e6:f5:41:
94:c5:a6:14:20:fa:94:e3:a7:17:dd:c2:80:b8:89:
4f:0c:8f:af:95:c4:68:db:e6:fd:38:d2:3e:a9:86:
91:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:11:6A:F3:B1:89:9D:4C:C8:36:D3:3A:44:A3:19:B5:F0:F6:1C:F4
X509v3 Authority Key Identifier:
keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0f:69:77:22:bf:91:51:be:39:1f:0c:74:97:c4:ba:98:a3:
fe:f4:98:b9:c3:6c:03:af:95:dc:b3:aa:f4:3b:e4:78:59:7f:
75:c9:53:77:e2:a2:c8:28:96:11:91:7f:21:96:ff:d0:63:44:
b1:c4:f4:ab:e7:85:c8:62:75:73:d9:50:c1:fb:36:07:9f:36:
df:da:23:ba:1c:24:58:4e:12:b2:55:63:be:1b:52:2b:99:e3:
04:51:7c:d3:97:73:7b:42:6e:9b:a8:fd:3b:05:e9:51:e2:31:
29:f6:ee:3e:ff:e5:20:bb:bd:99:58:29:3a:e9:54:f1:5f:7d:
2f:24:53:14:b2:5d:f2:b3:6e:23:7f:18:de:1f:b9:3a:77:2a:
ea:e0:af:f6:dc:94:70:54:02:d2:26:e6:7b:7b:fb:c9:56:e7:
0d:8e:77:f0:29:e1:2f:d2:13:f0:61:0a:3e:7f:49:a8:1e:63:
93:52:7a:03:14:20:c4:fd:55:db:b7:8e:8b:df:d0:55:db:74:
15:f8:e2:7c:43:bc:a1:a8:4c:5d:02:2a:2f:00:67:ff:1a:b0:
45:88:2c:f1:cc:f8:bd:0c:d4:eb:fb:7f:78:c1:d1:12:07:b2:
a0:95:4b:7a:23:22:17:58:db:07:d6:c9:fe:b0:eb:12:ef:fe:
c4:62:68:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:31:10 2025 by rpki-client