Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
File: CkGloqGDOWKcwTA-beyLtgXdymU.mft (raw, json)
Hash identifier: 37wN4F1auYhPj7F+IvBJM2RSI2nRtTqAAGNc8zFu828=
Subject key identifier: 61:66:14:A0:75:33:21:D6:53:1D:CF:10:30:98:F1:EA:5C:D6:26:E3
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 019A4EF4C2C7795D393D561CE979B6FEFCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 13:00:54 +0000
Manifest this update: Tue 04 Nov 2025 13:00:54 +0000
Manifest next update: Wed 05 Nov 2025 13:00:54 +0000
Files and hashes: 1: CkGloqGDOWKcwTA-beyLtgXdymU.crl (hash: 3PNAEw0r64pq6ElPT+u8fQ/qhKco4s/4hPZ/r49iye4=)
2: hER6wRwe_hUZJ0u9RImVrBTy1as.roa (hash: iyJ20Ahzbr3qZY7vMtDGjDttWYIPJenArxH2H2QEoYE=)
3: qKN97IS00Dw-fIUwd184Vx9Y1MM.roa (hash: InDA9nhPg1Xj964zVuEzcl5j+yZyNDumD+IkyAj4yPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c2:c7:79:5d:39:3d:56:1c:e9:79:b6:fe:fc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Nov 4 13:00:54 2025 GMT
Not After : Nov 5 13:00:54 2025 GMT
Subject: CN=616614a0753321d6531dcf103098f1ea5cd626e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:97:ef:ec:57:6a:18:2c:93:86:3d:27:4f:
b7:1c:8b:3b:c4:10:d0:5b:3b:2c:4f:87:3c:11:d7:
26:03:70:c8:5b:7a:d8:f1:f0:6c:8f:74:6a:63:da:
c6:44:73:83:d0:a9:d9:47:85:a7:33:d6:13:39:b9:
fd:1e:8a:ee:17:e6:22:0b:8a:50:5f:a4:67:76:0e:
0c:d2:34:c4:dd:22:f1:1a:b7:2e:c2:80:03:6c:22:
ec:bc:9e:17:a7:4a:de:46:bd:d2:5a:88:76:a8:15:
54:fa:90:3f:b0:bb:2e:5b:c4:65:ab:22:b0:c8:c0:
de:10:7a:ed:e1:67:10:78:0a:2d:a2:b2:df:c8:87:
a9:ef:8c:35:2e:97:b3:3f:1b:20:b2:94:4e:2f:68:
c3:d6:91:72:ef:8d:db:e4:3e:83:2a:82:c0:09:6d:
9f:e9:ab:9c:b9:0e:bc:af:e1:9e:72:73:62:6e:5b:
7d:86:54:08:4b:31:10:a5:f2:12:27:23:69:bc:2a:
db:bf:d9:fc:54:d5:6e:01:cf:e3:24:a9:2f:a3:44:
7c:1a:9a:dd:de:4d:c5:86:9c:98:e8:c3:ed:2f:69:
55:33:b5:45:4d:48:70:92:f5:96:53:82:59:31:04:
ec:ac:47:d8:1b:80:5a:9e:54:c6:f5:d8:1a:4e:df:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:66:14:A0:75:33:21:D6:53:1D:CF:10:30:98:F1:EA:5C:D6:26:E3
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:df:07:dd:47:12:cb:95:38:f7:78:e8:34:52:47:23:0b:90:
54:80:32:78:85:3b:5a:8e:9c:a6:d2:af:bd:7b:ec:b3:55:b0:
01:d1:08:22:17:df:d7:2b:d1:86:f7:27:49:4c:c9:e0:ab:6d:
71:ab:b3:f2:e7:2e:bf:3f:a9:1a:e5:d4:d6:1c:87:d4:73:ad:
bf:ce:a2:ec:31:75:ff:7c:9e:79:96:69:57:8f:33:98:6b:4d:
d8:97:83:fa:9e:cf:b1:73:ca:93:33:f2:f9:d8:11:c5:a4:19:
13:75:3c:a0:8e:a0:41:b7:a3:ea:ab:e0:d3:30:87:9e:8a:8d:
2d:2e:6c:08:51:b6:b8:7a:40:fd:a6:68:ab:2c:8a:40:dc:69:
53:a8:40:61:de:77:d9:f5:ba:4f:52:66:d0:7f:1e:b2:0f:df:
b4:f8:5d:bc:7c:17:93:e1:ff:fd:f7:c1:a2:0d:a8:d5:33:29:
de:0b:8a:76:dd:3d:cf:82:5a:5c:ff:ed:00:cb:3c:86:7a:72:
14:02:76:43:30:98:c2:f3:d9:a9:1a:94:a9:ce:08:c2:70:6c:
3d:1e:a9:53:38:28:ea:eb:03:70:b7:f8:9d:6e:0c:94:1a:d1:
ac:cf:10:51:8b:e8:af:3d:b5:6d:91:53:6d:83:26:8e:08:2d:
70:82:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:37 2025 by rpki-client