Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: /AYDd5v66hopcDM2Es/RPifnA4qwYke4e5V9kbESJV8=
Subject key identifier: A7:10:23:51:AD:D0:F8:E5:C7:E6:EB:B1:A3:28:31:98:41:0C:AF:51
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 019A71B8E2622FB562D2D721B6F880144440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:02:13 +0000
Manifest this update: Tue 11 Nov 2025 07:02:13 +0000
Manifest next update: Wed 12 Nov 2025 07:02:13 +0000
Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: GXMRCw4PmkLdsz6P+SCcEC3qkoJvNLgRMtz5C0ymaNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e2:62:2f:b5:62:d2:d7:21:b6:f8:80:14:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Nov 11 07:02:13 2025 GMT
Not After : Nov 12 07:02:13 2025 GMT
Subject: CN=a7102351add0f8e5c7e6ebb1a3283198410caf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:56:6f:09:91:30:a1:a9:c1:d0:fc:24:84:
b3:15:30:57:af:9d:50:6e:94:50:99:a6:50:56:af:
10:dc:52:5c:e6:10:7b:a2:16:50:ba:99:de:3a:87:
68:ec:87:74:31:a5:7b:8b:16:c2:a4:e8:7f:d5:39:
64:0e:16:d1:8d:c4:39:0d:94:29:fe:90:eb:57:58:
95:2b:43:30:92:de:8e:77:35:22:bd:e5:f5:78:3b:
b9:49:ff:90:82:cf:56:c0:15:22:1e:8e:ee:76:cb:
33:1f:d1:1e:1d:b7:8d:6b:73:e1:9b:39:3b:36:17:
9b:5c:a0:28:e8:13:b3:25:bd:f1:ba:b8:a7:50:5a:
11:ba:e9:49:98:41:4c:a2:40:d9:6e:45:40:4e:99:
57:17:46:25:94:6f:c5:e8:3f:12:5c:89:f2:9d:49:
5a:84:f3:25:9a:83:48:8d:ca:92:51:d7:26:c4:d3:
b8:aa:e0:de:cb:b6:74:ad:23:f9:0a:a9:80:b5:15:
38:bc:fb:20:09:8d:66:cb:09:c3:10:a0:b1:46:a1:
b3:6c:b5:4a:b9:75:04:b6:82:cf:ac:97:de:0f:e0:
7a:60:21:00:94:77:e2:14:a6:bd:3e:37:28:c3:57:
6c:61:a2:dc:79:ea:57:f2:a8:86:11:ca:e5:e4:86:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:10:23:51:AD:D0:F8:E5:C7:E6:EB:B1:A3:28:31:98:41:0C:AF:51
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:57:fa:2f:95:54:70:6e:85:9f:fb:89:31:bd:0d:63:1c:1b:
74:9a:d7:18:f8:ea:ff:d1:bd:dc:13:94:e9:70:d2:32:1d:19:
60:35:51:72:6d:b4:c6:94:d7:7c:0c:1a:8c:6b:26:9a:8e:1d:
5e:6a:ff:b4:fe:f7:7c:a1:2e:83:1f:22:cf:17:96:ab:e6:db:
09:0a:4b:b6:fb:6d:6c:73:0b:f8:07:29:17:08:43:a7:3b:f3:
59:f4:ab:22:da:2d:5a:51:c6:17:37:12:f4:a9:97:ea:b2:fd:
c5:7a:1c:77:c4:4c:a6:66:6f:b8:6c:42:cf:24:87:7d:82:18:
16:a0:23:63:18:2f:06:61:07:a9:7a:07:27:39:2f:70:05:df:
3d:79:63:54:6d:10:a6:74:14:97:84:1e:f6:e9:69:e5:f1:88:
94:6d:73:78:30:9d:70:a1:02:0b:28:bd:7c:a8:74:00:c7:9a:
11:67:db:97:27:53:ac:28:b4:43:c0:7f:7d:3c:6c:ed:4f:37:
5f:dd:3e:e7:a5:a7:e1:1a:d5:15:5c:de:82:ed:62:35:22:04:
df:2b:87:42:2a:0a:4b:f4:73:18:d5:e5:1b:e0:02:77:d2:b0:
55:d2:4e:e0:90:e0:5a:80:cc:54:1e:aa:6a:76:1c:bc:a5:c6:
77:85:fb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:41 2025 by rpki-client