Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: rwjyUhXvNQjXuodeMsAbP+uv3kFwK4mbsluAxmP2AkA=
Subject key identifier: 3A:5F:1E:EA:FA:BC:39:56:DF:7A:33:9B:5F:83:AE:DF:DB:58:D5:29
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 019A50E2DF8737D6B231D76B996BF7EE895F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 22:00:36 +0000
Manifest this update: Tue 04 Nov 2025 22:00:36 +0000
Manifest next update: Wed 05 Nov 2025 22:00:36 +0000
Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: 8lBK1rYTXqFnqpSEiWqe6kVT611a/FsNovTfZikX6i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:df:87:37:d6:b2:31:d7:6b:99:6b:f7:ee:89:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Nov 4 22:00:36 2025 GMT
Not After : Nov 5 22:00:36 2025 GMT
Subject: CN=3a5f1eeafabc3956df7a339b5f83aedfdb58d529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:7e:77:5b:3c:b8:f9:cd:bb:ec:7f:18:fb:
54:78:0e:84:27:0d:14:b1:bc:df:59:0a:e6:4c:d0:
4c:fa:3d:a9:7d:43:f9:6e:33:e2:4f:3e:8a:03:d9:
7d:c4:18:9b:6f:c2:31:0b:0f:b7:8b:98:7c:04:7b:
ab:a1:3a:0d:55:e7:b0:6d:71:64:4c:2a:4c:07:43:
58:96:b6:0c:d7:48:7a:1a:e8:72:c3:90:ca:14:ea:
d0:99:a9:f3:80:8e:16:12:78:6d:bd:10:95:02:d6:
29:ed:02:4f:77:a8:01:4c:43:f8:9d:f8:4e:44:c2:
00:34:08:a3:2c:4e:32:b6:c1:cc:87:bc:04:2b:6b:
8e:05:45:d9:99:a5:f5:53:0d:8e:f8:8a:c3:ee:d1:
9c:6e:25:a4:95:d1:d7:35:ba:df:d3:9d:50:71:79:
0a:0f:90:52:60:76:8d:78:9f:69:ea:e6:1e:ba:6a:
0c:5e:92:12:cc:e5:2c:2a:e7:01:15:87:7e:4f:07:
a3:5f:2c:49:19:f2:4d:21:c1:d5:16:47:78:85:84:
dd:ab:9c:f9:7b:0e:ac:89:29:ff:7a:60:24:27:53:
08:67:28:3a:32:42:5a:9c:6a:52:b2:53:26:4e:2a:
df:c4:87:a2:b7:aa:0d:5a:a3:d5:58:b5:18:e8:15:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5F:1E:EA:FA:BC:39:56:DF:7A:33:9B:5F:83:AE:DF:DB:58:D5:29
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2c:51:82:bc:e4:10:fd:c1:c9:b6:08:34:ad:70:e8:80:63:
2f:d2:9d:f9:00:c7:c5:8f:92:4e:4a:38:e1:9f:49:8b:86:89:
14:ae:a2:6f:f1:1e:33:6f:ea:d5:b8:0c:75:ff:af:b2:dd:d3:
23:a3:54:82:4f:70:a6:9a:a6:70:66:cc:35:e2:c6:4e:86:44:
a7:5f:4a:0d:95:40:ab:e3:9a:17:4b:26:11:75:c1:80:ce:46:
e7:8d:30:b0:92:ce:ec:62:ca:a8:82:0f:a0:92:a7:15:1e:41:
a4:3d:d8:a6:78:f9:e8:28:ae:b7:f9:cd:09:6f:a3:d7:8a:7f:
05:53:bc:9f:93:b3:aa:ee:35:29:33:77:09:1f:50:73:99:92:
3c:fa:85:17:b9:a2:ba:02:84:7b:53:23:dd:68:0f:e6:75:02:
23:99:a2:bf:98:a0:36:17:59:36:d7:a1:a1:d8:46:55:25:71:
8f:e6:ae:a0:dc:d3:fb:70:eb:a8:e0:31:f2:e1:0a:eb:56:c8:
17:c1:79:a3:cb:45:4b:08:4f:9c:4a:f7:67:55:37:0b:0c:fd:
47:e4:16:68:a9:a3:31:94:5d:78:73:43:f5:db:21:f1:b2:92:
f5:a4:fe:dc:45:ca:6c:8a:a6:1c:2d:e0:f9:b8:1b:a9:af:48:
fe:a1:39:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:51:31 2025 by rpki-client