Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: kgnnpuqzLdy6d43skRaYyD8t882503kMWfFGuIy0rhg=
Subject key identifier: 05:A5:BF:44:C7:05:20:72:ED:69:62:F5:5B:B8:15:61:52:CE:66:B9
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 019A4D3D3B5A30C825727FA84C3FA646DED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 03F0
Signing time: Tue 04 Nov 2025 05:00:49 +0000
Manifest this update: Tue 04 Nov 2025 05:00:49 +0000
Manifest next update: Wed 05 Nov 2025 05:00:49 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: rGFUv+DLftNt9kcgIkunN1Mf0dG8EJ4YpxDYbLtN6FM=)
2: kMy_Ytqu-62SnckodYKnIddoAV4.roa (hash: DNh5a1DbxWEI9P2LYvBxRTY+TTerG2Ce0TBwgUaWhng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3b:5a:30:c8:25:72:7f:a8:4c:3f:a6:46:de:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Nov 4 05:00:49 2025 GMT
Not After : Nov 5 05:00:49 2025 GMT
Subject: CN=05a5bf44c7052072ed6962f55bb8156152ce66b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:e1:fc:2b:d5:69:c1:ac:a5:da:55:b0:30:
f5:f8:90:f4:30:db:78:b3:f6:7c:c7:1f:2a:29:0b:
4c:23:70:dd:23:b9:d2:20:07:5f:f2:9f:c5:00:86:
5d:e6:3c:13:d6:73:35:48:1e:39:39:0d:cc:b5:6e:
5e:20:89:05:d1:e5:56:23:a2:fb:27:41:df:d1:9d:
67:d6:b6:9b:fc:96:9e:bf:b9:ef:7a:82:12:53:36:
28:15:3f:75:50:13:e5:9a:10:bf:f8:e4:15:a4:e5:
37:a7:ad:df:24:a2:8f:00:ef:52:60:96:6a:1f:5d:
34:14:c6:c2:98:d5:c3:8b:91:ca:fa:26:89:18:c5:
75:8f:86:b2:18:05:3b:99:04:e8:e1:ca:4f:05:e9:
b7:46:63:5c:8e:dd:00:40:65:0e:d7:75:dd:29:e8:
8c:ae:87:cc:70:3a:79:f1:7f:79:1e:aa:91:df:d2:
99:08:ef:26:a2:8b:b6:a1:79:84:6e:10:fe:86:c3:
4a:c6:1b:4a:e6:eb:10:83:9c:f9:17:2e:63:fa:fa:
82:cf:db:9d:34:63:a3:e3:f0:e2:c2:b0:9e:23:06:
82:06:08:3a:3f:13:08:8b:01:59:30:c5:ec:48:4c:
76:9f:49:a3:93:51:ad:c2:c9:66:d4:3b:ee:f7:7d:
a0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A5:BF:44:C7:05:20:72:ED:69:62:F5:5B:B8:15:61:52:CE:66:B9
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9b:a2:b0:91:9a:6f:eb:37:b2:55:27:2f:80:14:cc:e3:68:
c2:fd:36:c2:c2:2b:c8:b3:c5:9c:a8:71:38:78:7e:a3:e0:46:
88:89:37:3c:dc:9b:75:a0:2e:01:3b:ac:0b:1b:48:14:f0:7d:
01:a3:8a:50:1a:75:9a:b3:39:a1:56:91:03:22:51:61:af:30:
b4:2e:aa:9b:e1:90:15:3f:da:5d:75:9c:53:d3:7f:42:d6:59:
28:ac:b1:d8:f9:10:67:b9:44:37:40:86:54:20:74:fc:56:d6:
4a:a3:a8:af:f5:c6:46:8f:d9:92:70:1f:35:0c:e5:a3:c0:77:
11:8d:99:7c:51:bc:df:cf:cb:fb:9f:75:19:e0:38:59:58:0a:
16:fc:d6:08:9a:a6:16:df:3e:6f:f0:4f:32:d8:05:4e:d2:88:
4d:31:fd:96:09:6e:18:12:35:4c:09:62:e2:dd:6f:d7:32:87:
ec:ef:eb:1f:7a:f0:c9:f4:6e:db:39:de:06:b2:d1:4b:7d:82:
75:a3:54:f2:dd:2b:a8:b1:60:fb:2c:21:6c:a4:19:3e:bf:11:
e0:1b:c1:37:61:ba:3a:08:9d:07:77:46:b6:ab:35:22:90:93:
7b:f9:e6:5d:37:3c:ab:c1:6a:8e:c4:66:58:4b:97:cb:de:02:
24:81:73:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:57 2025 by rpki-client