Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: eSxuaanvR3Trsex6TnQXsYYcZMIVBxIMvTUpwbqGJ0M=
Subject key identifier: 31:CE:92:1C:F4:6F:FF:39:79:FF:C9:0E:27:B3:38:89:5B:85:10:C2
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 019A4DAB073BE4E850BEF42CB456F8E66104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:45 +0000
Manifest this update: Tue 04 Nov 2025 07:00:45 +0000
Manifest next update: Wed 05 Nov 2025 07:00:45 +0000
Files and hashes: 1: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: lzkZJFWqDVT33O1hpwFIJDjjtilLXFGQgvjwonky0c4=)
2: tICvfkE-wd7ljGY6sghDtS75C50.roa (hash: EofEa7cxTHv8xJhHBChQPwYV0i7JZnqjIowIrpKVJDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:07:3b:e4:e8:50:be:f4:2c:b4:56:f8:e6:61:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Nov 4 07:00:45 2025 GMT
Not After : Nov 5 07:00:45 2025 GMT
Subject: CN=31ce921cf46fff3979ffc90e27b338895b8510c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:b1:c2:66:76:fc:c2:cf:cf:a1:79:f9:e6:
a2:af:e3:26:bf:58:60:97:ba:fe:54:be:95:a0:6e:
2d:46:89:46:68:22:43:f4:82:20:69:14:ab:c6:f1:
14:24:ba:f0:69:b3:ad:0a:a5:b8:f1:8d:0b:b9:1b:
fb:ba:c4:ff:53:18:43:e5:a6:60:0c:6f:10:f9:48:
ce:33:ef:0c:45:06:ab:7f:53:71:56:d5:e2:53:3f:
e2:73:5e:fc:5a:29:87:2d:9f:79:2d:49:6a:fc:e0:
4d:b5:c4:d2:ec:0b:1c:35:b2:a4:b6:2e:08:8f:f0:
16:6c:71:08:7d:b4:8b:4f:5e:af:86:a6:ed:88:55:
ac:72:d7:df:26:d7:6e:d3:2a:59:75:14:8c:71:d6:
6b:3e:35:d2:3c:95:ec:24:df:19:ff:69:80:0c:41:
55:c1:31:7b:f9:55:fe:33:f3:3d:97:84:93:cc:c4:
6c:64:25:38:94:84:5c:25:3f:ef:e2:9e:cb:67:87:
e9:7b:b4:b8:d0:03:fd:bd:22:8d:33:b7:39:56:c3:
44:1d:1c:4a:ac:24:62:2b:eb:df:ae:3c:a6:7f:10:
e7:b5:78:2d:4a:b7:17:cf:2e:5d:53:eb:1e:a6:d1:
d8:08:c1:2e:a8:62:5e:85:f8:d3:32:68:dc:84:94:
99:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CE:92:1C:F4:6F:FF:39:79:FF:C9:0E:27:B3:38:89:5B:85:10:C2
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:98:ac:0f:b7:b9:c6:d0:5b:fd:7d:75:4e:bb:d3:5a:98:15:
53:6f:f5:0e:5b:a2:26:22:81:52:29:4e:1e:f2:a7:48:36:e2:
23:d2:3a:9c:04:8c:4e:65:d8:98:70:38:23:c5:35:d7:56:c6:
22:47:04:35:1c:9f:ae:50:21:8b:e9:72:29:07:dc:3d:60:33:
f7:ed:f3:3f:c0:3f:86:29:57:e8:1c:b8:f9:43:59:d0:a2:2f:
6d:dc:87:fe:0a:d0:c0:b7:99:58:57:12:05:43:82:01:a8:41:
ea:68:fb:a8:f2:18:31:83:c9:d3:16:98:0d:ad:c2:e5:e4:6e:
8e:17:a7:4a:e9:71:81:b4:20:dc:cc:fd:5e:5d:01:53:b7:7a:
2f:d7:d6:32:e1:41:52:ea:5e:e0:95:d7:49:ae:b1:d2:30:4c:
c1:fb:0c:80:a4:12:c4:be:76:ac:1c:c3:8f:2f:0e:fa:d1:ad:
fa:04:c0:b9:0d:15:81:1e:15:c0:bb:a0:c1:fd:49:b5:42:24:
aa:25:9d:8b:be:28:70:04:e9:b4:c0:59:dd:e5:77:de:a4:4c:
75:dd:a1:8c:5c:95:88:3e:bd:57:67:1a:d2:09:8d:52:c7:52:
db:15:cb:47:45:b9:60:e9:8b:88:75:bb:53:79:13:d0:51:ef:
b3:82:eb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:02 2025 by rpki-client