Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: Qt8f3KzjHe2mlxP1e65UYaINvbJrOtFDERkWcJ2I1SI=
Subject key identifier: A4:2A:62:36:16:5E:47:FA:5E:D0:92:EB:79:62:EC:35:90:46:19:8E
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 01993B02CEA082DD67AEF117212AC4770184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 0362
Signing time: Thu 11 Sep 2025 23:01:03 +0000
Manifest this update: Thu 11 Sep 2025 23:01:03 +0000
Manifest next update: Fri 12 Sep 2025 23:01:03 +0000
Files and hashes: 1: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: EZo0yWVSaBv4nNZu14drFa6rz3Qi5QuyFkrEYfMBapQ=)
2: kMy_Ytqu-62SnckodYKnIddoAV4.roa (hash: DNh5a1DbxWEI9P2LYvBxRTY+TTerG2Ce0TBwgUaWhng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:02:ce:a0:82:dd:67:ae:f1:17:21:2a:c4:77:01:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Sep 11 23:01:03 2025 GMT
Not After : Sep 12 23:01:03 2025 GMT
Subject: CN=a42a6236165e47fa5ed092eb7962ec359046198e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:0b:9d:78:88:e8:16:2e:31:4a:24:c7:76:
52:2a:7e:25:6d:98:22:74:9f:73:d5:15:13:39:ab:
2a:23:b7:e6:a8:5f:82:8c:08:01:33:cd:43:d6:e7:
71:d8:2d:47:15:82:ff:f5:e4:46:a4:55:fa:c8:85:
59:cb:44:98:77:a8:1e:97:be:c2:67:4c:1f:df:b1:
9c:fe:52:a3:e9:55:b0:8a:51:34:90:26:1d:97:65:
e8:13:f8:a6:1e:94:7d:b2:ca:9d:2c:e4:10:94:de:
46:04:d7:55:1a:25:a2:a3:bb:0d:2a:b7:9f:0a:40:
0f:70:fb:d8:75:ea:04:9f:ff:ae:63:f0:12:7d:2a:
3a:17:54:23:7f:e6:6a:43:f0:df:cb:64:09:d8:e3:
37:1e:c4:fc:30:b7:f6:b1:ca:d4:6c:9d:a1:fa:3a:
f4:5f:ef:05:71:96:c3:52:15:27:4e:84:c4:66:63:
60:a7:e4:35:5b:41:a1:3a:19:78:8d:87:0a:79:fb:
6f:24:c7:48:3e:12:d8:25:b7:b0:d3:c6:93:47:38:
ef:9b:66:dd:a6:10:1c:9a:dd:36:43:3b:e3:c8:49:
0d:fd:88:57:44:13:88:6d:a7:48:dd:52:04:cc:d2:
17:c3:18:da:ef:d0:6a:e3:64:c1:91:f8:18:c1:97:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2A:62:36:16:5E:47:FA:5E:D0:92:EB:79:62:EC:35:90:46:19:8E
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f1:f2:7f:cf:33:f7:2e:ee:06:e5:bb:53:24:91:1a:22:ad:
2b:ea:80:e1:c5:a9:a9:10:42:3a:10:be:9d:a1:86:9d:f3:93:
0a:e4:7b:87:4e:e4:c6:4c:fc:a7:63:78:12:7e:1b:bf:6f:ee:
79:13:04:9f:e0:e1:b6:19:3a:40:23:6a:b3:09:ce:30:58:04:
98:31:ed:d1:39:a5:1b:87:ae:db:9a:11:c0:7e:b4:43:a3:c6:
2f:bb:9e:54:4d:67:83:58:6f:2e:2e:11:e8:c1:5d:03:f4:f5:
94:64:18:5c:0e:e3:67:f3:f0:d0:f6:88:10:f1:04:11:26:00:
98:92:a6:2c:44:ca:c5:60:d6:82:41:e0:2a:64:4d:95:da:3c:
3e:db:3a:84:55:5d:b1:ef:f4:ba:49:09:d2:d0:23:cb:ff:d9:
ce:d5:e2:51:3f:d1:d6:83:17:da:a1:3d:f7:68:b5:07:a8:c9:
4c:c3:e7:6f:b8:c9:3c:7f:13:b9:ca:c8:04:fc:d3:d4:ff:be:
c2:3d:d1:06:f4:92:1a:05:a3:83:4e:33:15:c9:88:e8:c8:41:
28:1f:26:5e:6c:b0:3e:b8:ca:51:77:51:4c:4f:e4:57:e5:1c:
17:75:bb:5d:fb:ee:59:35:c6:bd:9d:2b:6c:0d:10:94:d1:73:
fe:43:47:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk7As6ggt1nrvEXISrEdwGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDhjMDQ4MTZhYTYxZjkzNWUxNGE2NGMzZWJiYTkxMGJh
NjUxZjQwHhcNMjUwOTExMjMwMTAzWhcNMjUwOTEyMjMwMTAzWjAzMTEwLwYDVQQD
EyhhNDJhNjIzNjE2NWU0N2ZhNWVkMDkyZWI3OTYyZWMzNTkwNDYxOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviILnXiI6BYuMUokx3ZSKn4lbZgi
dJ9z1RUTOasqI7fmqF+CjAgBM81D1udx2C1HFYL/9eRGpFX6yIVZy0SYd6gel77C
Z0wf37Gc/lKj6VWwilE0kCYdl2XoE/imHpR9ssqdLOQQlN5GBNdVGiWio7sNKref
CkAPcPvYdeoEn/+uY/ASfSo6F1Qjf+ZqQ/Dfy2QJ2OM3HsT8MLf2scrUbJ2h+jr0
X+8FcZbDUhUnToTEZmNgp+Q1W0GhOhl4jYcKeftvJMdIPhLYJbew08aTRzjvm2bd
phAcmt02QzvjyEkN/YhXRBOIbadI3VIEzNIXwxja79Bq42TBkfgYwZfsywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQqYjYWXkf6XtCS63li7DWQRhmOMB8GA1UdIwQY
MBaAFApIwEgWqmH5NeFKZMPrupELplH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEt
MzFhZWMwN2U5NDVhLzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wNjllYWItZjgwZC00OTUzLWFiYzEtMzFhZWMwN2U5NDVh
LzEvQ2tqQVNCYXFZZmsxNFVwa3ctdTZrUXVtVWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfHyf88z
9y7uBuW7UySRGiKtK+qA4cWpqRBCOhC+naGGnfOTCuR7h07kxkz8p2N4En4bv2/u
eRMEn+Dhthk6QCNqswnOMFgEmDHt0TmlG4eu25oRwH60Q6PGL7ueVE1ng1hvLi4R
6MFdA/T1lGQYXA7jZ/Pw0PaIEPEEESYAmJKmLETKxWDWgkHgKmRNldo8Pts6hFVd
se/0ukkJ0tAjy//ZztXiUT/R1oMX2qE992i1B6jJTMPnb7jJPH8TucrIBPzT1P++
wj3RBvSSGgWjg04zFcmI6MhBKB8mXmywPrjKUXdRTE/kV+UcF3W7XfvuWTXGvZ0r
bA0QlNFz/kNHrA==
-----END CERTIFICATE-----
Generated at Fri Sep 12 02:29:54 2025 by rpki-client