Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: aNNPaRv0HeCwZ3FmeNM64XexXNJk7y9WQH1QjNTrs6s=
Subject key identifier: C4:25:40:74:5F:9E:BF:EF:98:68:D0:0C:6C:17:3A:4A:06:19:66:08
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 0199FCC67B7BD4F761CC70A3F6B72FDAAF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: NCrdIwRrxZMZqGBHaGqRH7V8N6LIZm8u4ex0cYpe3bI=)
2: fs0ZmJI91FgrAyS_qaO4SZnCnx4.roa (hash: ycybeagUIzrtezPLqz+FSenm/c5GMC1YyzGUnHiNwd0=)
3: kfPXQBHHs_2camwqc_H_ql-nq_g.roa (hash: MqGfCwVyJaEqGj5SMVt3EtpzoMRGLzaHW56+Nob5Z0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7b:7b:d4:f7:61:cc:70:a3:f6:b7:2f:da:af:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=c42540745f9ebfef9868d00c6c173a4a06196608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:e6:33:f4:bb:24:8a:e2:02:7d:5e:da:21:
df:8c:6d:35:de:16:26:58:d8:cb:25:fb:34:c4:37:
f2:33:60:b7:1c:30:57:b6:b4:d8:02:76:5a:aa:6e:
f7:2c:01:72:2a:5b:38:1b:2f:37:68:8e:5f:82:b5:
48:28:e8:75:9f:a3:31:60:81:bb:73:09:47:9c:d2:
24:1d:a9:a4:dd:1a:16:9e:77:ef:4b:3c:c7:b9:c6:
ad:61:2a:55:34:22:db:7f:07:24:45:c2:00:ea:99:
de:22:ac:17:bf:db:34:97:07:ed:74:5a:4c:7d:fc:
ab:99:4a:91:c0:93:3c:cf:73:06:74:4f:14:58:3a:
17:83:14:52:7b:c2:62:73:63:19:39:28:85:aa:68:
92:68:3e:b1:c5:d9:77:5c:de:1d:05:d1:92:da:69:
46:32:d6:b8:c4:23:d0:2d:84:69:b5:05:ac:68:56:
f5:5a:1b:42:2f:b6:3d:6a:ba:65:5c:5a:ea:d9:ad:
2a:5a:97:1b:b7:76:12:fb:77:b7:a6:82:57:6b:9d:
b3:8a:23:e8:09:75:41:5a:0e:26:52:20:d4:42:90:
2d:bd:91:c1:62:4e:06:40:dc:4f:e7:c7:c5:2b:eb:
6d:0b:a4:16:65:fe:f8:16:dc:01:b7:c2:9a:43:ca:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:25:40:74:5F:9E:BF:EF:98:68:D0:0C:6C:17:3A:4A:06:19:66:08
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:dc:b3:7b:b8:80:26:bb:29:4a:c6:88:2a:c3:ac:02:fc:6e:
ea:bd:3d:d7:0c:fd:57:3f:c1:87:45:9b:bb:04:6c:62:e0:c5:
39:5a:3b:40:62:29:4f:18:b1:2e:41:14:1a:9d:24:f6:38:0b:
f4:e0:d8:3d:9a:da:be:e4:ed:fd:be:5c:a7:95:1f:08:0f:b3:
92:15:60:c3:0f:87:f7:d7:90:24:d0:ee:67:ac:db:2d:c1:f5:
4c:f6:87:72:33:64:90:e6:0d:6c:0b:10:86:52:8b:ba:04:29:
c6:02:4c:ed:55:af:a4:dd:87:0a:6e:f8:25:11:c3:fe:19:00:
d3:ee:ce:9d:5d:99:e8:a9:77:c0:65:1b:f7:1f:01:a7:34:0f:
61:f8:ce:c0:f5:cd:5f:07:27:43:d1:8b:af:31:32:d6:a1:b1:
40:0c:66:44:2d:f2:90:c3:50:a0:0b:cd:0c:df:ff:73:fd:6e:
81:a0:ef:a8:92:7f:ab:dc:84:73:78:25:a8:57:08:68:21:77:
d1:ba:e0:f3:98:24:59:8b:6f:f1:03:fc:24:69:6f:be:7b:55:
c7:dd:82:72:30:95:59:44:94:07:27:5a:6e:ed:b7:68:fb:d5:
14:4e:3d:d5:ea:b5:2d:df:dc:69:55:6c:51:d5:4c:26:cd:72:
5d:1f:82:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:05 2025 by rpki-client