Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: uPsQhpRI4akAo1X+/txfq8oSO46zzKZTkPZH9mMOYow=
Subject key identifier: 87:54:4A:76:62:90:4D:00:B4:C7:EB:FC:0B:EC:55:43:B7:29:9B:DE
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 0199FF597FA0C8C8C0BCDFA77B75F8C23D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 111A
Signing time: Mon 20 Oct 2025 02:01:19 +0000
Manifest this update: Mon 20 Oct 2025 02:01:19 +0000
Manifest next update: Tue 21 Oct 2025 02:01:19 +0000
Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=)
2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: LrTClAQ86unPEsANrcNVk8cBM2spkn1PDBntUuxcGkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:7f:a0:c8:c8:c0:bc:df:a7:7b:75:f8:c2:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Oct 20 02:01:19 2025 GMT
Not After : Oct 21 02:01:19 2025 GMT
Subject: CN=87544a7662904d00b4c7ebfc0bec5543b7299bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:37:d7:be:9d:aa:98:84:59:69:c3:ed:be:95:
27:1c:19:ad:76:a4:23:a7:cd:47:44:3c:39:87:d2:
84:2b:04:f2:40:74:54:97:b4:7a:6e:84:06:98:d3:
c9:e8:e3:f0:60:90:91:bb:70:df:d3:e0:db:d7:a1:
39:cc:f9:c3:b4:3a:e1:24:f4:9c:0a:e2:1a:71:ce:
b0:41:ba:d9:a2:ac:07:5f:0c:6e:e6:4d:4e:85:02:
0d:6f:99:1f:da:90:d9:8e:30:dc:88:1b:15:fb:fa:
83:e1:46:8c:09:5e:73:b8:61:49:70:71:78:53:0f:
1f:6d:ed:fc:b1:b5:d2:21:93:b0:c0:c4:13:22:00:
f5:1c:10:4c:bc:78:ca:b9:4e:a3:f8:0c:89:c8:ab:
c7:6e:5d:61:c0:31:ad:ee:7f:1c:80:2f:51:12:31:
e1:69:f0:01:b8:e7:0c:af:53:9a:a9:d6:13:52:aa:
b0:9f:84:96:9f:7f:29:e1:a3:e8:8b:4a:52:6a:dd:
fb:20:27:cc:a3:6e:21:6b:db:00:fc:e1:b1:33:12:
ff:cc:0d:11:33:ac:6f:77:87:4a:04:56:9a:05:52:
b2:21:49:86:82:fa:d6:89:f0:a9:23:8a:50:9a:c0:
ef:8e:0c:96:cd:86:5b:61:03:62:ec:6e:be:e4:1a:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:54:4A:76:62:90:4D:00:B4:C7:EB:FC:0B:EC:55:43:B7:29:9B:DE
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b0:27:f8:89:f9:56:48:9c:7a:b3:33:c4:00:0a:5e:1d:d3:
de:f2:c5:c5:73:49:5a:f3:82:70:87:99:2a:a8:31:3a:8c:68:
94:54:bf:f1:ce:b4:94:ec:f1:b7:6a:2a:d6:ff:95:c6:9e:91:
d4:36:47:1f:2f:7c:0e:19:ce:ec:2a:63:3a:9a:86:c2:a9:0d:
50:de:64:47:e6:01:00:0d:c5:6c:7d:5a:ac:79:e0:4e:00:53:
ab:97:8f:9f:16:d0:b7:5d:e7:44:8a:58:66:3e:7e:f4:b1:51:
a9:bf:1d:34:93:ea:d2:46:08:28:16:e8:32:0f:8b:5c:4e:33:
ad:4e:5f:1b:90:95:e5:7d:e6:f5:3b:3c:e0:0d:0b:6f:29:9a:
be:52:69:37:6a:5e:ce:0a:e9:b3:bc:f7:22:e3:68:ba:1b:c8:
78:27:32:73:81:27:16:44:15:a3:2e:a1:2b:51:b3:a9:17:44:
07:33:0a:c5:bc:bc:1a:f6:d3:19:fe:9b:37:be:3c:5c:e5:09:
23:73:14:57:6e:d1:cf:a4:32:bb:d8:b2:d4:bf:4b:8b:73:6b:
9d:44:38:6e:b9:a5:96:56:24:8a:08:10:a0:c2:87:f5:ac:1c:
4b:03:22:4c:34:df:87:2a:7e:33:0d:2f:b2:0b:e6:8f:a8:43:
cd:10:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:20 2025 by rpki-client