Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft
File: ckaDTR5JovonRtw_ZtcMItUPRvk.mft (raw, json)
Hash identifier: RWjAmU7q92J+d2rM2YL8vr5UDUoYWoNS7JLEU6ugyTk=
Subject key identifier: 2B:9D:EB:17:DF:82:33:7B:92:7D:94:B4:6C:8D:83:CE:B5:98:20:25
Authority key identifier: 72:46:83:4D:1E:49:A2:FA:27:46:DC:3F:66:D7:0C:22:D5:0F:46:F9
Certificate issuer: /CN=7246834d1e49a2fa2746dc3f66d70c22d50f46f9
Certificate serial: 019A7180816D3EB4C82023CE364EBEBDBFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft
Manifest number: 0F
Signing time: Tue 11 Nov 2025 06:00:38 +0000
Manifest this update: Tue 11 Nov 2025 06:00:38 +0000
Manifest next update: Wed 12 Nov 2025 06:00:38 +0000
Files and hashes: 1: AUaN_d3P8p-a3G9MXBdbFbttw0I.roa (hash: SEOUmcZd0WH3BJHYd8E0islvyo0HeJdNxtoBcNVaYuQ=)
2: ckaDTR5JovonRtw_ZtcMItUPRvk.crl (hash: 2FQBYWCG+QrewE4CMTlgd1CAMzusHN/VP7gNzIr9jZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:81:6d:3e:b4:c8:20:23:ce:36:4e:be:bd:bf:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7246834d1e49a2fa2746dc3f66d70c22d50f46f9
Validity
Not Before: Nov 11 06:00:38 2025 GMT
Not After : Nov 12 06:00:38 2025 GMT
Subject: CN=2b9deb17df82337b927d94b46c8d83ceb5982025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:f7:9c:f2:4b:48:da:48:cb:55:fc:9b:01:
33:bf:a0:f1:ef:8a:0b:e3:0b:f3:76:a9:9d:6d:e9:
b0:0b:9d:ad:9b:ea:61:52:26:f8:ed:38:85:bf:13:
3c:72:ed:e4:39:c0:40:4a:ff:8b:d5:a2:08:6a:0b:
2f:fe:c5:c5:b6:40:93:b4:b6:f7:77:f1:8a:e0:ce:
14:1b:b9:03:6b:81:a9:a5:d6:4f:a4:11:9f:18:c0:
e8:fb:a2:82:de:f1:39:11:05:77:21:9a:17:29:a7:
ff:99:8c:95:7a:a8:13:09:1d:99:0e:eb:27:d7:8c:
f9:f5:66:e1:d3:4c:2f:3b:14:fe:d6:3f:26:f2:3e:
3e:c6:bf:63:05:50:e7:b3:96:34:b5:5f:23:50:42:
fe:d9:17:47:75:40:a4:77:2c:75:4d:81:2e:2c:83:
5f:46:12:73:0d:27:be:37:b0:5f:f2:71:51:c0:5f:
36:a1:97:f0:97:d6:cc:d7:93:bc:e8:b4:1a:cf:c0:
6e:c8:07:f7:4e:13:00:ea:3f:b4:5a:39:71:40:64:
f0:ca:12:45:cf:51:ac:43:ea:2f:dc:76:ae:d4:4d:
b7:35:22:cc:e9:35:69:5b:39:1a:a5:49:d0:32:73:
5b:48:12:1b:d4:86:9d:9d:47:51:0a:62:c2:4a:26:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9D:EB:17:DF:82:33:7B:92:7D:94:B4:6C:8D:83:CE:B5:98:20:25
X509v3 Authority Key Identifier:
keyid:72:46:83:4D:1E:49:A2:FA:27:46:DC:3F:66:D7:0C:22:D5:0F:46:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e6:88:90:3a:77:0a:a3:ca:f8:cf:ee:c4:9a:b6:8a:a3:15:
ad:4d:dd:c1:e3:f5:66:09:69:92:1a:3d:80:9b:69:85:bb:6f:
24:01:6a:72:2e:b5:c1:33:58:07:91:10:00:b4:99:91:80:5b:
3b:75:df:0a:55:fd:c3:de:a3:6f:71:1a:00:41:bb:8a:52:24:
bf:c6:90:13:b7:d5:eb:10:1e:28:5f:78:14:f5:5c:4e:7d:3a:
98:ea:b8:76:95:ed:08:86:6e:21:77:84:0b:81:b1:93:7f:48:
92:ec:86:56:3d:89:be:09:c8:c2:ff:d9:fa:c0:83:9e:d1:9d:
b3:c9:31:55:64:7d:49:9f:02:a6:ce:96:ab:c6:73:cb:11:ef:
ff:1b:13:d0:4c:23:76:27:0c:66:d3:ee:ad:a8:27:07:11:c3:
7b:a4:ce:8d:10:03:5f:7b:3e:7e:bd:48:57:89:d2:a1:23:0e:
65:5b:97:44:4e:18:19:3b:46:a5:ff:2d:6d:aa:95:d1:a6:a6:
3c:ca:fb:67:c8:b8:4c:92:06:91:12:48:5f:a1:03:03:83:2b:
91:c2:90:25:7d:38:64:a7:ab:2b:99:16:5f:1b:aa:bc:c3:a0:
cb:9c:92:de:49:f6:4c:bc:9c:7f:41:84:05:b5:d4:ff:4b:2f:
51:c0:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:39 2025 by rpki-client