Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
File: cteauEKpTJvypSwgz21pussxOKs.mft (raw, json)
Hash identifier: BUwtoX/zOcbkKLtSiyc9nCfec5WxZEMhw1GDPmuqc2Q=
Subject key identifier: EF:46:1A:98:6A:AF:BF:30:74:74:62:16:9D:4A:89:66:DD:1A:10:F9
Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
Certificate issuer: /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Certificate serial: 0199FB45D39A48664D0FE9A454EEB9AB316D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
Manifest number: 87
Signing time: Sun 19 Oct 2025 07:01:21 +0000
Manifest this update: Sun 19 Oct 2025 07:01:21 +0000
Manifest next update: Mon 20 Oct 2025 07:01:21 +0000
Files and hashes: 1: cteauEKpTJvypSwgz21pussxOKs.crl (hash: 6sszWnitaQWDMkM8GB1UnAB0DJMRRxBY+iCKSH97g9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d3:9a:48:66:4d:0f:e9:a4:54:ee:b9:ab:31:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Validity
Not Before: Oct 19 07:01:21 2025 GMT
Not After : Oct 20 07:01:21 2025 GMT
Subject: CN=ef461a986aafbf30747462169d4a8966dd1a10f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:02:3c:83:74:c3:2f:77:09:1b:c3:14:0c:
ee:bb:4c:e9:56:a4:01:16:ee:a2:f0:a8:a0:2d:a7:
80:5c:06:0a:e5:eb:70:b3:d3:26:39:05:f1:3d:cd:
09:df:4b:e7:45:a9:44:74:51:a4:9f:ec:83:b3:f8:
fe:53:e0:f1:10:bb:bd:0c:5c:3a:5e:4c:79:2d:28:
71:e5:d5:71:16:23:b3:59:59:96:a9:64:e6:fb:37:
6d:2b:0e:0f:b1:ff:62:69:39:b7:1b:a6:21:28:a3:
63:05:b2:63:04:f8:2f:9c:91:da:9d:4f:00:13:e2:
46:0d:8b:99:78:bc:5b:21:b1:82:08:5b:52:7f:53:
dc:db:0e:ed:58:a2:46:a2:d6:1b:95:64:95:7d:04:
db:71:9c:bb:0c:77:ed:8d:cd:64:de:84:2c:22:ab:
d9:16:c2:4a:3f:a7:9d:64:fc:60:84:89:46:4a:aa:
4f:4e:d7:27:a9:a0:88:25:fa:fa:08:41:91:99:7b:
e6:0c:ad:e5:d3:40:46:3e:5c:14:9d:5d:3c:32:4d:
a0:01:6e:3b:29:18:0e:20:c2:10:94:ec:ce:ab:28:
d6:00:31:85:58:de:8c:95:21:3c:35:f7:47:bf:0b:
5d:60:8f:b7:9e:bf:05:75:b4:6c:54:ab:ed:85:37:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:46:1A:98:6A:AF:BF:30:74:74:62:16:9D:4A:89:66:DD:1A:10:F9
X509v3 Authority Key Identifier:
keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:74:18:71:ff:5d:b5:f1:3e:e7:51:64:b5:01:67:6a:65:21:
81:91:9d:11:04:62:fa:be:78:f9:9f:b4:d0:24:0e:f5:c0:e9:
b1:ae:a1:ab:6a:33:39:be:10:dd:10:f0:59:32:5d:5a:26:04:
26:00:b4:42:25:71:e7:1e:45:fe:ba:00:11:5f:2b:e9:01:06:
ff:3f:e0:ab:b1:26:d3:ed:52:ac:6b:72:ce:8f:d2:e5:88:e9:
49:d1:ab:53:b3:6c:7d:92:52:fb:36:55:0f:1c:28:63:ea:63:
64:cd:03:1f:f9:b4:7c:ba:69:a2:f6:fd:c6:ed:5b:5b:8d:7c:
f4:32:f3:90:1f:93:9c:e5:20:0c:32:00:4e:e8:a1:c1:e4:ee:
8c:06:a4:ca:2e:17:55:a5:2e:d8:79:a9:80:5d:0a:50:cb:b6:
32:a3:ca:43:b7:38:85:c3:c8:b4:b1:4b:c1:91:c8:ac:e5:f9:
47:17:5a:f3:09:dd:99:f8:fd:d6:1e:52:52:20:09:5b:65:60:
01:05:36:c3:b4:8f:94:39:a3:7b:2e:1a:7f:6f:f9:5d:03:77:
aa:3f:73:6a:aa:c0:61:99:9d:fa:93:00:af:31:d2:17:5d:88:
4b:8e:0b:ae:7f:ff:bc:ee:8a:81:72:7e:d5:3e:14:35:39:e7:
18:3c:17:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RdOaSGZND+mkVO65qzFtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDc5YWI4NDJhOTRjOWJmMmE1MmMyMGNmNmQ2OWJhY2Iz
MTM4YWIwHhcNMjUxMDE5MDcwMTIxWhcNMjUxMDIwMDcwMTIxWjAzMTEwLwYDVQQD
EyhlZjQ2MWE5ODZhYWZiZjMwNzQ3NDYyMTY5ZDRhODk2NmRkMWExMGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jQCPIN0wy93CRvDFAzuu0zpVqQB
Fu6i8KigLaeAXAYK5etws9MmOQXxPc0J30vnRalEdFGkn+yDs/j+U+DxELu9DFw6
Xkx5LShx5dVxFiOzWVmWqWTm+zdtKw4Psf9iaTm3G6YhKKNjBbJjBPgvnJHanU8A
E+JGDYuZeLxbIbGCCFtSf1Pc2w7tWKJGotYblWSVfQTbcZy7DHftjc1k3oQsIqvZ
FsJKP6edZPxghIlGSqpPTtcnqaCIJfr6CEGRmXvmDK3l00BGPlwUnV08Mk2gAW47
KRgOIMIQlOzOqyjWADGFWN6MlSE8NfdHvwtdYI+3nr8FdbRsVKvthTexewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9GGphqr78wdHRiFp1KiWbdGhD5MB8GA1UdIwQY
MBaAFHLXmrhCqUyb8qUsIM9tabrLMTirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RlYXVFS3BUSnZ5cFN3Z3oyMXB1c3N4T0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMWNiZDItZWRmMC00MjIyLWEzZWIt
MzJkZDM2ZTM0YmVmLzEvY3RlYXVFS3BUSnZ5cFN3Z3oyMXB1c3N4T0tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zMWNiZDItZWRmMC00MjIyLWEzZWItMzJkZDM2ZTM0YmVm
LzEvY3RlYXVFS3BUSnZ5cFN3Z3oyMXB1c3N4T0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknQYcf9d
tfE+51FktQFnamUhgZGdEQRi+r54+Z+00CQO9cDpsa6hq2ozOb4Q3RDwWTJdWiYE
JgC0QiVx5x5F/roAEV8r6QEG/z/gq7Em0+1SrGtyzo/S5YjpSdGrU7NsfZJS+zZV
DxwoY+pjZM0DH/m0fLppovb9xu1bW4189DLzkB+TnOUgDDIATuihweTujAakyi4X
VaUu2HmpgF0KUMu2MqPKQ7c4hcPItLFLwZHIrOX5Rxda8wndmfj91h5SUiAJW2Vg
AQU2w7SPlDmjey4af2/5XQN3qj9zaqrAYZmd+pMArzHSF12IS44Lrn//vO6KgXJ+
1T4UNTnnGDwXiw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:07 2025 by rpki-client