Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft (raw, json)
Hash identifier: e/aKajELbMtdSdjNF7PZNRwqq7xpukcin/d+Fsx/Ub8=
Subject key identifier: AF:A4:9F:8F:1E:C1:ED:B5:B6:AC:1B:BC:5D:5B:67:23:7A:E8:62:0A
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 0199277C66A89EF8305EB3036823FF48E6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
Manifest number: 1676
Signing time: Mon 08 Sep 2025 04:01:28 +0000
Manifest this update: Mon 08 Sep 2025 04:01:28 +0000
Manifest next update: Tue 09 Sep 2025 04:01:28 +0000
Files and hashes: 1: CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl (hash: vihrzxIjOaRxY0iDTKo7lC/+D8+2s8k4z64mMuEru4A=)
2: FmAmhG0AvPG6yVB64Qfw6xRip4M.roa (hash: 84/kBc6q38BYMUmioROiS2CF0R9+3DZAaiOiDJ9PSD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7c:66:a8:9e:f8:30:5e:b3:03:68:23:ff:48:e6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Sep 8 04:01:28 2025 GMT
Not After : Sep 9 04:01:28 2025 GMT
Subject: CN=afa49f8f1ec1edb5b6ac1bbc5d5b67237ae8620a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:46:e1:17:dd:8e:58:54:f8:cc:2c:56:7d:ce:
79:04:00:7c:42:43:7d:b2:5d:16:99:fb:84:3d:27:
a3:f6:57:06:6d:c4:5b:bc:6a:0a:28:19:84:47:28:
cf:09:cc:1d:82:5b:02:71:1e:49:77:03:0d:f6:62:
6f:9b:c2:8f:fc:7f:56:25:81:a8:71:af:06:0e:7e:
5b:fd:a4:4b:c4:6a:78:c5:e8:3b:92:f3:28:68:b8:
60:6c:20:d9:7f:65:b3:c2:5f:9f:34:09:8d:cf:b5:
f1:1d:fb:96:f5:89:01:bf:77:e6:45:ce:0f:4f:78:
fb:41:03:c6:82:fa:be:60:14:6d:cc:96:08:30:4d:
da:e7:87:0b:ed:a1:6c:06:b0:bf:a7:99:24:47:76:
b8:9c:41:6e:48:4c:0d:2f:66:17:c1:e9:13:59:81:
e8:ed:28:63:9b:da:7a:59:2c:f8:0c:94:55:23:0b:
ae:ce:13:0d:f4:02:74:12:b8:44:fd:e9:bf:98:78:
67:fe:a3:2b:fa:08:66:04:40:15:f4:3d:9a:6a:59:
c5:5f:1c:29:2a:12:ed:b4:ca:ea:7c:af:97:04:43:
17:a6:0a:b0:54:e1:86:ef:a7:a7:68:5c:76:c8:ca:
4f:39:18:a4:1b:af:a7:b1:89:20:7c:84:13:47:4c:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:9F:8F:1E:C1:ED:B5:B6:AC:1B:BC:5D:5B:67:23:7A:E8:62:0A
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:aa:e8:34:88:b5:fe:be:30:51:3b:79:a6:69:00:9f:99:d6:
c1:ce:78:65:16:b1:04:5f:e2:51:5a:3b:cf:0b:18:61:7a:4c:
d3:ce:7c:8d:e5:37:ce:91:a4:48:bb:00:ca:5b:92:54:8e:f6:
e8:b0:f2:b9:a7:a3:cb:a5:e2:30:8a:f0:90:d3:04:20:f3:61:
8b:28:58:11:74:6e:d4:4c:70:1c:75:7c:1d:90:80:68:cb:09:
88:19:f7:78:2e:cb:3d:73:ef:a9:c2:90:ca:8b:f8:4f:bc:da:
79:38:cc:f6:ee:5d:bb:8e:07:00:b9:04:74:e7:5a:9a:8e:29:
7d:f2:d4:20:d6:13:ff:05:84:e2:d0:b3:23:c6:1b:b8:94:51:
e6:a2:b2:e4:7a:61:b9:91:14:59:57:30:cd:5f:d9:b5:df:82:
a5:48:7f:8d:2d:98:a9:49:b9:66:55:69:22:ea:cb:52:aa:c4:
5b:77:60:be:27:d6:c2:c0:ec:03:bc:f8:65:a8:19:d0:1f:4a:
db:4a:ff:6a:cd:d5:bf:aa:3a:e1:09:48:bf:c1:e7:f1:a1:f3:
a1:90:ff:5c:6d:6c:a6:cf:0a:d1:59:e6:9e:4c:de:91:64:6a:
79:1e:09:26:9c:e7:38:3e:b4:7f:f9:b5:4b:67:cd:82:3b:76:
a2:a3:05:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:01:02 2025 by rpki-client