Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
File: ck6kGHjukTfnyT1tzTHQIOw_5GE.mft (raw, json)
Hash identifier: pWeiYuXsz4dzRRBItY53tdfi8A9z0U4AhZil0YcmcW0=
Subject key identifier: C7:AB:24:A6:21:CE:69:F9:73:5B:0D:2F:DA:41:4A:F4:48:E0:42:39
Authority key identifier: 72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
Certificate issuer: /CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Certificate serial: 019A23659D68506E5145B3B18D8383FF453B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
Manifest number: 70
Signing time: Mon 27 Oct 2025 02:00:53 +0000
Manifest this update: Mon 27 Oct 2025 02:00:53 +0000
Manifest next update: Tue 28 Oct 2025 02:00:53 +0000
Files and hashes: 1: F1_fRjsO4dTqumxtDsL76pdCtg4.roa (hash: 0XgVQRPzj0PEWIzWBzMdSrLlPSlfOiNqMdtsfXPisjk=)
2: ck6kGHjukTfnyT1tzTHQIOw_5GE.crl (hash: S/Mvw4Wyrf3Z2Mcm++3FW+SlIjsai5pJdIvqYEF1VMA=)
3: mNWhV9Hvaf2yXpnhOSbY3EKbOiU.roa (hash: xbTjMWQPzIJQuFzWCStCIwa5zKEG4q5JVM9fdDMAgcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:9d:68:50:6e:51:45:b3:b1:8d:83:83:ff:45:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724ea41878ee9137e7c93d6dcd31d020ec3fe461
Validity
Not Before: Oct 27 02:00:53 2025 GMT
Not After : Oct 28 02:00:53 2025 GMT
Subject: CN=c7ab24a621ce69f9735b0d2fda414af448e04239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:2f:bc:35:5b:13:40:5f:04:5c:9a:af:14:
11:e4:11:a5:9d:f2:57:ee:8f:81:86:6c:a7:c0:84:
9f:1a:76:92:41:de:23:21:b0:ef:3e:c8:f5:10:f2:
22:bb:c6:35:51:a4:62:76:f3:9a:7c:02:4a:a8:e9:
dd:b6:02:20:1f:a0:9c:7d:a5:06:94:96:48:e3:8f:
83:00:4e:78:3a:64:aa:ce:e5:8d:14:81:9d:3b:a1:
16:01:ac:73:8a:72:5a:b8:f7:86:68:54:4f:ec:69:
ff:89:27:bb:2d:65:00:08:1b:58:3b:b6:59:27:29:
27:49:ed:47:70:39:2d:fa:4c:60:31:07:5a:61:91:
bc:62:ec:53:a1:f5:a9:23:ec:31:c8:c6:a1:8b:4d:
f7:33:4d:71:32:5f:50:e0:1b:42:ef:14:82:62:74:
de:be:05:5c:2c:41:fd:52:38:4b:52:58:52:41:b6:
6b:e2:c4:d3:96:50:ce:93:6f:7e:f6:a8:88:fd:2c:
8a:71:c9:fe:23:49:dd:9f:13:56:6c:14:21:78:03:
60:cb:8c:66:a3:f4:bc:b5:db:28:bb:53:35:b6:cb:
2d:50:ee:06:1a:f5:5e:73:64:ee:6c:58:1b:33:61:
e2:94:73:10:99:e8:33:e8:92:75:6b:8c:73:d7:14:
6a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AB:24:A6:21:CE:69:F9:73:5B:0D:2F:DA:41:4A:F4:48:E0:42:39
X509v3 Authority Key Identifier:
keyid:72:4E:A4:18:78:EE:91:37:E7:C9:3D:6D:CD:31:D0:20:EC:3F:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck6kGHjukTfnyT1tzTHQIOw_5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c254ef-34e6-48cd-9620-8d33b2a2fde8/1/ck6kGHjukTfnyT1tzTHQIOw_5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:51:0e:c5:db:97:eb:d5:7d:24:25:4c:3f:cc:f4:e0:aa:64:
61:48:c7:cc:e6:a4:02:7c:fe:0f:bd:bc:15:fb:24:62:bc:f7:
cf:0a:85:05:71:bf:57:39:fa:a2:ee:2d:bd:c5:03:97:8c:d6:
a6:ab:71:8c:78:3b:95:6a:63:79:a0:6e:81:b2:c3:29:9b:b6:
26:e5:ff:26:68:a4:82:1b:77:bb:13:b0:0b:22:1a:2d:05:fc:
2c:f2:a8:d4:d7:6b:36:61:24:f5:42:cd:db:10:47:e0:ca:8c:
0f:4c:92:ad:27:36:ba:c7:14:a5:25:e2:ab:02:18:5f:27:2b:
f3:d2:25:df:56:34:6d:5c:65:12:b0:42:bc:dd:29:d8:78:80:
bf:fb:34:5e:ce:c5:80:34:64:4b:4c:39:83:dc:f1:dd:8e:03:
a6:7f:86:1f:0b:fd:51:c5:ac:42:e8:9a:34:60:e6:50:f1:0a:
69:d0:0c:d5:ee:b5:3a:93:da:54:c2:a1:79:8c:ce:e8:df:3b:
c5:7e:6d:ef:49:0c:c2:8c:1a:e0:1a:ab:e0:9e:bc:1a:18:30:
4b:dd:de:e0:73:90:3a:26:b5:b7:a2:b1:e6:3c:06:4f:aa:8a:
84:eb:bf:6f:c6:fd:e4:bb:05:c3:42:8e:31:cd:b6:a1:fb:3d:
e0:79:8f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:23:48 2025 by rpki-client