Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
File: ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft (raw, json)
Hash identifier: qPEbWXC8nQYT3rQS08LThGPeE5/4A2re0Zx2z2PUsoU=
Subject key identifier: FD:66:44:C6:D7:F0:E8:B0:D3:7F:B9:95:CC:38:35:28:41:BA:3C:28
Authority key identifier: 72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
Certificate issuer: /CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Certificate serial: 019A50E39C89C39ACC2AF782281AEC6CBEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:25 +0000
Manifest this update: Tue 04 Nov 2025 22:01:25 +0000
Manifest next update: Wed 05 Nov 2025 22:01:25 +0000
Files and hashes: 1: C324i-QiLStBQtj8SlSM_WsRhgA.roa (hash: 57MQFbrSaZ/38tAVb1G6ejMsXoqYvy5V/+YD5WOhbAY=)
2: ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl (hash: stO8Sp/2IJqE7ZHQ5HaZBb0+/4CMgw9iHjvQiexeYzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:9c:89:c3:9a:cc:2a:f7:82:28:1a:ec:6c:be:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Validity
Not Before: Nov 4 22:01:25 2025 GMT
Not After : Nov 5 22:01:25 2025 GMT
Subject: CN=fd6644c6d7f0e8b0d37fb995cc38352841ba3c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:30:54:a6:0e:d8:ea:e5:d3:03:25:ae:bc:
e6:7b:fb:14:51:9c:76:d6:6b:03:08:f7:ad:dc:cd:
58:31:41:d3:6a:61:a8:d7:51:aa:f1:1d:f2:2a:93:
9c:7c:42:3c:b0:e8:30:c9:2a:01:70:e7:aa:88:b9:
0c:12:14:d1:45:6b:92:79:25:76:41:eb:a2:33:05:
3a:2e:93:b3:46:20:91:cf:77:ec:87:c4:6b:97:ff:
ec:9f:f8:2d:24:0a:a0:33:0d:c9:9d:e7:5a:86:47:
a5:ec:3c:28:88:75:ef:fe:11:c8:79:22:d3:ed:2f:
8b:e2:59:b0:db:ce:23:88:50:d3:d5:f1:5d:1f:40:
d4:fd:5a:3c:0b:c1:86:6a:7d:94:fb:98:c5:0a:4c:
50:89:8e:64:e9:64:cc:73:5b:36:25:66:3c:36:4f:
f0:87:42:ac:99:9c:b0:fd:27:c9:62:2d:2f:e1:4b:
2a:5d:a7:d4:2b:2f:39:32:05:71:a9:01:a4:54:24:
9a:9f:9c:17:76:bc:b1:e8:43:42:75:ca:07:5b:3f:
90:72:ca:09:77:d6:1b:88:2c:a6:c5:fa:92:10:6b:
1e:b8:6e:a5:6c:bf:03:36:28:4d:12:1b:71:3f:03:
98:d3:97:64:12:21:40:fe:1c:97:93:40:e9:71:24:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:66:44:C6:D7:F0:E8:B0:D3:7F:B9:95:CC:38:35:28:41:BA:3C:28
X509v3 Authority Key Identifier:
keyid:72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5e:a6:c6:55:fa:f5:7f:3d:e4:67:a0:a3:13:da:d2:97:68:
15:ee:d5:d8:a8:5b:5f:a4:50:3d:36:b7:ac:89:c1:bc:fa:14:
5e:ca:4a:dc:bb:3b:62:e0:68:a5:70:3a:f8:5a:de:cc:42:67:
27:a5:08:d8:df:c0:36:bf:0d:d1:aa:d2:f9:f8:db:f6:40:7b:
27:75:aa:20:76:52:7e:fe:b3:c0:6d:c8:ca:a9:cc:ab:f1:f7:
6b:9d:b6:dc:09:86:ef:57:c5:63:a7:29:db:1c:f3:bb:9f:cd:
f8:51:21:e8:6e:5b:b3:14:be:e1:05:ec:d2:fd:28:ee:06:41:
13:d1:1c:46:a3:38:f9:5c:1e:09:43:d6:0d:87:7f:83:22:4f:
81:08:0d:f4:f0:ce:ab:dd:30:93:bf:7e:32:0b:cf:37:1d:78:
5e:3b:03:25:2c:0f:10:08:fe:72:2f:87:12:e6:9d:e0:70:73:
a1:c4:b2:44:42:91:e9:58:8a:a8:84:d7:2a:18:36:aa:fd:e0:
fe:72:fa:66:31:32:6c:b6:fe:e0:0a:03:33:ab:5a:79:72:91:
0e:50:cb:94:6b:d9:0e:49:e7:01:ba:a7:66:ad:73:0f:f1:7d:
55:94:a5:7a:38:d6:a9:e5:77:b1:72:f7:af:85:ac:05:5c:d8:
fa:90:73:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:26 2025 by rpki-client