Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
File: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json)
Hash identifier: K/4bKekrprgELzA3YNdvUFnaEQWXCOyECDVriFzk4XA=
Subject key identifier: 25:5A:2A:A1:6A:D1:24:BF:A5:3F:8B:07:38:F1:02:1B:E2:77:D2:56
Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Certificate serial: 019917646307ED9377C78E4481B9B18B85CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
Manifest number: 12C4
Signing time: Fri 05 Sep 2025 01:01:18 +0000
Manifest this update: Fri 05 Sep 2025 01:01:18 +0000
Manifest next update: Sat 06 Sep 2025 01:01:18 +0000
Files and hashes: 1: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: wXKk+JAOOQsACsnwS/TxFhogXUsGaM5tNwgOnY4W6OQ=)
2: h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa (hash: h0MwBLTN+JJQsx/mfZTZMMTWn2GxCEc+/y4Gt6r0rFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:63:07:ed:93:77:c7:8e:44:81:b9:b1:8b:85:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Validity
Not Before: Sep 5 01:01:18 2025 GMT
Not After : Sep 6 01:01:18 2025 GMT
Subject: CN=255a2aa16ad124bfa53f8b0738f1021be277d256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:de:83:3c:46:c5:f4:13:b4:4e:e2:21:ce:bd:
08:d1:53:d9:66:df:6e:4a:ef:8e:1f:93:9e:f7:61:
16:e5:ed:03:58:ea:2a:1b:1b:50:9d:bf:c2:3e:82:
d0:02:4d:1c:85:6b:62:4f:b0:54:d6:ca:5e:b8:72:
66:9e:92:37:60:94:53:27:0e:74:76:be:44:2b:64:
20:9a:ea:c9:54:88:95:07:c4:5a:f2:b2:29:6f:83:
25:f8:f1:74:2e:94:df:99:4a:f7:3b:df:c1:8d:2a:
ca:84:41:18:36:36:4f:97:09:68:7b:25:42:69:30:
10:7b:44:de:00:aa:a0:48:3d:db:86:19:ff:1f:9b:
52:71:f4:fe:88:b1:87:39:a9:4a:2d:a9:63:16:47:
77:bc:00:15:68:da:9d:ff:21:55:ba:a2:db:ed:81:
fe:8e:f7:d6:f6:63:24:fa:2f:be:d6:f3:24:ce:9f:
ad:b7:cd:0b:84:dd:fe:4f:ea:d2:89:ea:56:5e:b0:
3e:f2:35:4d:90:c2:d6:f7:9c:e2:4e:f5:b7:83:2e:
2c:76:b1:34:46:82:08:1f:54:f2:3a:39:d6:31:79:
82:07:e9:23:76:f8:59:4c:45:6e:59:20:21:c7:a4:
01:c4:fa:1e:30:83:d0:8a:a9:d1:c0:f7:2d:b6:89:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5A:2A:A1:6A:D1:24:BF:A5:3F:8B:07:38:F1:02:1B:E2:77:D2:56
X509v3 Authority Key Identifier:
keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:42:79:66:38:53:01:98:11:5c:0c:60:00:f8:01:17:81:bf:
30:60:0d:23:16:57:4f:1a:ca:3b:a1:0e:c5:a1:f6:c2:e3:ac:
24:2c:65:8c:79:d6:75:f0:1b:6b:ed:20:be:3d:1e:71:ed:a4:
97:1c:ad:86:b8:02:06:89:a2:cb:39:b5:fd:21:49:08:eb:a6:
78:65:3d:73:42:a6:05:18:51:2d:1c:55:90:79:2a:90:02:fd:
61:40:94:dd:cb:49:cf:1f:0b:8e:2d:c9:eb:38:85:3e:8d:c8:
f4:f0:35:99:db:32:7f:b0:a8:32:ed:53:0a:da:22:60:32:a3:
7c:6e:6a:59:e1:7a:f1:29:75:f0:b0:f8:68:a2:b9:b8:72:3c:
a2:75:5b:1c:4d:da:a5:21:c9:94:09:03:0a:68:ac:e0:9a:76:
8d:e2:30:58:30:87:97:5e:66:65:21:ac:6c:d2:a4:e7:a1:80:
d2:53:d6:71:d7:58:04:fc:b9:97:70:66:bd:39:7f:36:d9:00:
7c:8b:62:b6:6a:cf:10:36:02:0b:8e:2d:2a:36:17:22:f2:2c:
85:44:e7:4f:48:79:e3:92:1d:d3:c7:5a:36:10:fe:a6:5f:55:
92:1c:bd:10:c9:e7:dd:1e:9e:28:e4:08:fd:9c:4e:2d:e3:ef:
da:93:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:26 2025 by rpki-client