Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: 4FMFFuyKEEh6FehbGxGyENuthyZpBSUJaZxCxmeALTo=
Subject key identifier: 50:07:B4:F7:5E:EB:F3:1C:C4:58:FE:9F:22:ED:5E:2A:EB:60:10:41
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 019897496B7A8DE49AEC1EA342BEB32E3FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 04:00:27 +0000
Manifest this update: Mon 11 Aug 2025 04:00:27 +0000
Manifest next update: Tue 12 Aug 2025 04:00:27 +0000
Files and hashes: 1: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: tQgMm+4OZ007ogjZB2UaBQnlr9lUjSsao3WmhYUkitw=)
2: tICvfkE-wd7ljGY6sghDtS75C50.roa (hash: EofEa7cxTHv8xJhHBChQPwYV0i7JZnqjIowIrpKVJDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:6b:7a:8d:e4:9a:ec:1e:a3:42:be:b3:2e:3f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Aug 11 04:00:27 2025 GMT
Not After : Aug 12 04:00:27 2025 GMT
Subject: CN=5007b4f75eebf31cc458fe9f22ed5e2aeb601041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f2:48:39:fa:05:f1:62:86:5d:55:23:f7:1e:
b3:34:31:b5:29:00:2c:93:1d:2d:01:e1:e0:cd:c7:
9a:0b:b1:83:ea:b2:08:e0:1b:bc:a4:35:51:aa:96:
a7:af:ee:81:08:23:86:3f:dd:56:f5:e2:8e:c3:c1:
1d:a8:bb:2a:ee:18:4e:1b:ec:fa:ed:84:29:8b:f8:
ec:1e:6f:21:6b:8c:91:e4:6f:7c:7d:a1:9b:8a:fc:
18:11:d6:5c:d7:64:0d:ce:34:f0:cd:e1:7f:e1:fd:
3a:f1:f2:2c:a7:a6:43:cc:d7:23:ce:3b:15:0d:d2:
2e:6c:e7:60:3d:f3:4c:a1:a7:76:2f:2e:ec:61:d3:
e7:32:cf:e5:4f:f2:cb:91:13:7f:d7:7a:98:fe:98:
28:fa:e1:b2:07:2b:5e:ab:ac:32:22:84:dc:c9:35:
eb:58:0e:08:71:14:1b:97:32:65:f2:b7:9b:12:63:
1c:73:64:6d:be:a7:83:0e:bf:14:c7:50:5c:88:12:
e3:38:c7:67:33:5c:31:00:ae:b3:80:05:d0:86:31:
2b:a9:1a:f8:a7:78:e5:b9:66:56:2b:05:f5:9d:33:
0c:c9:02:1f:77:29:16:5a:b6:1f:fd:c7:cd:55:50:
79:8c:4d:b5:9d:22:d4:ed:40:26:f2:ad:e2:34:57:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:07:B4:F7:5E:EB:F3:1C:C4:58:FE:9F:22:ED:5E:2A:EB:60:10:41
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:db:96:63:16:73:a5:eb:d1:c5:bb:34:b1:c5:ab:1a:9c:98:
ff:da:ea:44:2b:1d:24:7c:5c:d4:8a:9a:fd:47:96:7f:2c:a6:
76:e4:db:64:7d:0d:37:d7:fe:cf:eb:8d:3d:a1:8b:4c:53:68:
6f:98:00:73:aa:88:71:54:72:fc:4f:d2:a2:20:36:2c:e6:29:
4e:8f:13:05:97:cc:e8:75:06:11:38:78:a5:47:20:91:6d:14:
b0:3c:15:d9:a9:c0:b4:96:75:e3:89:f5:7c:96:e5:e7:de:e9:
23:b0:e2:1c:11:cf:9f:20:be:d6:8d:d7:15:38:a7:4c:c0:7c:
2f:2b:51:84:21:51:ce:d2:3e:98:e9:08:78:55:44:b3:37:aa:
d2:fd:19:e4:68:cb:84:17:6a:3a:7e:79:36:f8:40:2b:d5:ee:
22:28:82:06:9a:31:63:34:1a:f0:b0:dd:ce:07:e0:b1:54:1d:
f3:27:4d:a8:e6:e7:0f:73:64:78:7f:67:37:d3:6a:fb:41:1d:
1b:5f:6b:9e:d4:ff:6e:83:54:01:58:cd:ac:e3:25:5e:a7:52:
26:f7:36:6a:eb:0f:83:d2:80:07:42:eb:e9:a5:96:1c:bc:3c:
c2:cc:26:50:39:b3:45:3e:a7:0e:16:eb:fb:a0:30:27:eb:2c:
0e:3b:f5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:30:43 2025 by rpki-client