Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: fTIxdVCPqW7VjriTirhygvCbGrBgBsuj89rvopM5X24=
Subject key identifier: 1F:D1:D3:68:4B:6C:CB:CA:A3:CA:09:47:E0:D9:24:87:5A:DE:D1:59
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 019853447CB07B1A45E520EA64C1BAA97739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 05AC
Signing time: Mon 28 Jul 2025 23:00:53 +0000
Manifest this update: Mon 28 Jul 2025 23:00:53 +0000
Manifest next update: Tue 29 Jul 2025 23:00:53 +0000
Files and hashes: 1: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: woTmELZebCmF2P6895Lo5nCcH61lsZhOVH1lTp8z70M=)
2: efoDT2af1r3VIxCXKIZiUqYjb70.roa (hash: Satp0B+ZSfcMrrpGb8DTBT0YLETw5Fxx+fyID/mnlcA=)
3: omka6JZ3cxuqRg8okuBPziVBWRs.roa (hash: 5reM5Q1cDG1s+QskdXUc/zeFl29KsaBLiyNK/rBISK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:7c:b0:7b:1a:45:e5:20:ea:64:c1:ba:a9:77:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Jul 28 23:00:53 2025 GMT
Not After : Jul 29 23:00:53 2025 GMT
Subject: CN=1fd1d3684b6ccbcaa3ca0947e0d924875aded159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:3c:76:a9:43:24:66:1d:59:69:96:58:3d:
a7:e3:1d:46:d3:1b:9f:73:2b:7c:d7:fc:f8:c4:55:
f8:9d:6f:ae:6b:0c:fb:04:9a:22:a4:b7:fe:8a:1b:
e6:dd:b0:e7:c5:c5:d4:b0:e2:fb:b9:40:54:f4:e8:
26:42:66:94:e3:6e:d5:06:23:05:06:fa:82:bd:5c:
84:ef:24:b2:e3:57:3b:59:ec:32:38:44:d5:84:1b:
69:ed:4b:72:c1:e4:53:dd:3a:4c:c8:61:ae:86:1e:
d1:6c:42:8c:d7:b6:ab:bb:51:9c:36:0d:ac:02:5c:
85:94:f0:b6:2f:de:4d:1a:02:c4:da:15:42:e3:15:
07:20:79:37:8c:ca:35:5a:c5:24:70:eb:48:ca:3f:
13:03:63:9d:3e:03:95:f3:39:2e:30:f5:21:75:71:
a2:2a:0f:8d:d9:6d:e6:a4:a8:03:1e:02:6f:80:6a:
8a:2c:de:41:db:2b:b3:a6:34:0b:da:07:67:4c:6e:
3d:dc:78:fc:d2:be:70:7e:54:f5:7a:ed:c1:1b:a9:
b2:c0:dd:80:d3:eb:05:c5:c5:af:78:26:09:80:3f:
0d:7f:a3:3b:7e:a4:f4:d1:29:1b:62:08:6c:1d:2f:
5f:ba:07:e9:6a:6c:59:9f:4b:38:b9:f7:17:fe:a3:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D1:D3:68:4B:6C:CB:CA:A3:CA:09:47:E0:D9:24:87:5A:DE:D1:59
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d4:c9:8a:54:d0:a8:9e:bc:57:07:ba:2f:3f:35:95:1c:bb:
c2:e0:f9:08:13:21:a7:d7:6b:cf:79:80:36:02:1c:e9:5c:b1:
46:64:10:94:1e:ac:07:8f:18:00:77:50:8b:56:a2:97:f6:50:
51:df:92:53:b7:04:84:c2:10:1b:da:8f:08:e9:2e:fb:be:74:
f4:c3:4b:7f:4c:cb:1b:15:2b:2d:88:91:ed:53:57:9a:dc:3a:
6e:e3:6e:f6:5d:de:b2:6d:fb:b4:b0:6d:d3:e1:f1:41:12:23:
f2:da:fa:b8:bf:42:9b:aa:66:08:c0:15:6b:3f:ee:b0:d0:ff:
ff:a7:8d:22:cf:b6:a5:13:9d:41:11:34:42:8c:3a:13:12:e3:
30:31:18:7b:66:d9:38:0d:f6:7c:2f:ef:e8:e3:fc:ca:ee:67:
93:3d:fb:2f:ce:0b:ec:b5:09:e9:b1:e0:11:be:fe:71:50:d0:
ee:82:08:55:db:42:1f:3c:fa:02:13:62:df:ca:6a:0e:d3:eb:
96:48:fb:5d:48:bd:c7:45:cd:cf:7e:ea:0a:49:5b:9c:b1:53:
43:25:60:33:f0:db:4e:0c:5a:f5:da:37:18:7b:16:34:a2:52:
60:6b:60:fd:24:0a:06:cf:12:35:3a:0e:8f:0a:d9:d2:51:ce:
61:44:46:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:37:57 2025 by rpki-client