Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File: CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier: 7zJ1leFzG8Nn5ygQ01lR1YGaFKuNLJiw29EW5H1jXZ4=
Subject key identifier: 33:8E:DA:34:B9:1E:58:84:64:01:FC:6D:DD:7E:76:DD:49:50:6F:8A
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer: /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial: 0199FB7C9EDC430A7D08180F5B45EB6C791E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number: 10DC
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: YAcLqGlQ3ZHezVu0wC0VwrUA/fIPVQcR3Gh3f13vHRs=)
2: p9dm9G2iCzsw8k2RDOLA-aoAnro.roa (hash: RaSFGXIJc/dpz2m+EsrfJ2ccZ5vMg1R8ZkPmnS2txJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9e:dc:43:0a:7d:08:18:0f:5b:45:eb:6c:79:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=338eda34b91e58846401fc6ddd7e76dd49506f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:d2:52:26:4a:d1:1c:3c:2b:cb:f3:7f:24:
bc:85:72:09:38:80:8c:25:33:e8:85:5f:de:89:5d:
b9:e2:37:02:c5:f6:2b:46:64:f1:18:7c:2f:25:32:
e8:0d:52:97:68:25:25:2f:56:a4:7a:94:fb:b5:70:
5d:78:d9:78:66:4f:ef:c7:fc:d2:aa:e0:87:ac:7b:
e5:7f:fb:17:7c:7a:6d:e3:a1:e4:d6:91:b9:46:ab:
00:b9:ad:e3:38:f7:17:1b:d9:ba:7a:42:31:fb:77:
36:25:ff:97:b5:35:7a:b7:84:fd:4e:18:47:a1:7f:
4e:d2:e7:30:92:3a:fa:a9:0d:e8:3e:9b:bc:c9:cb:
f2:41:c4:a5:35:83:93:a9:47:12:7c:d8:1d:3a:ed:
bc:42:ea:e8:78:95:ec:7c:03:4a:9c:ad:87:d3:b7:
86:d8:42:ee:79:81:ef:30:4b:1f:78:ac:78:47:6f:
ee:5a:c0:50:00:bb:80:15:e6:a1:32:fc:8f:68:3c:
31:50:a1:52:db:4b:42:3e:cb:e0:c0:41:03:1b:cf:
d0:47:f4:69:f3:08:34:cd:d9:84:89:c2:98:a4:67:
4d:ed:b9:50:43:d6:b2:5f:c7:3d:71:3e:02:97:89:
43:f2:b1:02:75:07:a1:fb:4d:a7:a1:e7:33:cf:0f:
1a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8E:DA:34:B9:1E:58:84:64:01:FC:6D:DD:7E:76:DD:49:50:6F:8A
X509v3 Authority Key Identifier:
keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:08:49:1b:b5:e5:ca:ab:17:f2:72:a3:a6:80:e6:36:d0:9a:
e8:f0:1a:da:79:3d:d1:d0:50:67:57:22:71:1a:d1:1d:59:99:
6e:64:21:a1:50:63:d8:49:5a:16:b9:68:65:e2:23:1b:9c:7e:
11:5d:67:e7:2d:bf:b9:72:96:45:bd:9a:11:1b:68:90:04:0c:
80:16:33:cb:14:27:e4:2e:1b:86:30:39:8b:c7:b1:33:11:67:
72:05:d3:28:bc:9b:4d:e5:fb:7e:0c:84:b4:5c:f6:15:ea:a9:
3c:a3:3c:bf:ab:33:b0:a9:19:53:c3:ab:ed:e2:40:a6:5d:09:
c9:40:7e:31:97:96:1d:17:0d:42:7c:6c:f3:e3:36:78:ac:96:
09:06:86:d1:38:29:8a:25:d1:41:e1:f8:0b:00:a0:34:e6:a9:
f2:5c:15:c3:d5:e7:62:0f:16:c0:77:83:38:77:0f:ae:2f:2f:
04:4d:3b:18:07:8f:2a:7e:39:f1:47:24:76:dc:6b:52:b1:99:
b3:73:c0:7d:dc:a1:b4:d4:d9:c1:3f:a2:3f:41:70:73:85:60:
6f:93:bf:8f:2e:1e:3a:32:47:2f:4a:d9:94:cd:8a:40:71:58:
04:3b:55:70:6f:5e:52:ef:5d:79:39:6f:59:66:19:13:f9:4f:
4d:ba:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:44 2025 by rpki-client