Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft (raw, json)
Hash identifier: kv0/rjHLjh3xBzp0waStW5U0sAvbFs/skdxTuvNDR+4=
Subject key identifier: 7A:55:9F:C0:E5:A0:C6:D8:E4:55:5B:C8:F9:C7:2E:BA:9B:0D:04:AB
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 019A71B8FB61E4D110D0FB5276F18B233712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:02:19 +0000
Manifest this update: Tue 11 Nov 2025 07:02:19 +0000
Manifest next update: Wed 12 Nov 2025 07:02:19 +0000
Files and hashes: 1: CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl (hash: Ps23CKtJTvfY+BwOUNjXpy6A4PAr3dVBBtMDOtAqak0=)
2: FmAmhG0AvPG6yVB64Qfw6xRip4M.roa (hash: 84/kBc6q38BYMUmioROiS2CF0R9+3DZAaiOiDJ9PSD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fb:61:e4:d1:10:d0:fb:52:76:f1:8b:23:37:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Nov 11 07:02:19 2025 GMT
Not After : Nov 12 07:02:19 2025 GMT
Subject: CN=7a559fc0e5a0c6d8e4555bc8f9c72eba9b0d04ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3a:8c:4a:c4:cf:78:41:4e:c2:71:16:3b:f7:
f9:63:eb:7c:e0:f3:3f:0c:c8:97:c1:33:8a:ae:65:
82:7e:9c:03:78:13:91:9d:af:2f:3c:4b:20:6d:f6:
7d:99:8f:a1:37:15:ed:c1:6a:a8:60:b0:5d:8c:91:
eb:8e:1f:6b:ad:e8:17:6c:9a:94:2d:8f:75:02:68:
5b:4f:88:9c:9f:ff:7f:c6:88:26:9f:77:31:11:56:
34:29:48:6b:26:04:3b:1f:51:1a:97:09:6e:9e:bb:
ac:fe:4b:d1:7f:48:9d:90:c2:01:0f:be:7b:12:c1:
92:87:54:75:81:a3:8a:d4:a3:b8:23:89:11:4c:18:
8d:5c:6f:be:eb:d6:c4:8f:b1:f8:0b:44:90:06:05:
21:5d:5f:e0:3c:37:79:b5:e4:c3:fe:d7:64:ee:cb:
c1:ae:af:d0:69:0b:ea:38:9e:d3:6b:6e:92:e6:e9:
de:46:5d:70:09:74:bb:73:49:96:ae:d4:7e:c5:c4:
91:3b:53:4a:63:55:ce:58:1c:d8:28:4a:29:11:c8:
41:42:ee:fc:76:43:d6:70:8f:2f:33:3a:35:6b:99:
b5:2d:03:6c:67:d3:c1:96:bc:ff:d0:75:f9:f6:7e:
ee:93:54:7d:4d:39:c3:2b:20:7d:ef:85:04:52:5e:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:55:9F:C0:E5:A0:C6:D8:E4:55:5B:C8:F9:C7:2E:BA:9B:0D:04:AB
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c8:da:20:b9:6a:7c:f6:71:80:9b:7c:33:2f:d5:da:60:5c:
24:c4:68:0d:51:39:1a:70:c0:57:47:63:55:72:82:2a:d7:73:
d1:ed:a0:b0:37:7f:5b:23:b9:8c:7c:59:a3:73:d5:3f:06:fc:
3c:9b:9a:c6:e9:38:53:76:d5:94:c4:2a:68:d2:47:cf:5e:6b:
7c:9b:dc:2c:c3:40:2a:ae:12:7f:3d:9d:de:d2:0f:8e:0f:75:
51:cd:ea:0f:43:54:d5:1e:c2:e6:97:a8:41:dc:98:4a:df:54:
69:3d:9a:96:f5:6f:b8:0a:3a:68:d9:9f:5f:1c:ef:dd:63:63:
1d:bc:fd:af:ce:a8:c4:3d:0a:08:72:90:4d:52:57:27:40:2e:
7f:91:3e:a0:07:e8:89:8b:21:de:e4:01:c0:a9:c4:ff:66:42:
4e:74:2c:9d:f0:27:8d:8b:a4:ff:25:0b:8d:6e:20:e0:b8:2d:
f6:14:bf:0a:f6:23:79:98:f7:cc:33:39:74:1f:6f:89:d2:60:
79:05:cb:8c:96:80:e9:3b:12:ec:e4:7a:30:a8:ca:89:81:3e:
87:72:44:26:26:ea:0b:9f:bd:0e:68:0e:1a:23:e1:39:77:90:
95:97:e7:fd:a7:08:c2:1c:86:42:6e:5a:f2:91:da:42:57:52:
05:cf:07:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:48 2025 by rpki-client