Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: wkvXlN+PNExEQHEagM/ajJaEBRBfDfDziauTMW/IG7g=
Subject key identifier: 11:99:53:04:AF:FD:DD:4A:66:FF:66:1A:FC:8F:4E:F5:2F:F8:97:25
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 019922556FB0CA61E5860F129E883833C030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 04:00:48 +0000
Manifest this update: Sun 07 Sep 2025 04:00:48 +0000
Manifest next update: Mon 08 Sep 2025 04:00:48 +0000
Files and hashes: 1: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: a5N1ThZU5lHY28zWRZFagHRsb3HZpf/fJlBMC7+g0lY=)
2: tICvfkE-wd7ljGY6sghDtS75C50.roa (hash: EofEa7cxTHv8xJhHBChQPwYV0i7JZnqjIowIrpKVJDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:6f:b0:ca:61:e5:86:0f:12:9e:88:38:33:c0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Sep 7 04:00:48 2025 GMT
Not After : Sep 8 04:00:48 2025 GMT
Subject: CN=11995304affddd4a66ff661afc8f4ef52ff89725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:a4:17:3d:37:2e:45:90:79:3d:46:94:a3:
8b:33:48:da:14:9a:0a:b4:a7:94:84:31:d0:9d:a4:
81:3c:31:c7:bc:a3:91:e2:da:b4:02:94:c0:55:20:
da:34:de:c6:b5:17:3e:a9:c6:39:8a:5e:71:9c:24:
10:3d:29:48:54:cf:97:fd:4f:5f:41:69:8c:13:1b:
ec:20:64:eb:3f:67:2a:f6:1c:8f:aa:d0:43:be:b8:
3a:b9:a0:19:9c:e1:c4:6c:00:13:d6:ca:65:23:87:
f9:10:c4:27:6a:09:fc:0e:d4:1d:43:2d:9c:ec:98:
74:50:41:a2:3a:d8:b6:fc:25:2a:ee:1b:e5:9c:12:
1b:5c:77:ec:f2:0f:7a:dc:dd:51:99:7d:98:1e:e2:
c7:46:ee:fa:58:88:80:20:24:3f:8e:d7:02:ba:85:
da:b4:ce:c8:05:38:b8:f8:75:74:71:e7:0a:79:ce:
16:0b:c4:d5:4d:9f:a3:cc:b2:63:d2:a0:c6:4a:75:
6f:d9:67:c0:f8:f6:dd:63:34:1c:f5:01:66:90:6e:
22:bb:54:7b:1f:d8:9a:b5:d0:ac:65:0d:ee:46:b5:
b1:dd:e0:ca:d7:64:70:7f:71:16:2a:63:b1:ad:61:
9c:be:64:fa:f3:19:77:84:2b:1a:cb:de:32:95:be:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:99:53:04:AF:FD:DD:4A:66:FF:66:1A:FC:8F:4E:F5:2F:F8:97:25
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:64:ab:fb:68:6a:90:cb:2e:58:fb:4e:f9:52:aa:a4:79:4c:
2a:32:09:a7:ab:3b:fb:ff:52:b1:c6:17:47:ba:69:0e:3c:1a:
c4:4b:ef:9b:ce:3c:7d:b6:e6:21:2b:42:db:77:a9:d4:04:3a:
d2:49:40:40:79:58:b5:2b:55:1a:cb:f6:70:a4:bd:a6:31:17:
25:32:7e:04:c9:73:7b:9e:28:73:72:b1:ee:f1:f6:38:1a:da:
4c:89:6c:e2:2d:78:02:02:55:7e:9b:2d:f3:b7:87:3c:24:ed:
a7:6d:fe:d8:93:21:45:d8:8b:42:dc:e8:c3:b5:10:a3:52:25:
69:30:18:66:22:8f:79:56:d1:1a:5f:2c:7a:77:37:ae:e9:fd:
59:73:cc:f7:e3:de:e4:a0:02:83:4a:1e:dd:7c:6d:86:35:28:
ff:12:c9:23:7b:77:bc:47:cb:9f:2a:7a:a0:e4:04:90:40:80:
19:ce:15:a8:9c:af:fe:cb:d9:58:5f:c6:fd:97:3c:1a:3f:96:
3a:2f:76:03:3e:14:23:ce:ea:7a:0f:8c:40:bb:61:4f:f2:a6:
b7:58:5a:de:31:2a:60:6e:8f:b9:dd:22:2a:44:8f:67:ac:9c:
17:1f:b9:a2:fe:5c:8a:93:68:f4:27:b1:ef:c7:4a:6b:e5:72:
ca:6c:a3:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVW+wymHlhg8Snog4M8AwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGJkMWQzMGY3MjM1Y2Q3MTczOWMwNDIzMTBkYzI2MDgw
NzM4ZjYwHhcNMjUwOTA3MDQwMDQ4WhcNMjUwOTA4MDQwMDQ4WjAzMTEwLwYDVQQD
EygxMTk5NTMwNGFmZmRkZDRhNjZmZjY2MWFmYzhmNGVmNTJmZjg5NzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFekFz03LkWQeT1GlKOLM0jaFJoK
tKeUhDHQnaSBPDHHvKOR4tq0ApTAVSDaNN7GtRc+qcY5il5xnCQQPSlIVM+X/U9f
QWmMExvsIGTrP2cq9hyPqtBDvrg6uaAZnOHEbAAT1splI4f5EMQnagn8DtQdQy2c
7Jh0UEGiOti2/CUq7hvlnBIbXHfs8g963N1RmX2YHuLHRu76WIiAICQ/jtcCuoXa
tM7IBTi4+HV0cecKec4WC8TVTZ+jzLJj0qDGSnVv2WfA+PbdYzQc9QFmkG4iu1R7
H9iatdCsZQ3uRrWx3eDK12Rwf3EWKmOxrWGcvmT68xl3hCsay94ylb40NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGZUwSv/d1KZv9mGvyPTvUv+JclMB8GA1UdIwQY
MBaAFApL0dMPcjXNcXOcBCMQ3CYIBzj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEt
Mzg4NDQzZDVmMDBmLzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEtMzg4NDQzZDVmMDBm
LzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmSr+2hq
kMsuWPtO+VKqpHlMKjIJp6s7+/9SscYXR7ppDjwaxEvvm848fbbmIStC23ep1AQ6
0klAQHlYtStVGsv2cKS9pjEXJTJ+BMlze54oc3Kx7vH2OBraTIls4i14AgJVfpst
87eHPCTtp23+2JMhRdiLQtzow7UQo1IlaTAYZiKPeVbRGl8senc3run9WXPM9+Pe
5KACg0oe3XxthjUo/xLJI3t3vEfLnyp6oOQEkECAGc4VqJyv/svZWF/G/Zc8Gj+W
Oi92Az4UI87qeg+MQLthT/Kmt1ha3jEqYG6Pud0iKkSPZ6ycFx+5ov5cipNo9Cex
78dKa+VyymyjCw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:25 2025 by rpki-client