Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
File: CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft (raw, json)
Hash identifier: 4l4FStN26LOlsUyj91fYecJKquFi+pKG+yTHgf7VfKg=
Subject key identifier: 86:1B:22:3A:45:F0:17:0F:1E:81:0F:E9:B4:5B:D0:2B:03:18:5D:FC
Authority key identifier: 08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
Certificate issuer: /CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Certificate serial: 019A71EE7AD75FD161125D8CDB7A9134947A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
Manifest number: 1386
Signing time: Tue 11 Nov 2025 08:00:45 +0000
Manifest this update: Tue 11 Nov 2025 08:00:45 +0000
Manifest next update: Wed 12 Nov 2025 08:00:45 +0000
Files and hashes: 1: CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl (hash: 6J85OXQM9JU/W5+d5C6Pe/0DAVJ3KZ2gzZypOWW9oKE=)
2: DQ47vKDjcl-2XGhWvGpEltnbLx0.roa (hash: xO7ywYo6rKZE+1UGlrRMauCBtFM1TiMUXrJWYhc9zkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7a:d7:5f:d1:61:12:5d:8c:db:7a:91:34:94:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Validity
Not Before: Nov 11 08:00:45 2025 GMT
Not After : Nov 12 08:00:45 2025 GMT
Subject: CN=861b223a45f0170f1e810fe9b45bd02b03185dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:cc:8f:01:ab:6b:7c:79:aa:ce:cc:ac:85:
d3:9b:0f:a5:2d:2a:26:b6:4e:44:03:1b:ed:59:f6:
8f:2e:2f:a0:87:6a:e4:07:8a:e8:5b:5d:05:6a:0e:
e3:ab:21:a8:7d:b0:8f:46:93:70:30:14:1c:f2:e6:
5d:44:0e:9b:6c:03:97:6a:4e:50:7e:53:59:ae:d0:
bd:84:b3:16:80:c7:29:86:07:5d:b9:76:1c:9a:64:
0c:41:bf:dd:dc:0c:19:68:b4:7b:3b:81:32:3f:48:
56:7b:2b:a6:42:c8:f9:ec:f1:c0:f6:89:fc:a4:98:
81:7d:94:30:cc:e6:d6:35:ac:22:b9:f0:ea:2c:a0:
cd:d1:30:d8:36:b4:b1:a1:92:5f:59:d8:06:3c:ef:
34:e2:14:50:60:24:08:f2:e0:65:2b:52:81:60:2a:
19:ab:14:cd:f8:43:2c:48:00:6f:cb:3e:2a:ab:f7:
f3:aa:a9:56:a5:ac:8c:47:3d:69:8e:91:0a:6e:4e:
44:c5:70:1c:28:e7:66:8f:16:94:c0:fe:f0:80:d8:
f7:32:f1:a8:3d:cb:b8:97:d9:31:bf:c4:03:f6:80:
90:7a:b0:4f:56:16:de:b7:2e:86:42:54:d1:ab:8b:
28:3c:1e:b7:a9:1b:d0:0b:65:db:4b:2f:76:be:85:
1b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1B:22:3A:45:F0:17:0F:1E:81:0F:E9:B4:5B:D0:2B:03:18:5D:FC
X509v3 Authority Key Identifier:
keyid:08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7e:bd:fc:95:22:7e:fa:99:4f:3b:86:a9:f4:d5:b1:5e:3b:
97:b1:39:6d:99:b0:9c:62:12:5a:8d:99:3e:d1:59:31:07:b4:
90:61:11:1d:05:32:11:b3:2d:56:79:0d:15:55:2d:b3:54:37:
62:b5:7b:4d:d4:cb:37:75:d3:dd:99:a8:6a:9c:35:e0:db:48:
f9:f9:f5:1a:8f:e9:f0:6d:9d:f8:64:da:19:3c:6d:60:f2:06:
c7:ad:85:6a:c1:96:82:29:12:5f:0e:51:7d:bf:84:77:b5:f5:
b8:19:04:64:02:52:93:39:bf:4b:fb:2e:50:23:c8:c1:50:3c:
bd:de:2d:99:c6:ce:07:b9:02:55:af:32:1d:10:8f:37:90:e9:
9f:d8:45:13:fa:28:91:ba:e6:12:70:fc:41:00:25:27:89:00:
03:74:2b:06:6f:28:2a:f2:c7:43:f7:bf:c5:05:34:a8:f0:ac:
34:80:be:38:16:49:b8:46:8b:7b:12:ed:ac:d3:19:17:9c:48:
2e:7b:99:6e:d8:88:07:80:f2:2e:6f:82:48:a0:d3:5e:c5:ab:
65:a0:f0:23:00:b3:75:de:14:d7:3a:2d:3e:5e:69:f2:9e:24:
2c:95:0a:88:75:8f:d0:8e:44:d3:9e:06:5c:29:78:ea:de:31:
b2:4e:56:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:12 2025 by rpki-client