Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: +ylu1Lyl7UwWwfA//7qsZS7T0rRT3ZQtrAykfeMFRQU=
Subject key identifier: 58:49:12:48:42:15:46:B9:BC:8B:7F:B3:F9:70:07:90:23:40:E8:BB
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 019A5119D464A30CC6E8D16940DAB12CE498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 06B4
Signing time: Tue 04 Nov 2025 23:00:38 +0000
Manifest this update: Tue 04 Nov 2025 23:00:38 +0000
Manifest next update: Wed 05 Nov 2025 23:00:38 +0000
Files and hashes: 1: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: gah76ZkUiz/wQSgaw6KdM8OVD9pKiBgC9Abqv4X/+Qw=)
2: efoDT2af1r3VIxCXKIZiUqYjb70.roa (hash: Satp0B+ZSfcMrrpGb8DTBT0YLETw5Fxx+fyID/mnlcA=)
3: omka6JZ3cxuqRg8okuBPziVBWRs.roa (hash: 5reM5Q1cDG1s+QskdXUc/zeFl29KsaBLiyNK/rBISK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:d4:64:a3:0c:c6:e8:d1:69:40:da:b1:2c:e4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Nov 4 23:00:38 2025 GMT
Not After : Nov 5 23:00:38 2025 GMT
Subject: CN=58491248421546b9bc8b7fb3f97007902340e8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:20:a1:f1:79:96:6d:16:42:dc:a9:2c:b1:
f1:86:3a:eb:bd:0d:01:b9:f9:a8:3a:2b:e5:dd:71:
36:11:3d:3b:9c:b5:df:96:1a:c5:ed:08:37:e9:77:
a9:5d:dd:ca:2b:6e:6d:81:65:73:ac:db:80:22:ad:
40:a4:9a:60:1e:3c:0d:6f:2e:7d:e6:0f:b2:da:6e:
7e:5f:76:85:d8:01:45:b8:86:7c:c0:5f:16:5c:2f:
6a:30:82:9d:d7:b8:ab:d6:9b:9e:09:3f:1b:7c:3b:
25:00:16:95:91:b3:56:a7:fa:22:5a:4c:13:fe:fb:
3a:15:5c:9a:9d:f5:12:88:86:b9:f9:59:9c:1d:08:
5a:31:21:24:1c:8b:ef:b8:fe:24:e5:b3:76:48:5a:
08:c8:43:75:7c:00:78:f6:a1:03:88:aa:e5:4f:6b:
c0:17:ce:49:b4:57:11:53:13:9c:dc:6c:3f:2d:53:
62:09:1b:f2:fb:77:83:dd:07:b0:19:e4:db:f1:cd:
de:3f:55:ba:10:6f:17:1e:9f:72:5b:11:79:86:7f:
e2:e5:70:17:c5:cb:34:c1:bc:7f:5a:37:da:59:fe:
48:c4:94:11:3f:a8:e9:b6:0d:d4:62:81:df:71:d4:
a7:ab:53:5a:64:66:87:44:11:43:8b:64:07:bf:3e:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:49:12:48:42:15:46:B9:BC:8B:7F:B3:F9:70:07:90:23:40:E8:BB
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1a:8f:f0:e5:da:47:07:23:71:9b:80:f0:a8:a9:5d:f5:43:
97:41:ab:03:f4:ab:2c:56:26:fb:4d:e3:c9:dd:29:2e:33:2c:
a0:9b:ee:90:9c:0c:9e:d8:40:ff:7f:f8:36:f5:22:34:8b:a4:
19:f6:bd:88:af:a0:a1:90:42:98:82:6c:09:9c:37:e8:d5:4c:
b8:d9:50:95:63:e0:e7:af:99:af:38:4e:44:c8:18:cc:8e:2d:
c4:7d:af:1c:c4:89:b5:8e:87:03:cf:74:75:b7:ed:c5:fc:fc:
14:96:7f:dc:22:ae:cc:1b:ca:32:37:a8:9e:81:10:51:56:fa:
ed:cd:3c:3e:d6:ba:d7:79:e9:a4:53:e7:77:ce:08:4b:9f:cb:
d5:3f:e1:ee:0c:bf:a6:c9:83:56:bf:29:e3:fd:a0:1c:7c:85:
5d:d7:8a:92:10:2d:e8:76:59:2c:39:c5:e3:ed:4f:17:60:29:
dc:4c:47:6f:0c:1b:63:dc:1c:d7:17:ea:8d:77:3f:aa:99:37:
dc:aa:e2:fc:0b:54:e9:5b:81:ea:81:a9:31:ed:56:51:ee:ff:
d2:f9:75:94:b2:08:66:1b:3b:44:dc:87:05:6a:d4:48:5d:6d:
2c:30:1f:21:0a:0a:49:74:cf:86:af:0b:90:d0:eb:02:dd:dd:
79:1c:54:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:34:39 2025 by rpki-client