Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
File: ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft (raw, json)
Hash identifier: E1Nr6NpLOo8zzaX3TpImRRIYXRNQb8tEDvyfXKJCQDQ=
Subject key identifier: 12:C2:09:2E:8F:B7:CE:8C:E4:9C:05:56:D1:F7:BF:7C:10:22:C6:8E
Authority key identifier: 72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
Certificate issuer: /CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Certificate serial: 01989E5E6F600E5B02EAC2AEBC90E00E0442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
Manifest number: 162E
Signing time: Tue 12 Aug 2025 13:00:45 +0000
Manifest this update: Tue 12 Aug 2025 13:00:45 +0000
Manifest next update: Wed 13 Aug 2025 13:00:45 +0000
Files and hashes: 1: C324i-QiLStBQtj8SlSM_WsRhgA.roa (hash: 57MQFbrSaZ/38tAVb1G6ejMsXoqYvy5V/+YD5WOhbAY=)
2: ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl (hash: 01PkR5M1khpS4+4saYvgjBUV8QzGeiDyWWKtfq5ZM1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:6f:60:0e:5b:02:ea:c2:ae:bc:90:e0:0e:04:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Validity
Not Before: Aug 12 13:00:45 2025 GMT
Not After : Aug 13 13:00:45 2025 GMT
Subject: CN=12c2092e8fb7ce8ce49c0556d1f7bf7c1022c68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:b1:1d:ab:a9:0d:a8:aa:4a:bc:ad:53:21:
0d:22:d9:ce:99:34:d9:2c:99:93:4a:5c:85:73:e6:
3a:fa:de:36:75:38:01:44:d6:7b:ce:e6:9b:71:27:
b9:f6:3b:38:15:b3:70:1d:a6:97:8f:e4:5d:00:11:
a7:cc:74:d6:b5:63:25:bd:4e:84:1a:39:05:ac:3d:
b8:fc:17:32:c6:06:bb:b3:36:ea:11:fb:97:91:fe:
4e:42:fe:5d:41:ed:28:17:0e:82:0a:60:f0:57:7f:
5c:d7:fe:1d:85:79:6a:a0:ae:0a:f5:1b:09:ba:46:
9a:bd:23:f0:3f:95:07:cd:20:2c:65:72:98:0b:51:
41:63:c4:0b:7b:ea:af:21:1e:56:e2:f6:e8:a8:2d:
75:6b:6f:65:e6:f3:37:d5:82:92:87:1e:da:3e:5a:
f2:ba:d5:ff:ec:50:46:a1:27:c3:1f:0d:80:37:c4:
35:3d:19:fa:d8:81:55:b8:42:8b:1a:3b:c2:ac:79:
ae:2a:02:d1:79:a4:15:c7:d3:90:3a:0c:cd:1b:27:
9b:bd:2c:f5:d7:13:83:32:b5:76:8d:dc:e4:2e:91:
ce:ca:46:66:22:38:2f:41:26:f8:04:ae:21:07:b2:
b6:1c:bf:78:58:db:5c:b0:a5:20:bc:73:8c:b7:b4:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:09:2E:8F:B7:CE:8C:E4:9C:05:56:D1:F7:BF:7C:10:22:C6:8E
X509v3 Authority Key Identifier:
keyid:72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b5:2f:f9:06:45:fe:7b:9c:1f:27:08:44:84:a9:22:40:78:
bd:16:c5:32:e4:96:bd:75:0a:db:ed:f2:e3:f7:13:de:5c:93:
48:a9:c7:1c:7a:26:5a:c2:a9:81:23:7d:1f:c3:f1:03:a2:f7:
43:9c:9c:b0:81:90:d2:f1:f5:86:01:68:f8:ef:80:b3:86:b8:
31:6a:fc:2a:66:77:45:80:6d:cf:ca:6b:51:13:2d:e5:a6:85:
30:6e:d7:09:59:5e:70:2b:8c:23:51:cb:7d:30:99:41:b1:8c:
5c:c3:4b:3d:d6:46:12:dd:62:f3:3a:ce:69:f8:b9:05:ee:02:
f6:2c:cd:c7:22:76:47:2a:77:5e:2f:47:c0:e7:3b:51:f5:d4:
e7:92:e0:95:74:0c:6c:4a:fc:23:55:06:5b:15:e3:3e:36:50:
b5:61:cc:e6:63:cc:0c:d1:2a:09:40:04:60:82:17:46:b4:c3:
54:65:be:75:71:ad:84:55:10:08:98:1c:dd:fa:c4:59:59:62:
a6:00:65:f2:56:ea:56:45:b7:d3:66:c0:a0:5d:3b:6c:60:99:
39:70:d9:c5:4c:70:c5:8e:dd:5e:93:29:d4:a4:44:4b:08:af:
85:6b:e1:fc:8f:6f:9a:d8:3d:35:82:c7:41:60:ae:a5:47:88:
a9:e8:4a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:34:50 2025 by rpki-client