Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: QGybPQ8obyk4BxpYmVDitOQsqf+7GnsW/I+ogGoXyhc=
Subject key identifier: 28:15:36:07:5D:E2:78:29:3F:AD:5D:CD:A7:D8:B5:D2:97:E0:18:BD
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 019874194285AF67748192F59238A08B3032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 05BD
Signing time: Mon 04 Aug 2025 08:01:09 +0000
Manifest this update: Mon 04 Aug 2025 08:01:09 +0000
Manifest next update: Tue 05 Aug 2025 08:01:09 +0000
Files and hashes: 1: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: eaVdqakh6PyTO/rYFdmD7WG0XISdbElGTyVnw0odhEw=)
2: efoDT2af1r3VIxCXKIZiUqYjb70.roa (hash: Satp0B+ZSfcMrrpGb8DTBT0YLETw5Fxx+fyID/mnlcA=)
3: omka6JZ3cxuqRg8okuBPziVBWRs.roa (hash: 5reM5Q1cDG1s+QskdXUc/zeFl29KsaBLiyNK/rBISK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:42:85:af:67:74:81:92:f5:92:38:a0:8b:30:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Aug 4 08:01:09 2025 GMT
Not After : Aug 5 08:01:09 2025 GMT
Subject: CN=281536075de278293fad5dcda7d8b5d297e018bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:1c:84:93:87:86:07:e3:ac:dc:7a:23:ee:
3e:02:eb:d5:b1:11:bf:46:54:43:24:02:73:68:37:
8a:f7:09:ef:bf:cc:a5:45:8d:34:9b:6a:b9:81:69:
0d:dd:72:76:b0:88:7e:78:c0:f8:2a:ef:6e:66:c7:
36:df:02:1f:dd:1e:78:54:07:3b:66:39:57:64:55:
7f:24:0b:a7:0a:43:56:6f:dc:e0:97:07:05:ec:76:
17:00:d0:ca:30:52:23:76:73:3d:5b:d3:6e:91:fb:
c0:f2:2d:77:2b:a5:a4:db:cf:68:69:ca:b3:12:da:
9f:d9:a6:02:45:27:fe:1e:a8:a1:fa:6a:40:7f:8b:
bf:b9:a7:91:b0:ce:d4:b4:09:50:05:b6:7a:dc:af:
89:02:40:25:66:bd:b2:58:fb:5a:3e:c4:73:a0:ed:
e9:8e:de:d3:f4:c2:f4:d9:53:6b:51:6f:8a:d5:d0:
6d:2c:d4:df:b6:80:c9:4f:71:4d:8c:c7:ae:2c:1e:
39:0f:41:f3:7b:76:b8:e3:5d:4a:df:48:8a:d9:7c:
43:fd:54:3b:2a:c2:56:4a:f7:39:8c:2a:2e:62:2b:
02:9b:4b:f8:41:27:de:0b:83:48:82:b0:8c:63:a2:
b3:2b:cb:a8:c6:95:de:7b:66:81:f5:0c:97:d0:33:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:15:36:07:5D:E2:78:29:3F:AD:5D:CD:A7:D8:B5:D2:97:E0:18:BD
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:84:43:d6:be:0a:e3:6a:eb:51:ca:61:36:1f:e7:cb:2c:61:
e3:fa:75:89:17:77:70:7c:4d:8f:59:d8:67:a1:4c:37:bf:19:
1a:c4:17:ee:90:db:01:a7:4d:8c:9e:72:86:30:6e:8f:fc:bd:
ee:84:c4:f8:d7:8b:16:3a:2c:e1:5c:5c:34:28:c8:00:74:c0:
26:86:c1:69:58:12:d6:e0:1a:d1:a8:e9:22:49:84:5d:ff:f1:
a6:f8:c0:1a:7c:5a:f9:a0:de:7d:fe:b8:a4:1d:af:f8:b5:3a:
83:f3:0f:5b:34:5c:91:26:a9:5e:f8:d3:a9:6a:36:10:d8:2c:
a8:a4:77:5f:1f:4b:23:ed:62:c9:cf:fd:27:85:ba:97:c9:e5:
d3:70:75:41:12:ac:fc:63:19:af:82:1c:84:37:6d:e7:32:13:
08:1b:23:a0:e5:e3:34:a1:10:a0:07:c3:3e:74:c0:ca:ba:14:
df:cb:53:d6:fa:45:f1:f9:0a:7e:37:8b:46:2b:e2:84:2a:a7:
2a:5c:34:e8:40:3b:d4:43:da:69:d7:2f:f8:4e:52:c4:6e:6e:
37:0d:9d:a0:40:c7:1f:67:6c:6b:e9:12:13:79:01:d6:69:42:
a9:27:92:63:b3:91:79:26:6c:d4:5f:e8:4c:fa:fb:2f:5b:59:
30:6b:fb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:36 2025 by rpki-client