Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
File: ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft (raw, json)
Hash identifier: tjMspw1Q87VXk/ISFtpj1TzdrB7dwUkSG5tRKP+pCV4=
Subject key identifier: 11:2F:EB:F3:1A:99:F8:F5:CD:4B:24:3C:C4:27:13:80:37:CE:E6:D6
Authority key identifier: 72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2
Certificate issuer: /CN=724f14189ab7105620375daf9baa814d6dd937a2
Certificate serial: 019921B1BB7632534AF19645E175CF9A3952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
Manifest number: 07DF
Signing time: Sun 07 Sep 2025 01:01:59 +0000
Manifest this update: Sun 07 Sep 2025 01:01:59 +0000
Manifest next update: Mon 08 Sep 2025 01:01:59 +0000
Files and hashes: 1: ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl (hash: fWtR4JMu9ZSlW9izVq7AFGZ+L74mBZWL9OgcKZreexA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:bb:76:32:53:4a:f1:96:45:e1:75:cf:9a:39:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724f14189ab7105620375daf9baa814d6dd937a2
Validity
Not Before: Sep 7 01:01:59 2025 GMT
Not After : Sep 8 01:01:59 2025 GMT
Subject: CN=112febf31a99f8f5cd4b243cc427138037cee6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:be:fb:74:09:67:b1:75:5e:64:87:ee:71:
de:8f:03:90:ff:4c:b0:a3:17:e4:d2:ca:bf:5b:6f:
5e:39:d1:85:8a:eb:df:df:ce:1a:e9:ae:42:17:30:
cc:00:95:08:4c:af:d6:e0:3c:4d:43:f2:ad:36:53:
be:c6:de:cd:43:25:c7:0e:cd:28:0c:40:58:16:ad:
c2:65:d2:6b:ac:02:0e:99:2a:85:24:1d:6b:c2:28:
6c:de:dc:b7:9a:4d:1a:57:78:4d:b5:63:a9:bf:6e:
3a:6b:ff:29:73:e6:f2:ac:24:27:53:3c:94:a1:a9:
e7:c7:c8:5e:a2:1a:01:a9:98:fc:ac:b6:3a:a6:4e:
11:6c:d8:a0:ce:69:29:47:0e:ca:11:6a:0e:1b:aa:
b7:c1:8d:16:47:d5:2b:44:72:80:9d:5d:4b:cb:03:
bd:1a:57:a1:74:05:97:32:a5:17:e7:84:5a:5d:ad:
c9:d8:76:c3:cf:08:7e:50:94:ff:e5:61:3a:00:8c:
49:a9:66:fb:b1:2f:02:4e:5e:6f:f2:7b:db:a6:93:
69:84:7e:da:d4:40:a8:a0:a0:86:a7:6e:40:51:ed:
eb:a3:a1:dc:0c:6e:e9:01:5b:b2:a5:89:4f:26:5c:
3c:e7:5a:f8:3e:dd:f3:46:39:e7:22:2b:70:9a:e9:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:EB:F3:1A:99:F8:F5:CD:4B:24:3C:C4:27:13:80:37:CE:E6:D6
X509v3 Authority Key Identifier:
keyid:72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:54:ef:a6:63:21:c6:c7:0f:65:9b:b9:35:12:1a:8f:7d:87:
42:ec:52:76:bf:bd:d1:82:7f:00:c6:5f:7b:6b:9b:06:84:f4:
71:e5:08:af:eb:ae:59:b8:54:20:1f:18:57:d6:39:b3:1f:1f:
94:1a:be:59:4e:ac:e6:f7:91:44:93:cf:5f:f9:16:50:93:cc:
f6:9d:48:d1:e6:9e:18:9c:a8:fb:a7:06:c0:4f:11:d6:42:d1:
5e:44:70:e7:26:97:51:5e:a0:64:eb:9a:68:00:fc:f7:5f:e2:
9a:9d:53:aa:f8:f3:54:6d:da:62:c0:98:4a:e7:b1:3e:b2:a6:
48:91:46:8d:58:6e:e5:c9:5c:97:17:ec:f0:2d:07:db:d7:83:
8a:18:51:c7:c0:a6:fa:cf:e5:8a:c1:be:cf:6f:cd:8b:40:33:
94:d6:1d:a2:c2:e9:53:5a:c4:c6:66:a9:9d:c0:25:b4:23:e6:
dc:74:c8:a8:0e:1f:d6:87:1b:65:b0:69:86:0c:ce:00:64:a5:
74:8e:c4:ae:20:0a:7d:7b:97:90:86:67:95:36:d5:98:49:8e:
36:78:9f:42:41:c9:04:e8:af:4c:5d:7b:96:a6:33:c0:a3:21:
ce:02:ac:84:aa:a5:9e:29:19:05:59:8a:4e:80:49:6f:52:80:
c9:d0:c2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:12 2025 by rpki-client