Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: uyOP1qK4PhOdJyjM1Leef6vBNowzP0RdvztZ2jnv4mA=
Subject key identifier: E1:91:0F:14:BA:2F:1B:53:86:76:B5:E7:C3:2D:91:B0:D0:DC:83:2C
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 0198466407845F89F1BB97D0C766C0615687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 1540
Signing time: Sat 26 Jul 2025 11:00:17 +0000
Manifest this update: Sat 26 Jul 2025 11:00:17 +0000
Manifest next update: Sun 27 Jul 2025 11:00:17 +0000
Files and hashes: 1: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (hash: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: FA5fPI3O2BKzfcbiABBv07U7o2CoowskPrRlG9f3+E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:07:84:5f:89:f1:bb:97:d0:c7:66:c0:61:56:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Jul 26 11:00:17 2025 GMT
Not After : Jul 27 11:00:17 2025 GMT
Subject: CN=e1910f14ba2f1b538676b5e7c32d91b0d0dc832c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:75:e2:3a:58:be:09:5b:aa:fe:48:66:c8:
45:c9:a0:fe:0a:d1:e8:c9:17:b4:bf:6a:f9:bc:24:
7d:2e:c6:07:30:d5:c4:8b:24:83:cd:16:43:2f:4a:
d3:a7:13:bc:6a:df:c0:13:47:2c:e0:eb:57:6c:06:
01:3f:0c:8f:36:47:85:89:02:07:2f:8d:1a:f3:62:
57:2b:2b:39:3e:33:68:78:68:55:6d:5f:09:b0:4b:
d3:a9:35:7a:73:ee:7a:74:c1:58:e5:67:c4:7e:e8:
85:fa:c1:48:7e:1f:e3:43:28:5d:3a:13:e9:ba:2b:
28:bd:72:53:1b:ec:d8:b0:a4:93:dd:e8:e8:8d:60:
41:dc:9b:bf:78:68:11:32:49:f6:45:3b:f3:42:e9:
9d:7f:0a:de:25:7e:d7:ca:46:a5:2a:f6:0d:b3:4e:
ac:93:fd:07:6d:dd:52:ae:05:5b:df:41:5b:79:54:
f0:3d:ad:25:0b:2d:21:52:c1:8d:3e:15:e8:f1:8c:
25:f7:bb:8a:22:97:51:59:5a:16:ff:49:8a:48:22:
cf:19:b5:7b:1f:dc:e0:a8:51:23:78:23:59:cb:9f:
f6:2e:f3:9e:0c:cf:dc:ba:38:21:6b:be:17:be:58:
4c:a9:74:5d:ed:ff:93:b5:c4:bd:a0:5a:c1:8e:e7:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:91:0F:14:BA:2F:1B:53:86:76:B5:E7:C3:2D:91:B0:D0:DC:83:2C
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7f:fe:4f:81:e2:f3:bc:c1:fd:af:ed:e8:05:86:ea:e5:ba:
e3:17:dd:41:64:fb:d1:01:ee:ac:cb:ce:04:50:4d:e3:c3:f4:
8d:f5:0f:2f:1c:22:5f:09:1c:06:50:d7:20:a4:17:ed:90:03:
72:f7:0b:18:80:84:6f:d5:9a:2f:c0:bd:5c:c9:bc:89:53:0d:
0e:07:3b:23:67:ef:57:f5:0a:59:74:04:a8:8d:f0:68:c3:77:
18:1f:ff:c5:31:16:70:bb:77:54:96:82:6c:a6:c1:e7:d5:32:
00:6d:95:37:fe:42:aa:c8:7e:9c:79:d4:d3:5d:a0:a6:58:bc:
da:e1:10:ec:5e:cb:c1:53:0c:ff:ef:24:b5:89:bf:b9:34:6e:
01:de:07:0e:3c:21:74:74:36:ce:29:50:4f:85:c1:97:03:c5:
e9:d1:5f:7e:f7:c4:75:bf:c4:0a:fe:9a:ab:57:69:6d:b3:a3:
c5:5e:fe:ac:3c:0b:26:e9:9a:71:e9:97:b2:8f:eb:4b:1d:47:
60:8b:84:f6:be:a4:8d:b5:06:6f:d6:25:f2:05:9a:32:65:e5:
dc:33:4c:13:c0:ee:27:65:5e:c2:42:3b:65:ac:4e:69:75:e1:
7b:57:bc:1a:f5:09:67:69:17:d2:e2:eb:69:d1:0e:e8:dd:c2:
a5:7e:db:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:57:21 2025 by rpki-client