Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
File: CkqGHXwUtMpebRx9YKrusy6o72E.mft (raw, json)
Hash identifier: /1VNXS7ddtH+sVYetXC5gX58hg6n28ICggNXMXVU/wM=
Subject key identifier: B9:DF:16:95:4A:88:4F:07:BF:70:03:E8:D8:F7:5D:63:9F:55:3D:87
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 019922C3A4042BBC859C2D143959EE1C9EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
Manifest number: 167A
Signing time: Sun 07 Sep 2025 06:01:10 +0000
Manifest this update: Sun 07 Sep 2025 06:01:10 +0000
Manifest next update: Mon 08 Sep 2025 06:01:10 +0000
Files and hashes: 1: CkqGHXwUtMpebRx9YKrusy6o72E.crl (hash: ehnKEKZGKsNSJ2aL3gk141sgCx//lwRxymlkT7c2EM8=)
2: OZJAkQeWPGiu0MMG4YGewg2oUhI.roa (hash: kvD4Jh7HATnFEhZqQFNvhTQZ3Ir8ynHCKw0hu3/CQds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a4:04:2b:bc:85:9c:2d:14:39:59:ee:1c:9e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Sep 7 06:01:10 2025 GMT
Not After : Sep 8 06:01:10 2025 GMT
Subject: CN=b9df16954a884f07bf7003e8d8f75d639f553d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:52:d4:c4:52:57:b2:dd:30:01:b6:f4:83:ba:
05:26:25:f8:82:be:a6:08:16:8e:8e:f8:29:a7:df:
77:29:0c:8c:e3:03:85:a9:68:e0:f4:86:c8:86:f0:
62:31:83:55:d3:a3:b3:a0:15:36:97:23:bf:a5:45:
6b:9c:c3:cd:1d:7d:21:bd:a9:2c:86:3d:d3:45:9f:
7a:06:b7:b8:ef:d3:37:8f:7a:bc:23:f3:31:0a:45:
63:da:8a:78:01:e7:b2:d9:dd:89:a3:0c:7f:54:2a:
e9:bf:0c:96:7a:bf:49:5f:fe:ad:aa:45:44:07:f1:
20:09:77:30:a3:cd:f3:a4:a2:c3:ff:0c:d1:46:32:
91:b6:31:5b:9a:29:23:14:85:83:b7:f9:ac:0c:a9:
4e:b3:5d:3e:ef:14:f0:fd:0b:e6:a7:46:28:ff:eb:
25:e9:5b:de:95:84:27:f8:8c:d0:c3:cf:0b:98:9b:
cc:46:46:86:82:82:96:04:ea:6c:4b:95:8f:b8:31:
65:03:7b:1c:47:5b:78:cc:5b:f9:47:29:f8:bf:69:
ff:de:40:98:ac:a8:fd:4c:fa:01:42:81:40:21:9e:
f5:23:51:94:9c:45:18:1e:03:aa:b2:bd:5c:3c:c4:
ea:06:45:ed:95:34:a3:af:6c:c6:a5:26:11:d1:c4:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DF:16:95:4A:88:4F:07:BF:70:03:E8:D8:F7:5D:63:9F:55:3D:87
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c3:0b:df:a0:77:2b:c6:bd:af:18:9c:d7:61:b7:35:f5:50:
30:e8:fd:21:07:e5:3b:04:84:7f:1f:c3:37:6f:c7:fa:9c:c0:
49:10:de:23:1a:ff:41:6d:a7:4c:2b:35:bb:23:3d:3f:b7:e2:
8c:fd:72:2a:bd:0d:fe:85:61:65:71:05:9d:42:7a:fb:aa:e7:
1c:ac:a5:b2:54:ad:16:0e:e7:52:fe:9d:8d:d4:3d:9c:c6:f7:
60:37:45:7d:1b:45:6b:6a:db:c2:2f:65:27:6b:9c:80:bc:ad:
f4:ca:16:dd:9c:bf:39:24:16:b1:3e:07:fb:ee:3d:72:ed:da:
59:66:3d:5a:dd:51:28:d9:78:22:6a:9e:fa:57:79:83:19:88:
ea:e0:a5:0d:4b:10:c5:f9:81:92:08:bb:51:10:11:b4:69:15:
3b:a2:ae:f0:fe:06:ee:75:e9:54:dc:ef:72:47:b8:ee:1c:17:
ad:54:34:0d:76:a8:58:fd:98:96:a7:0c:29:5d:1b:67:1d:48:
05:6e:e7:a5:8a:64:ab:b4:4b:62:29:59:fe:1e:0f:c5:7d:47:
8c:a5:28:56:f3:bd:ab:d9:af:37:71:7f:1e:cd:68:7a:ae:c3:
04:a3:97:14:c3:f4:4e:31:3b:35:7e:88:57:57:0a:4c:4b:a5:
1b:99:5c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:45 2025 by rpki-client