Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
File: cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft (raw, json)
Hash identifier: HZ8+AvZbu8Q0tCKqZJssWlK7sOCmeY3bh6MMD7Pvas4=
Subject key identifier: AB:28:7C:7C:24:8B:A0:60:83:38:2F:57:7E:7B:82:1C:3D:7D:5D:DC
Authority key identifier: 71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
Certificate issuer: /CN=711280b1338f12fc6f621c4c90560c7bc5908961
Certificate serial: 01992255CF09B5A9E17C1BDDA09CBC599A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
Manifest number: 0A43
Signing time: Sun 07 Sep 2025 04:01:12 +0000
Manifest this update: Sun 07 Sep 2025 04:01:12 +0000
Manifest next update: Mon 08 Sep 2025 04:01:12 +0000
Files and hashes: 1: cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl (hash: wQar8N7Fh/1nAjhI2XTIiCsgxIX2baF0aBeoI1SJYwk=)
2: myyHg-EZ7oPvLVMt0GMINU1S9Ss.roa (hash: uTCXVchkgOWKUqBTemAVamh0cjaPQ4ao1yqdp6r41LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:cf:09:b5:a9:e1:7c:1b:dd:a0:9c:bc:59:9a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711280b1338f12fc6f621c4c90560c7bc5908961
Validity
Not Before: Sep 7 04:01:12 2025 GMT
Not After : Sep 8 04:01:12 2025 GMT
Subject: CN=ab287c7c248ba06083382f577e7b821c3d7d5ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:21:e6:55:66:61:bd:35:3e:a5:b5:71:18:
ad:07:34:5a:24:77:25:bb:1e:11:ee:c5:16:6a:52:
55:fe:d0:51:df:3a:5e:51:ee:a5:cd:9a:cd:7e:c4:
82:28:0d:01:4f:92:3a:f1:7b:43:f3:4f:9c:bf:fc:
b1:0c:8c:24:75:00:a5:f7:18:22:1c:51:8a:64:88:
7f:d6:41:1b:32:76:5b:3d:17:40:38:82:ab:ac:cd:
62:9f:cd:7f:3e:55:d3:d8:9f:f8:2b:bc:34:1a:15:
b0:58:bd:bc:1e:80:34:51:31:83:c9:a1:cd:f3:87:
23:69:c7:a6:06:a4:18:61:c1:17:a5:0a:7b:80:04:
49:aa:e1:41:80:cd:13:60:bb:36:58:8f:5a:dc:d9:
f9:58:02:db:dd:b2:e9:44:ea:f2:1b:38:eb:73:b2:
d5:50:82:8f:e7:8a:ae:5d:ec:b7:52:d9:76:68:bb:
5b:6d:2d:89:96:c1:d4:8f:30:94:e2:b4:75:b6:36:
7b:56:af:50:c7:d8:a4:b5:6b:49:1c:a1:d4:2d:42:
9a:af:3a:9b:39:8f:8c:6a:7b:97:d1:db:dd:6a:3a:
84:db:31:70:fc:56:aa:e4:44:fa:7c:2c:72:7e:96:
98:8f:f4:67:d3:a0:24:6e:51:9f:a5:ae:6b:0a:ac:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:28:7C:7C:24:8B:A0:60:83:38:2F:57:7E:7B:82:1C:3D:7D:5D:DC
X509v3 Authority Key Identifier:
keyid:71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bc:88:cb:44:52:64:63:f6:b2:b6:61:c9:29:22:ed:01:97:
0e:20:f7:c2:5a:f9:7f:90:36:df:26:bc:20:8b:bf:d9:fd:35:
4e:ef:7c:1e:f0:bb:b8:bf:bb:83:a5:ad:c9:7a:ec:ce:1d:c9:
3a:0d:6b:0b:7d:04:10:33:f9:bd:48:c6:d4:28:d6:ed:fd:aa:
13:42:f6:c8:dd:d1:63:c9:0e:79:de:9e:3b:c7:a7:c9:1a:b5:
20:c5:6f:f5:fa:51:b4:c0:ed:a3:7c:6c:db:1f:72:5f:b6:2d:
9c:ba:77:c8:e7:40:6d:e2:14:93:f9:d3:3e:d4:39:72:9d:e2:
7c:23:ff:ea:30:03:ca:9b:1c:81:31:d9:95:c4:fd:a9:7b:c7:
ba:5c:b0:a6:6a:cc:6c:b8:b3:58:de:79:69:2c:e4:47:44:5f:
67:10:5d:43:93:30:56:79:86:03:8c:03:36:64:49:0a:01:66:
46:9d:98:1f:4f:88:02:22:07:2d:20:d0:62:b7:bf:20:85:68:
ee:38:e8:c7:17:f9:92:f4:a5:38:9f:d8:04:67:dd:5d:be:88:
92:8f:6c:9d:1e:00:1a:6a:75:f3:9c:97:0f:e2:a1:5a:50:8f:
aa:f0:77:8f:81:6e:65:ad:9a:24:59:3e:e0:b5:b1:a0:e0:ae:
57:e1:60:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVc8JtanhfBvdoJy8WZqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTI4MGIxMzM4ZjEyZmM2ZjYyMWM0YzkwNTYwYzdiYzU5
MDg5NjEwHhcNMjUwOTA3MDQwMTEyWhcNMjUwOTA4MDQwMTEyWjAzMTEwLwYDVQQD
EyhhYjI4N2M3YzI0OGJhMDYwODMzODJmNTc3ZTdiODIxYzNkN2Q1ZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFYh5lVmYb01PqW1cRitBzRaJHcl
ux4R7sUWalJV/tBR3zpeUe6lzZrNfsSCKA0BT5I68XtD80+cv/yxDIwkdQCl9xgi
HFGKZIh/1kEbMnZbPRdAOIKrrM1in81/PlXT2J/4K7w0GhWwWL28HoA0UTGDyaHN
84cjacemBqQYYcEXpQp7gARJquFBgM0TYLs2WI9a3Nn5WALb3bLpROryGzjrc7LV
UIKP54quXey3Utl2aLtbbS2JlsHUjzCU4rR1tjZ7Vq9Qx9iktWtJHKHULUKarzqb
OY+ManuX0dvdajqE2zFw/Faq5ET6fCxyfpaYj/Rn06AkblGfpa5rCqws6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsofHwki6BggzgvV357ghw9fV3cMB8GA1UdIwQY
MBaAFHESgLEzjxL8b2IcTJBWDHvFkIlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JLQXNUT1BFdnh2WWh4TWtGWU1lOFdRaVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZTExM2QtYzkyMy00M2Y0LTk3MDgt
YmI0MTdlYzY0OWFiLzEvY1JLQXNUT1BFdnh2WWh4TWtGWU1lOFdRaVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jZTExM2QtYzkyMy00M2Y0LTk3MDgtYmI0MTdlYzY0OWFi
LzEvY1JLQXNUT1BFdnh2WWh4TWtGWU1lOFdRaVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbyIy0RS
ZGP2srZhySki7QGXDiD3wlr5f5A23ya8IIu/2f01Tu98HvC7uL+7g6WtyXrszh3J
Og1rC30EEDP5vUjG1CjW7f2qE0L2yN3RY8kOed6eO8enyRq1IMVv9fpRtMDto3xs
2x9yX7YtnLp3yOdAbeIUk/nTPtQ5cp3ifCP/6jADypscgTHZlcT9qXvHulywpmrM
bLizWN55aSzkR0RfZxBdQ5MwVnmGA4wDNmRJCgFmRp2YH0+IAiIHLSDQYre/IIVo
7jjoxxf5kvSlOJ/YBGfdXb6Iko9snR4AGmp185yXD+KhWlCPqvB3j4FuZa2aJFk+
4LWxoOCuV+FgWA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:46 2025 by rpki-client