Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: DbRu8nRcrmI7YxsCW4OmvLk3a+sCeAtyYixdXul4tfQ=
Subject key identifier: 26:4B:76:FF:87:F7:DC:13:FB:A2:DE:71:F9:5C:F2:43:A2:F9:3E:3D
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 0199FE7DD848F407EA6CCA9445E87B77931E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 13FC
Signing time: Sun 19 Oct 2025 22:01:24 +0000
Manifest this update: Sun 19 Oct 2025 22:01:24 +0000
Manifest next update: Mon 20 Oct 2025 22:01:24 +0000
Files and hashes: 1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: GuKOjqLCfjzsgKS1lVzh/+uOrjDxdznPYy9fBAOPQqw=)
2: FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (hash: QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d8:48:f4:07:ea:6c:ca:94:45:e8:7b:77:93:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Oct 19 22:01:24 2025 GMT
Not After : Oct 20 22:01:24 2025 GMT
Subject: CN=264b76ff87f7dc13fba2de71f95cf243a2f93e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:42:71:3f:7d:7e:c4:5d:2e:29:7e:92:c7:
6c:8f:17:b7:7b:cf:2b:3b:17:d9:74:ac:0e:52:aa:
d3:3c:fd:dc:21:db:f5:81:8e:aa:ec:9b:fc:96:79:
cc:25:f2:a8:b0:76:3b:93:e7:f2:c8:78:49:19:e0:
60:e8:11:c7:8a:1a:de:c7:f2:b2:4c:6b:83:9c:7a:
5b:14:21:87:63:13:d7:08:53:6e:36:41:49:45:52:
75:10:37:7e:45:6d:bf:27:53:d2:9f:cb:6c:7c:50:
b6:b2:d0:e9:ca:e4:92:4b:2a:58:de:51:a4:92:fb:
49:d0:91:68:75:7b:2a:f8:d5:68:f7:05:40:a9:65:
dd:27:23:9c:8c:ed:32:5e:19:9d:45:c8:8e:be:77:
76:3e:1e:87:49:1b:0f:9e:2e:b3:cf:90:b7:07:72:
04:15:26:c1:d9:a1:70:32:59:e3:1e:6e:63:6b:27:
0c:10:c0:62:e2:ee:ec:f4:d8:97:a9:fc:05:96:2d:
5e:67:ff:ff:fd:0a:74:d6:1a:f3:d3:94:67:eb:26:
16:a5:9b:db:9b:46:e4:a1:7d:f5:65:fb:ac:73:ac:
c1:81:d8:25:37:1f:4d:e4:af:f2:c8:45:75:47:c2:
ca:a5:8d:2d:48:07:37:2e:c1:2e:75:12:28:0d:94:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4B:76:FF:87:F7:DC:13:FB:A2:DE:71:F9:5C:F2:43:A2:F9:3E:3D
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:34:0f:e2:30:b2:ec:39:ca:ab:3c:be:8b:0b:4e:4a:30:87:
60:fb:c9:0d:ea:55:af:d5:38:39:87:b6:12:3f:40:1a:26:1e:
c2:1f:23:dc:4e:39:68:cb:a5:73:67:65:bb:16:e2:18:e8:37:
f5:cf:50:24:db:9e:d3:21:4a:8a:0d:af:dd:cb:0d:75:52:de:
05:67:79:57:97:1e:de:39:15:48:f9:2c:51:43:b4:f9:c6:2f:
aa:7b:4f:e0:ef:df:8f:5c:fa:5f:7f:59:3b:a2:ec:76:96:fa:
c0:3d:a5:9b:6f:1e:27:55:30:b2:ba:a8:51:04:38:ae:8f:55:
ad:1b:d6:87:57:43:72:e9:45:e1:9e:91:67:da:33:47:9d:1b:
41:e3:e3:3b:90:27:1d:8c:21:08:81:bf:a5:c5:d4:2b:75:75:
9a:54:ce:8e:f8:0f:a5:15:e8:f0:63:c9:39:22:34:1a:a9:dd:
ae:aa:47:5f:e7:7a:27:79:0e:72:9c:cb:56:00:58:5e:b6:30:
22:ef:dc:3c:e8:a0:0b:7f:dc:03:9b:5c:8e:37:c0:e2:69:65:
88:ea:96:db:2f:9c:51:2a:56:9d:4d:b7:d6:2a:92:6a:3a:ca:
e5:d9:bd:ce:fb:ab:46:ef:9d:a6:d0:80:ac:61:1f:bc:17:d6:
11:f2:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:21:31 2025 by rpki-client