Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: n5wFybMTHz+Anz9KP/i3PP9cxhG8kUoJLQrsyYg6tQU=
Subject key identifier: 70:32:9B:2F:50:60:63:E6:B0:16:81:B1:D2:2C:B7:C5:83:39:BA:82
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 019A71EE63D6B30957573DE862AECEA39288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 06C5
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: obvqMJSFUVmP0FJ0dCsxLdm4aGZjKBrgaQonG6/RbDM=)
2: efoDT2af1r3VIxCXKIZiUqYjb70.roa (hash: Satp0B+ZSfcMrrpGb8DTBT0YLETw5Fxx+fyID/mnlcA=)
3: omka6JZ3cxuqRg8okuBPziVBWRs.roa (hash: 5reM5Q1cDG1s+QskdXUc/zeFl29KsaBLiyNK/rBISK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:63:d6:b3:09:57:57:3d:e8:62:ae:ce:a3:92:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=70329b2f506063e6b01681b1d22cb7c58339ba82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:12:f9:e6:cd:4b:bc:d1:f0:5e:49:0d:68:
1e:ca:63:fa:b5:1a:2d:b9:eb:f0:68:04:19:3a:b0:
20:6c:8a:1e:6f:a4:79:29:1d:16:55:aa:42:04:0b:
8d:a8:63:d1:35:13:08:3c:01:41:f0:ff:4f:0a:3a:
31:d0:8b:4b:a1:c4:db:e4:b9:47:8a:88:a6:d2:0a:
29:9a:c2:dd:65:58:f4:fc:0f:d1:51:50:f9:f8:a6:
b8:51:67:ae:0b:f0:3c:5e:c3:6c:25:cd:7d:29:24:
ac:f4:e7:34:79:c9:81:8d:83:39:b6:22:63:4f:e5:
2d:4a:c2:4c:b7:0a:10:35:d9:b5:28:06:76:07:b5:
9d:01:01:dd:f9:ea:d3:78:5a:b4:63:f1:e5:8c:aa:
df:ee:18:e5:74:f9:3e:23:a0:32:1f:36:e8:c7:ee:
9e:9f:17:01:36:03:6d:bc:ef:e9:45:46:5f:26:07:
96:99:47:13:3c:04:c3:de:08:2e:df:5b:e5:dc:4b:
69:34:66:57:98:93:d2:f3:7f:5d:45:3a:f2:fa:f7:
c0:3d:f5:27:d4:da:43:41:69:32:ef:a8:1e:fb:28:
1f:e4:38:72:40:5e:85:64:94:ac:d6:bb:52:b4:23:
09:f2:f1:47:1b:e6:85:fc:64:c9:c3:f7:fe:21:e4:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:32:9B:2F:50:60:63:E6:B0:16:81:B1:D2:2C:B7:C5:83:39:BA:82
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fd:3e:f7:f7:4a:96:1c:7c:11:50:4b:15:f7:9a:e8:37:95:
6e:7e:f6:09:90:a1:29:ff:0e:e0:eb:a5:67:82:3a:df:0f:fc:
6a:d0:b9:b7:5a:83:bb:14:00:7f:41:9e:f2:72:f3:d9:3a:02:
96:01:72:58:90:40:a7:d4:38:b3:be:41:a5:b1:63:e6:0c:73:
e4:18:df:d0:a0:b3:f4:b6:d9:83:e1:19:20:42:9f:e8:a3:c8:
e4:5d:af:f8:5f:67:c9:0a:2b:d0:82:67:3b:b7:95:af:33:30:
b6:fd:aa:7f:a1:59:c8:fb:bb:c1:70:e8:aa:dd:ed:87:a3:b4:
2c:bd:c0:85:d5:bc:a3:63:5d:9f:af:cb:8f:98:08:a8:57:4e:
bf:ef:bc:a4:e8:a2:15:80:ff:17:27:5a:7f:20:e2:f0:3e:97:
2e:a3:4d:b7:7a:38:b8:51:e6:a4:17:bc:34:f5:b0:b2:b2:0e:
f9:04:74:60:e1:8b:9c:02:ef:4c:3f:8b:14:6e:01:e6:f6:76:
fd:49:eb:aa:6a:de:bc:65:84:0e:4e:d5:a8:fa:26:0b:11:26:
ee:12:7d:18:67:10:67:68:0d:d7:6d:d1:d1:b5:e3:94:6d:14:
55:47:a4:72:d2:30:4a:cd:d5:9d:33:ec:c6:29:8d:ee:cd:27:
19:8a:bf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:41 2025 by rpki-client