Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: OdWRWx9xshCcrxN9r2faUE5w7HCgwMINRd/WUlM5ZK8=
Subject key identifier: 12:34:C1:70:EA:15:B3:DA:2A:23:A7:EA:02:2D:3F:77:4D:0A:3D:40
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 019894EE109EC35EDF05C698B7EF3C654111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 030C
Signing time: Sun 10 Aug 2025 17:01:26 +0000
Manifest this update: Sun 10 Aug 2025 17:01:26 +0000
Manifest next update: Mon 11 Aug 2025 17:01:26 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: 6hXy6h6VSeXfGaouf+wj4urGqAor35u8r/qhi1kM4nc=)
2: kMy_Ytqu-62SnckodYKnIddoAV4.roa (hash: DNh5a1DbxWEI9P2LYvBxRTY+TTerG2Ce0TBwgUaWhng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ee:10:9e:c3:5e:df:05:c6:98:b7:ef:3c:65:41:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Aug 10 17:01:26 2025 GMT
Not After : Aug 11 17:01:26 2025 GMT
Subject: CN=1234c170ea15b3da2a23a7ea022d3f774d0a3d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:d2:b3:d6:d4:2b:aa:39:d7:16:7b:b6:1b:
71:97:3a:8d:b2:62:79:14:67:59:55:98:20:d0:01:
4e:51:04:1a:06:d5:00:5b:b6:32:0a:67:2b:06:1a:
f9:1d:da:45:91:36:60:fa:b4:88:18:99:31:6c:b6:
ad:25:48:d4:97:1a:d9:0e:4b:24:ec:58:b3:30:e5:
9c:c3:73:84:0a:d4:31:34:6a:26:79:dc:cb:c0:7f:
6b:5f:6c:da:ff:1e:e0:8c:16:5d:04:39:f8:83:2c:
a6:32:09:18:17:4a:d8:45:a6:d5:86:c7:c2:84:bb:
d7:a1:e8:26:28:11:04:45:a6:8b:b5:89:aa:6f:bd:
84:a8:3a:9d:fe:b6:be:a7:0f:a8:d8:00:2c:e2:00:
03:ba:e0:9a:9b:7a:c8:d4:2a:33:99:44:47:0d:bd:
cf:3b:95:f5:18:de:03:be:13:2c:2f:65:d0:df:50:
e7:9a:60:35:be:7f:4e:2e:54:55:39:d4:88:73:eb:
a6:8b:97:4d:98:97:89:4c:26:9f:54:5e:58:10:fb:
98:be:d7:f9:fb:18:88:aa:b7:6c:ca:f6:1a:67:16:
f8:56:1d:16:13:eb:54:ec:8c:ce:24:3b:52:da:9b:
a8:83:08:29:64:66:b4:ea:f1:bd:9f:05:0b:36:b6:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:34:C1:70:EA:15:B3:DA:2A:23:A7:EA:02:2D:3F:77:4D:0A:3D:40
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7b:54:5c:5f:c0:3e:b3:53:d2:ce:56:5f:bc:85:a2:41:c9:
68:a5:f7:85:6d:14:03:6f:fa:77:c3:2b:ba:91:29:28:a3:15:
b1:9a:c6:b6:e7:e8:88:92:ff:96:18:9c:44:13:ba:ec:a9:46:
f2:e2:b0:ac:d0:28:a1:d6:b5:a5:80:71:e7:36:07:97:70:9f:
66:82:de:fc:b8:ef:1d:87:36:de:05:98:68:ff:4c:fd:33:12:
d0:7e:61:c4:1a:bb:f1:9a:9f:c6:36:28:d7:df:b5:6e:1a:cd:
42:72:33:38:9c:3e:e8:46:88:6f:4f:be:8c:9d:31:fd:c4:e7:
d6:f2:30:56:e6:bf:9b:a2:80:dc:ca:e1:75:5d:cb:0f:e2:2e:
ce:10:46:ef:d0:ea:6a:c0:f9:28:1d:4f:3b:e6:00:99:38:db:
66:f9:4e:d3:29:65:3f:ba:05:4b:c4:13:af:e8:6c:e3:f0:63:
ed:d9:83:d3:71:aa:96:bf:09:55:b9:3f:6d:8e:04:7e:fe:97:
79:91:cd:bf:17:f2:fa:bf:9f:42:3e:a7:97:52:ba:e9:e0:e6:
d5:73:4b:90:88:7a:81:8a:39:aa:87:eb:d6:0f:98:c6:10:d3:
49:ff:a4:d6:aa:df:0a:dc:11:c1:b0:91:7c:c9:8a:00:d9:75:
85:61:df:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:16:39 2025 by rpki-client