Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft (raw, json)
Hash identifier: NvsyPi1im/5hP845c3JAbHCqbfEPLhfbBjXLX+NO72o=
Subject key identifier: 21:1D:AC:B2:BE:49:B1:96:BF:29:55:30:B9:C4:27:F3:3F:CB:92:05
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 019890DA67C24C9F65C3F54C711B2E83DE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 22:01:29 +0000
Manifest this update: Sat 09 Aug 2025 22:01:29 +0000
Manifest next update: Sun 10 Aug 2025 22:01:29 +0000
Files and hashes: 1: CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl (hash: HjQSaXPqjo6+AKBslehNj0LL+TMiMsL2DC8L8fSHsA4=)
2: FmAmhG0AvPG6yVB64Qfw6xRip4M.roa (hash: 84/kBc6q38BYMUmioROiS2CF0R9+3DZAaiOiDJ9PSD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:67:c2:4c:9f:65:c3:f5:4c:71:1b:2e:83:de:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Aug 9 22:01:29 2025 GMT
Not After : Aug 10 22:01:29 2025 GMT
Subject: CN=211dacb2be49b196bf295530b9c427f33fcb9205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:dd:00:2a:4f:f9:42:57:2a:d3:fe:59:53:
66:d9:f6:87:4c:0a:32:0f:ac:6a:03:cc:d1:fa:3e:
fa:18:0f:3d:c3:75:d6:98:cc:23:08:3a:79:67:a4:
da:65:c8:8d:5d:b9:27:44:fa:7b:91:47:52:7f:a0:
ce:16:0b:6d:15:44:fc:f0:8e:4c:2c:6c:30:98:38:
5d:40:7d:46:11:0c:67:de:b4:4b:6e:c1:e5:08:28:
8d:c0:47:e3:1c:b9:1d:9e:9f:09:4b:a7:27:e8:3b:
23:82:77:64:4f:ad:9a:c3:2e:55:b4:8e:a9:b7:60:
c8:94:6c:61:6c:3e:d5:1e:a8:29:00:99:4c:a1:63:
d0:79:40:e6:33:b6:6c:f0:fe:33:84:8a:cf:7f:c2:
8d:76:86:b6:be:4a:83:4d:e8:88:77:87:d8:93:54:
ef:30:c1:b3:c3:46:ec:0c:06:d1:33:32:65:64:f0:
3a:f7:dd:a3:ba:28:5b:87:96:70:58:7c:1e:93:7d:
ac:0a:d8:b6:e4:15:47:10:f4:ae:24:a7:2e:cb:ee:
44:55:02:90:49:15:51:ff:58:98:4b:94:29:aa:27:
f0:30:4c:86:3d:a7:2e:82:5c:1b:cc:b8:d5:75:15:
42:92:d6:83:8c:b0:d9:d7:5e:4a:34:70:de:61:e5:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1D:AC:B2:BE:49:B1:96:BF:29:55:30:B9:C4:27:F3:3F:CB:92:05
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:86:45:aa:31:c9:87:6b:eb:dc:36:68:17:9a:d3:67:dc:99:
cf:09:d2:ac:2f:ad:cd:14:43:f7:79:04:47:ab:e0:0f:f4:5f:
46:b8:a3:f7:0f:4b:1e:c3:a4:09:fa:2a:af:6b:d1:21:b3:60:
0c:24:b7:b4:13:f0:36:33:2e:06:c0:38:14:6b:fb:75:7e:e7:
06:e8:e5:6c:bd:03:96:39:83:a3:fe:98:06:20:50:86:a8:17:
94:f3:39:73:23:15:11:26:a0:e0:5b:fe:0f:95:3e:78:f1:ef:
df:98:6d:17:b1:a7:8f:84:69:6c:b4:2b:b9:12:72:fb:cb:93:
48:df:6d:62:53:e7:e0:47:f7:35:88:00:e0:3f:ec:0f:6c:c8:
52:4e:55:f5:67:cd:fa:3a:de:a7:45:49:ec:ea:b9:0b:c9:d9:
1d:42:3c:63:a2:9f:23:a2:75:56:ac:21:f4:27:24:b2:83:f2:
e4:11:60:60:73:59:d5:76:c3:8e:4f:cd:12:10:a1:04:67:cd:
42:78:6f:2c:b9:e5:95:e1:ea:90:ab:0b:df:71:89:18:ff:a1:
55:70:57:5b:9e:5d:1e:5e:6b:3b:36:57:12:26:ac:11:2e:ac:
fb:95:3d:f5:4f:4b:22:16:c3:50:87:64:73:41:71:d2:4f:07:
f9:d4:14:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:44:55 2025 by rpki-client