Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: S+Lf8WZQ+c5bNBLshx5JlxFjSui9O2wdffyDffG2TAw=
Subject key identifier: E3:AD:0B:36:4A:DA:1D:59:2F:7E:D8:CF:7E:36:11:EC:FD:2C:EB:BE
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 0199FAD7BBB9F6563972AE7FCED677001F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0AF7
Signing time: Sun 19 Oct 2025 05:01:06 +0000
Manifest this update: Sun 19 Oct 2025 05:01:06 +0000
Manifest next update: Mon 20 Oct 2025 05:01:06 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: sHtZZbVLnXezGlxV6PoyroBwODUQrO0ZfKL6DPC1mpE=)
2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:bb:b9:f6:56:39:72:ae:7f:ce:d6:77:00:1f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Oct 19 05:01:06 2025 GMT
Not After : Oct 20 05:01:06 2025 GMT
Subject: CN=e3ad0b364ada1d592f7ed8cf7e3611ecfd2cebbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:2d:3e:ad:2f:97:e4:dc:82:7a:73:1a:ad:
70:a8:ba:e9:c8:25:b3:8d:bb:cb:e0:34:22:26:0c:
1d:a4:59:b7:e2:a5:47:cf:94:34:4f:05:3c:7d:0f:
87:41:10:da:68:1a:ad:2d:98:a0:11:af:1b:b3:50:
9e:a3:24:cb:5e:1c:fd:71:15:11:dd:36:1c:cb:54:
21:06:fd:90:4f:73:aa:ca:5a:f3:60:40:85:c1:60:
fa:c8:1d:29:11:ad:47:84:20:7f:c8:e5:18:c9:1c:
01:78:34:10:fa:8f:61:bd:95:9b:d0:31:54:ca:4a:
3e:d0:33:7f:14:0f:77:e5:cf:61:1f:fe:58:88:08:
42:c6:57:05:3b:8a:da:bf:d7:37:1c:d4:d7:3f:5a:
a9:13:74:88:1e:2c:58:cb:98:56:65:08:d7:84:3e:
a7:b9:d3:fa:03:4a:53:05:06:02:7d:5e:11:a7:c5:
e7:25:27:55:84:3e:04:ba:04:87:b4:5b:d9:b7:63:
c5:46:ec:ec:d9:1c:25:e6:64:af:09:bb:d5:96:77:
a1:c4:45:28:01:96:df:90:20:fa:e2:41:2e:41:c8:
54:7b:2c:25:65:51:19:0b:3b:72:b5:9e:63:62:94:
8a:9f:00:c5:b9:15:88:31:ee:5a:d8:19:b1:09:4c:
d8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AD:0B:36:4A:DA:1D:59:2F:7E:D8:CF:7E:36:11:EC:FD:2C:EB:BE
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ac:c5:c4:74:2f:e0:45:c3:2d:07:2d:93:cf:53:cf:8b:a3:
65:9a:fb:0b:0e:de:08:33:dd:2a:f5:a3:5d:97:1f:c2:7a:d2:
49:93:c1:aa:8e:a4:d9:f3:16:e3:ca:d4:b0:0b:2f:3f:aa:b0:
b9:43:31:df:88:fc:05:38:2c:66:ed:34:c8:11:60:ef:3c:93:
ff:a7:85:b5:11:ef:98:56:57:1a:39:ec:25:bc:60:ba:d2:17:
9e:6b:20:13:8a:ea:a7:8c:56:3e:8d:de:03:de:9e:aa:05:e5:
8c:e7:7c:c1:c8:cd:9f:84:41:09:d8:b8:59:1b:4c:60:5b:aa:
da:70:9b:6c:92:a4:1f:3a:14:c9:d4:08:5b:3c:c2:0e:15:5b:
b3:97:98:14:8d:5d:cb:08:c3:e0:a9:53:19:02:35:c9:15:1c:
58:89:7c:04:5d:4c:8a:9f:7d:f6:e6:9f:7e:ce:83:14:50:a8:
c7:77:e5:64:28:3e:65:5e:71:cd:cb:4c:c6:ed:36:2e:fe:ac:
be:f8:b2:f1:42:83:47:aa:d5:73:6a:22:53:5d:d7:ca:d9:3e:
25:db:51:26:e4:b3:59:56:a5:7d:67:ec:de:62:2b:2d:a9:12:
be:0f:b2:ae:0b:ec:c4:05:d2:83:63:f4:1e:2f:5d:88:b2:c1:
4a:ed:92:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn617u59lY5cq5/ztZ3AB8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YThlZDk3YWJlOGI4MDE0ZGQzMWMyYzI0NGY5ZjI4ZjVm
OTdhMjEwHhcNMjUxMDE5MDUwMTA2WhcNMjUxMDIwMDUwMTA2WjAzMTEwLwYDVQQD
EyhlM2FkMGIzNjRhZGExZDU5MmY3ZWQ4Y2Y3ZTM2MTFlY2ZkMmNlYmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSctPq0vl+TcgnpzGq1wqLrpyCWz
jbvL4DQiJgwdpFm34qVHz5Q0TwU8fQ+HQRDaaBqtLZigEa8bs1CeoyTLXhz9cRUR
3TYcy1QhBv2QT3OqylrzYECFwWD6yB0pEa1HhCB/yOUYyRwBeDQQ+o9hvZWb0DFU
yko+0DN/FA935c9hH/5YiAhCxlcFO4rav9c3HNTXP1qpE3SIHixYy5hWZQjXhD6n
udP6A0pTBQYCfV4Rp8XnJSdVhD4EugSHtFvZt2PFRuzs2Rwl5mSvCbvVlnehxEUo
AZbfkCD64kEuQchUeywlZVEZCztytZ5jYpSKnwDFuRWIMe5a2BmxCUzYoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOtCzZK2h1ZL37Yz342Eez9LOu+MB8GA1UdIwQY
MBaAFAmo7Zer6LgBTdMcLCRPnyj1+XohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUt
ZTdmZGY3NzQxYTY1LzEvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUtZTdmZGY3NzQxYTY1
LzEvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKzFxHQv
4EXDLQctk89Tz4ujZZr7Cw7eCDPdKvWjXZcfwnrSSZPBqo6k2fMW48rUsAsvP6qw
uUMx34j8BTgsZu00yBFg7zyT/6eFtRHvmFZXGjnsJbxgutIXnmsgE4rqp4xWPo3e
A96eqgXljOd8wcjNn4RBCdi4WRtMYFuq2nCbbJKkHzoUydQIWzzCDhVbs5eYFI1d
ywjD4KlTGQI1yRUcWIl8BF1Mip999uaffs6DFFCox3flZCg+ZV5xzctMxu02Lv6s
vviy8UKDR6rVc2oiU13Xytk+JdtRJuSzWValfWfs3mIrLakSvg+yrgvsxAXSg2P0
Hi9diLLBSu2Shw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:30 2025 by rpki-client