Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: OppvLt/NxXAjiUPH3V6kGcXElcHn/0DqmAGy7hp73k0=
Subject key identifier: 68:21:B9:9C:7E:32:9A:27:47:B4:D0:A8:19:D0:1F:60:7E:BA:D6:EA
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 019923A0BF777119E224EDFB689A26764C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 10:02:41 +0000
Manifest this update: Sun 07 Sep 2025 10:02:41 +0000
Manifest next update: Mon 08 Sep 2025 10:02:41 +0000
Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: cni8fJj/4Lsy81Ognca6TbsiHz/WwpGiPU7CgRkMy8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:bf:77:71:19:e2:24:ed:fb:68:9a:26:76:4c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Sep 7 10:02:41 2025 GMT
Not After : Sep 8 10:02:41 2025 GMT
Subject: CN=6821b99c7e329a2747b4d0a819d01f607ebad6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e2:0e:71:d2:86:43:ae:5b:72:a4:06:41:09:
fb:09:99:f4:c8:8b:f5:e9:86:eb:7f:c3:7c:b9:52:
41:2a:9b:2c:ff:d3:1b:ee:12:53:dc:2a:6a:96:63:
53:ac:25:6a:fc:af:ae:ff:f3:eb:cd:2a:4e:f7:74:
06:4a:43:1f:1e:d7:af:1f:60:8d:9f:5c:62:a8:a2:
7a:ee:8f:a0:0f:e9:26:4f:a5:45:12:0d:aa:7b:f8:
54:1d:a6:50:2c:78:0b:af:e1:41:c6:a8:f0:f7:52:
75:04:29:ae:f2:ca:e3:8a:de:c2:7d:98:e5:d9:e6:
d2:7c:7e:03:4d:33:2c:6b:59:01:f5:b5:a1:98:85:
d7:be:cf:14:88:97:73:bf:8d:6f:38:bc:db:6f:6b:
4e:41:ed:f0:35:78:86:35:71:d1:6b:39:40:20:b1:
c0:67:2b:4a:f6:4b:3a:8c:09:3a:71:40:c7:80:04:
54:ff:77:d0:b8:32:94:00:41:a3:8f:1d:fa:c2:a0:
d6:f4:ff:9b:38:34:fa:28:ae:29:54:37:ae:a2:cc:
bb:15:ce:89:a6:2b:c4:22:83:4c:72:59:d3:1c:c2:
48:b9:73:ce:9e:30:58:14:52:03:c9:6e:e9:8f:6c:
3b:92:e2:54:5f:81:d2:44:6e:07:3c:bd:d3:0d:1c:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:21:B9:9C:7E:32:9A:27:47:B4:D0:A8:19:D0:1F:60:7E:BA:D6:EA
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ea:d6:7f:c4:68:2d:e8:ef:81:1a:25:67:20:11:3e:aa:41:
6d:d4:b1:35:cd:2b:9b:30:38:88:0e:e9:44:c0:62:a2:dd:c2:
d6:0f:f8:f9:c7:97:1a:0f:f4:52:ff:52:4b:fe:0b:8e:1a:ae:
65:8a:ac:44:34:e7:c6:b4:1e:7b:24:de:54:dd:53:26:90:23:
34:35:af:0a:62:a9:9a:e0:85:e0:2a:3a:2f:20:a5:54:3d:f1:
7d:f8:c4:df:9e:fe:a3:19:b2:06:9d:3a:ca:52:c8:36:14:4f:
41:4a:17:cc:62:c9:3b:48:a5:df:e8:7f:f2:bc:27:97:02:d0:
cc:55:75:ed:a3:43:7d:80:11:e0:8e:62:1a:0e:c2:3d:39:52:
28:ac:2f:f9:db:99:a1:bd:ec:c0:68:d4:59:bc:25:26:fb:94:
1b:33:fc:2e:83:e5:5e:64:cd:fd:c6:90:90:db:53:95:d0:18:
05:13:99:f4:b0:5d:d0:a4:17:d1:e7:c0:53:81:33:f0:6e:48:
51:cb:c4:14:87:b5:14:ff:31:72:c5:02:b1:29:09:16:3a:5a:
17:74:2c:c4:41:21:a3:72:f7:62:1a:9e:1d:cc:76:f1:4c:bf:
f6:6f:2c:ec:ef:f0:1e:7e:3a:cb:38:5c:26:cd:66:d6:bd:9b:
fa:50:3a:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoL93cRniJO37aJomdkxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDUxOGE1NzA2OWNhZmQ4M2UyMWI1YzYwZmIyNjJkOGVk
ZjM0MmIwHhcNMjUwOTA3MTAwMjQxWhcNMjUwOTA4MTAwMjQxWjAzMTEwLwYDVQQD
Eyg2ODIxYjk5YzdlMzI5YTI3NDdiNGQwYTgxOWQwMWY2MDdlYmFkNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+IOcdKGQ65bcqQGQQn7CZn0yIv1
6Ybrf8N8uVJBKpss/9Mb7hJT3CpqlmNTrCVq/K+u//PrzSpO93QGSkMfHtevH2CN
n1xiqKJ67o+gD+kmT6VFEg2qe/hUHaZQLHgLr+FBxqjw91J1BCmu8srjit7CfZjl
2ebSfH4DTTMsa1kB9bWhmIXXvs8UiJdzv41vOLzbb2tOQe3wNXiGNXHRazlAILHA
ZytK9ks6jAk6cUDHgARU/3fQuDKUAEGjjx36wqDW9P+bODT6KK4pVDeuosy7Fc6J
pivEIoNMclnTHMJIuXPOnjBYFFIDyW7pj2w7kuJUX4HSRG4HPL3TDRxBGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGghuZx+MponR7TQqBnQH2B+utbqMB8GA1UdIwQY
MBaAFHJFGKVwacr9g+IbXGD7Ji2O3zQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NTM1NTAtMDI2Ni00ZjJlLThkYzMt
N2Y0YmQ5YjU0ZTYyLzEvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NTM1NTAtMDI2Ni00ZjJlLThkYzMtN2Y0YmQ5YjU0ZTYy
LzEvY2tVWXBYQnB5djJENGh0Y1lQc21MWTdmTkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxurWf8Ro
LejvgRolZyARPqpBbdSxNc0rmzA4iA7pRMBiot3C1g/4+ceXGg/0Uv9SS/4Ljhqu
ZYqsRDTnxrQeeyTeVN1TJpAjNDWvCmKpmuCF4Co6LyClVD3xffjE357+oxmyBp06
ylLINhRPQUoXzGLJO0il3+h/8rwnlwLQzFV17aNDfYAR4I5iGg7CPTlSKKwv+duZ
ob3swGjUWbwlJvuUGzP8LoPlXmTN/caQkNtTldAYBROZ9LBd0KQX0efAU4Ez8G5I
UcvEFIe1FP8xcsUCsSkJFjpaF3QsxEEho3L3YhqeHcx28Uy/9m8s7O/wHn46yzhc
Js1m1r2b+lA6Mw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:13 2025 by rpki-client