Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
File: ctjb6kAj1p9H-JvSCC__skZt0qU.mft (raw, json)
Hash identifier: A4bQdKJHKHZUO3duk94pniAcQ9C5PGLb1YX9oPfFuiw=
Subject key identifier: DD:C9:CA:C2:8B:8D:F8:A1:7E:E6:85:15:18:A3:F8:8C:6F:CE:6C:F0
Authority key identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
Certificate issuer: /CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Certificate serial: 0199FCC675957F8AFA93E828F02996F39FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
Manifest number: 08A1
Signing time: Sun 19 Oct 2025 14:01:28 +0000
Manifest this update: Sun 19 Oct 2025 14:01:28 +0000
Manifest next update: Mon 20 Oct 2025 14:01:28 +0000
Files and hashes: 1: Egv_COpkQ4qE0m0lj_BQmNwIMRA.roa (hash: 7o6c3PTeF8AIq/25Q6USnosQEeLS7MscdEHZbwRxm6I=)
2: ctjb6kAj1p9H-JvSCC__skZt0qU.crl (hash: ZWSWXMIYBjqbWkS4272su06d9y2SLKE1BDtKbr4wlDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:75:95:7f:8a:fa:93:e8:28:f0:29:96:f3:9f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Validity
Not Before: Oct 19 14:01:28 2025 GMT
Not After : Oct 20 14:01:28 2025 GMT
Subject: CN=ddc9cac28b8df8a17ee6851518a3f88c6fce6cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:4a:7c:10:6d:60:39:44:ae:83:67:35:d6:
63:45:1d:bf:e6:08:5a:a2:2a:a9:20:68:aa:8c:df:
bc:df:9d:d3:50:9c:22:6d:c5:15:65:58:c3:75:e4:
7c:b5:87:79:cc:ae:4a:c8:53:e7:49:84:d4:89:b9:
b6:8f:af:01:54:64:56:5f:b8:3f:38:ae:85:9e:d1:
8f:ee:71:d8:7a:79:dd:ae:5c:70:f3:e3:4a:e8:bf:
85:77:11:1c:8f:ab:2b:3a:ff:58:42:d4:cb:f0:ee:
9b:45:99:7e:4c:b5:3f:3b:f7:f3:5f:af:ce:71:fe:
de:19:18:b6:18:3e:d1:fc:34:69:07:dc:99:11:67:
16:1d:e8:8f:03:5b:23:f2:4c:b7:75:ae:5d:0e:02:
15:b9:1d:79:09:9d:7a:48:30:ea:5b:15:2e:cb:44:
9e:6d:64:39:0f:4b:30:89:3f:34:b7:f0:5a:54:44:
cc:38:90:80:cb:88:49:fb:d6:4f:dc:3c:4b:6f:8a:
fd:94:08:86:c1:42:c7:ce:2a:2e:09:e8:f5:3d:84:
26:d4:cb:fa:41:53:d6:56:46:7c:3f:91:66:3d:b0:
cd:39:04:5d:e6:fa:47:f6:0b:53:8c:ec:73:9c:75:
e2:81:4a:36:f9:db:aa:f7:1f:00:0c:01:69:b2:48:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C9:CA:C2:8B:8D:F8:A1:7E:E6:85:15:18:A3:F8:8C:6F:CE:6C:F0
X509v3 Authority Key Identifier:
keyid:72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ad:be:7f:41:92:37:74:95:07:a3:a2:b9:23:d9:87:e4:e5:
2c:8b:29:f9:90:1e:fe:db:cb:ee:d9:72:c2:4e:5e:a5:77:de:
87:ea:b1:8a:32:e5:6f:a8:06:da:60:e9:c2:cc:00:10:e1:53:
4f:f5:cc:bd:08:20:ef:23:27:ad:93:a3:57:55:59:cf:22:b6:
f9:3e:d7:80:8a:49:90:db:65:27:49:04:72:d9:a9:63:94:90:
0d:f8:06:e4:4b:5f:09:65:f9:ef:53:cf:a0:8a:7c:41:86:5f:
19:80:8f:f4:a8:8c:f8:12:88:5e:db:26:cf:81:27:10:43:9c:
aa:f0:63:c9:18:c2:c1:c4:3c:cb:dc:b8:1c:43:85:cd:80:22:
f4:e0:ff:e1:42:35:f9:cf:70:47:3f:67:3e:05:8c:85:af:7b:
23:6a:49:ea:b5:f4:26:8a:d7:5a:9f:a8:fe:6c:22:fd:25:f3:
ff:47:4e:c9:c7:a0:45:e3:27:c0:b0:53:05:7e:10:28:84:c1:
af:81:24:de:ab:74:20:4e:0d:47:62:f8:d2:3e:99:ec:b9:0d:
39:66:fa:c7:41:91:15:f4:3f:33:d7:af:d3:ea:f8:e0:d9:02:
dd:1f:0a:06:f2:ea:0b:4b:44:2c:56:7a:44:52:56:b5:af:ae:
e4:05:29:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xnWVf4r6k+go8CmW85/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDhkYmVhNDAyM2Q2OWY0N2Y4OWJkMjA4MmZmZmIyNDY2
ZGQyYTUwHhcNMjUxMDE5MTQwMTI4WhcNMjUxMDIwMTQwMTI4WjAzMTEwLwYDVQQD
EyhkZGM5Y2FjMjhiOGRmOGExN2VlNjg1MTUxOGEzZjg4YzZmY2U2Y2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/hKfBBtYDlEroNnNdZjRR2/5gha
oiqpIGiqjN+8353TUJwibcUVZVjDdeR8tYd5zK5KyFPnSYTUibm2j68BVGRWX7g/
OK6FntGP7nHYenndrlxw8+NK6L+FdxEcj6srOv9YQtTL8O6bRZl+TLU/O/fzX6/O
cf7eGRi2GD7R/DRpB9yZEWcWHeiPA1sj8ky3da5dDgIVuR15CZ16SDDqWxUuy0Se
bWQ5D0swiT80t/BaVETMOJCAy4hJ+9ZP3DxLb4r9lAiGwULHziouCej1PYQm1Mv6
QVPWVkZ8P5FmPbDNOQRd5vpH9gtTjOxznHXigUo2+duq9x8ADAFpskjoSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3JysKLjfihfuaFFRij+IxvzmzwMB8GA1UdIwQY
MBaAFHLY2+pAI9afR/ib0ggv/7JGbdKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hOTA5MWYtMjdhMi00MmEzLTk1MmIt
OWVkMTgwNGYzMjgyLzEvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hOTA5MWYtMjdhMi00MmEzLTk1MmItOWVkMTgwNGYzMjgy
LzEvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy62+f0GS
N3SVB6OiuSPZh+TlLIsp+ZAe/tvL7tlywk5epXfeh+qxijLlb6gG2mDpwswAEOFT
T/XMvQgg7yMnrZOjV1VZzyK2+T7XgIpJkNtlJ0kEctmpY5SQDfgG5EtfCWX571PP
oIp8QYZfGYCP9KiM+BKIXtsmz4EnEEOcqvBjyRjCwcQ8y9y4HEOFzYAi9OD/4UI1
+c9wRz9nPgWMha97I2pJ6rX0JorXWp+o/mwi/SXz/0dOycegReMnwLBTBX4QKITB
r4Ek3qt0IE4NR2L40j6Z7LkNOWb6x0GRFfQ/M9ev0+r44NkC3R8KBvLqC0tELFZ6
RFJWta+u5AUpqA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:15 2025 by rpki-client