Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: DQnNPK+DDU8fboCYXxG+RPrlz+U7kttDSVzamPmbAU0=
Subject key identifier: 3E:E6:D4:2C:79:AA:F5:44:C5:8C:BE:44:E5:23:EE:45:E2:19:2C:AC
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 019A70DC348F04D05041819F62339D0D0BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 03:01:10 +0000
Manifest this update: Tue 11 Nov 2025 03:01:10 +0000
Manifest next update: Wed 12 Nov 2025 03:01:10 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: AlJEO/foFzu11jisx6Nux5DH0nNOdVecLCo7tNCjD5M=)
2: OZJAkQeWPGiu0MMG4YGewg2oUhI.roa (hash: kvD4Jh7HATnFEhZqQFNvhTQZ3Ir8ynHCKw0hu3/CQds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:34:8f:04:d0:50:41:81:9f:62:33:9d:0d:0b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Nov 11 03:01:10 2025 GMT
Not After : Nov 12 03:01:10 2025 GMT
Subject: CN=3ee6d42c79aaf544c58cbe44e523ee45e2192cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:35:95:c2:30:e9:ab:8e:71:31:4f:34:ea:
ac:08:12:ff:1c:1e:b6:7f:c2:c8:e1:ce:db:5d:9a:
3f:50:58:76:8c:b6:a6:1e:8d:ab:82:1c:59:4a:4f:
82:7f:c7:d5:95:b1:57:af:ef:c5:3e:62:1e:85:5e:
4c:6e:2f:f8:5d:a2:90:5e:62:ba:e2:b8:76:7f:9d:
f4:c6:05:a5:d7:70:93:78:86:b4:bf:11:e6:96:fd:
5c:e0:c8:a5:2d:45:d2:5a:05:e8:62:89:1a:f2:77:
d0:1b:ab:79:16:fd:84:c3:02:08:8a:1c:13:bb:cd:
0a:cf:30:76:18:d9:10:d7:f3:ea:c1:e2:3c:e0:1f:
38:05:41:0e:90:0e:ed:cc:0e:0d:66:c9:d3:a1:7a:
77:72:10:76:8a:09:1f:e3:a6:7c:f7:fe:50:c7:39:
6f:d8:41:79:ba:77:04:e9:0e:6a:f5:09:5e:60:45:
cf:31:e7:2d:63:c5:ee:b4:31:17:e6:43:bf:50:b9:
d6:8e:25:08:1f:d2:30:1c:ba:b0:df:2d:90:3c:73:
dd:3f:02:04:3b:68:08:c5:19:6d:b3:10:52:a2:37:
c8:99:2c:b7:83:89:6b:01:a0:1e:92:4a:64:f6:8c:
97:12:3b:ba:2d:a1:b6:71:df:77:b0:36:66:75:d0:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E6:D4:2C:79:AA:F5:44:C5:8C:BE:44:E5:23:EE:45:E2:19:2C:AC
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c0:f5:1f:fd:ae:ad:e3:0b:75:64:b7:c1:dd:18:af:5f:98:
a3:dd:37:cf:4d:6c:cd:72:12:03:a3:09:8b:39:ca:69:ed:35:
75:f2:d6:93:37:b7:cc:75:f3:8f:4f:48:bb:28:40:1f:c8:38:
21:98:1b:5f:4c:b6:75:97:13:c3:20:d3:05:37:f4:25:50:93:
51:1b:b7:a6:cc:31:47:87:79:1a:a7:c6:a1:6e:34:42:8e:e6:
17:a6:8a:5c:cc:f7:a5:79:23:73:d2:d6:24:71:63:f0:1e:79:
45:86:c1:50:81:6a:e4:85:44:ca:06:42:87:e1:7e:87:c8:ea:
b3:3c:98:29:8d:91:a3:aa:86:1b:36:b7:ba:ea:0a:9a:62:da:
84:61:f6:85:4c:f4:fd:3e:66:33:ad:77:fe:89:3a:a9:79:20:
a1:31:cc:e5:66:5f:5f:fa:72:b5:f2:c5:14:68:30:d1:44:a2:
3f:97:74:c7:21:d5:28:32:77:d8:c1:44:f2:24:ad:17:f4:a8:
ea:c4:9b:88:a0:8a:2f:c5:d0:9b:03:66:da:42:ac:13:c0:1f:
ac:c2:c5:ce:a1:37:06:9d:de:be:48:24:72:34:37:a1:9d:40:
29:6c:48:c2:45:d0:b2:0a:2e:1d:f5:a0:2b:a8:78:63:48:32:
08:61:da:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3DSPBNBQQYGfYjOdDQvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGE4NjFkN2MxNGI0Y2E1ZTZkMWM3ZDYwYWFlZWIzMmVh
OGVmNjEwHhcNMjUxMTExMDMwMTEwWhcNMjUxMTEyMDMwMTEwWjAzMTEwLwYDVQQD
EygzZWU2ZDQyYzc5YWFmNTQ0YzU4Y2JlNDRlNTIzZWU0NWUyMTkyY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF41lcIw6auOcTFPNOqsCBL/HB62
f8LI4c7bXZo/UFh2jLamHo2rghxZSk+Cf8fVlbFXr+/FPmIehV5Mbi/4XaKQXmK6
4rh2f530xgWl13CTeIa0vxHmlv1c4MilLUXSWgXoYoka8nfQG6t5Fv2EwwIIihwT
u80KzzB2GNkQ1/PqweI84B84BUEOkA7tzA4NZsnToXp3chB2igkf46Z89/5Qxzlv
2EF5uncE6Q5q9QleYEXPMectY8XutDEX5kO/ULnWjiUIH9IwHLqw3y2QPHPdPwIE
O2gIxRltsxBSojfImSy3g4lrAaAekkpk9oyXEju6LaG2cd93sDZmddBo/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7m1Cx5qvVExYy+ROUj7kXiGSysMB8GA1UdIwQY
MBaAFApKhh18FLTKXm0cfWCq7rMuqO9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2It
OTRkYmYzZmQwZTJkLzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2ItOTRkYmYzZmQwZTJk
LzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMD1H/2u
reMLdWS3wd0Yr1+Yo903z01szXISA6MJiznKae01dfLWkze3zHXzj09IuyhAH8g4
IZgbX0y2dZcTwyDTBTf0JVCTURu3pswxR4d5GqfGoW40Qo7mF6aKXMz3pXkjc9LW
JHFj8B55RYbBUIFq5IVEygZCh+F+h8jqszyYKY2Ro6qGGza3uuoKmmLahGH2hUz0
/T5mM613/ok6qXkgoTHM5WZfX/pytfLFFGgw0USiP5d0xyHVKDJ32MFE8iStF/So
6sSbiKCKL8XQmwNm2kKsE8AfrMLFzqE3Bp3evkgkcjQ3oZ1AKWxIwkXQsgouHfWg
K6h4Y0gyCGHaXw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:08 2025 by rpki-client