Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: khhrYR8VSRyUUoHZ8U1tVFhxVfN0HpfVoul2mRFINWA=
Subject key identifier: 9A:F2:D8:DE:B4:84:28:F2:DF:04:13:A9:42:8F:70:DC:D6:89:B4:41
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 01988356127698737891F81966E847A6F318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1622
Signing time: Thu 07 Aug 2025 07:01:52 +0000
Manifest this update: Thu 07 Aug 2025 07:01:52 +0000
Manifest next update: Fri 08 Aug 2025 07:01:52 +0000
Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: yotY8A3OBsxUNozEnsVN/l9OyXQDcRpihHvdjpQKnLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:12:76:98:73:78:91:f8:19:66:e8:47:a6:f3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Aug 7 07:01:52 2025 GMT
Not After : Aug 8 07:01:52 2025 GMT
Subject: CN=9af2d8deb48428f2df0413a9428f70dcd689b441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:a0:b3:d2:13:5d:a5:92:cb:f7:14:10:fe:
90:ff:6d:c6:c4:53:3a:5d:d8:3e:fe:d7:c3:30:12:
19:88:2f:41:b4:44:a8:d1:e6:5e:3b:8b:35:08:51:
de:38:4a:e5:c2:7c:04:5a:6e:26:98:e0:bd:df:04:
e9:a8:fc:3b:65:f7:30:47:43:c5:5d:f2:f2:17:3b:
3f:b5:3a:d4:df:01:b2:88:89:44:91:16:a6:21:a9:
0d:4a:b2:78:bf:d7:8a:07:a7:e4:fe:fe:91:31:80:
42:6d:1e:6b:c1:fa:83:f6:c0:c5:5e:f2:ba:86:9f:
73:21:a9:9b:c7:ec:78:5e:16:8d:7e:b4:91:2e:8e:
c7:15:10:03:2e:9c:fc:17:f7:ca:c0:9a:e6:6c:61:
df:fa:a1:f8:27:ec:3f:1e:73:f3:dd:d6:1b:07:a3:
22:76:15:61:fb:f6:2b:cf:a0:4b:27:65:ad:ac:8c:
0b:cb:d6:53:e8:c9:b1:f7:2e:d4:74:dc:f6:4d:9b:
76:99:5b:ad:99:4f:74:82:80:69:7d:c5:8e:e3:80:
76:bc:b0:6d:9e:c9:f3:ad:04:d5:57:c2:71:d0:69:
c2:44:c3:7e:0e:e8:73:f6:a3:01:45:8c:44:72:d3:
d7:91:c3:e8:fb:40:22:da:d3:c3:af:2e:a9:c4:b3:
af:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F2:D8:DE:B4:84:28:F2:DF:04:13:A9:42:8F:70:DC:D6:89:B4:41
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:88:17:57:58:f6:8c:c5:00:1e:13:df:24:e4:b6:0a:81:5d:
96:7b:bb:60:04:a2:fa:a7:3b:1b:b5:88:b9:40:7e:19:8e:ec:
c8:15:b0:c8:51:7a:85:d0:ae:c1:18:2f:30:c4:81:8b:0f:c0:
9b:70:9b:c9:a6:b4:d3:b7:48:9f:f4:4b:2d:9a:0f:0b:df:be:
d2:7f:70:1a:6a:97:47:f1:d4:09:a9:62:26:2b:63:a8:fb:7d:
aa:4b:32:0e:c3:b4:1e:ac:60:ff:70:55:f2:f9:46:f8:92:06:
22:9b:ad:c6:c0:db:76:86:70:27:e7:b4:1a:14:06:56:59:a5:
bd:74:69:9f:2e:c2:99:44:99:b5:86:89:66:ef:b1:d1:99:88:
06:b6:8a:d1:15:0c:16:9f:25:86:4a:e5:c8:07:12:e4:fd:3d:
a8:1f:35:bb:4e:3b:32:8f:85:ce:ee:07:cd:f8:d7:2f:45:47:
d9:c7:3b:7f:d7:12:c4:2b:1e:38:67:4e:92:97:ed:2b:fa:93:
47:b0:66:a5:0a:ff:7d:5e:9a:a1:3c:78:9a:9c:e8:9a:de:89:
c3:4c:88:a3:5d:6b:98:49:a8:fd:c9:b2:fd:79:28:18:f8:59:
fb:6d:eb:29:14:f0:b1:cb:ab:ed:5b:18:77:b1:96:b8:0d:35:
72:ea:35:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:33:09 2025 by rpki-client