Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: oHtsu29WqLquONtFaYVUg3pmE5VLxOaHXcjtcUFvqGE=
Subject key identifier: B9:7B:E2:70:94:AA:7F:1B:8B:93:18:3B:BE:8B:21:2B:5C:BF:C1:DC
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 0197B8FD28AD1C5F47AE40CAEEC18D63913E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 10E7
Signing time: Sun 29 Jun 2025 00:01:28 +0000
Manifest this update: Sun 29 Jun 2025 00:01:28 +0000
Manifest next update: Mon 30 Jun 2025 00:01:28 +0000
Files and hashes: 1: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: Jn2iWAL8DjNfXuyqOI7mwRhHrM1paHJDId6eEUnq+3g=)
2: x-sFc0XuZWyC8mb5YkUAH-GfdII.roa (hash: SLT0QNLc8vBCO5UeVhbutYzbWFamBQrhqoa9wxuI2Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:28:ad:1c:5f:47:ae:40:ca:ee:c1:8d:63:91:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Jun 29 00:01:28 2025 GMT
Not After : Jun 30 00:01:28 2025 GMT
Subject: CN=b97be27094aa7f1b8b93183bbe8b212b5cbfc1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:a7:7d:e9:c8:66:fa:7e:ee:61:0e:b1:dd:
32:30:c6:cd:08:0a:9b:47:70:b9:ac:f8:5a:a8:ec:
ac:5c:20:5a:11:bd:88:0b:42:a9:43:d5:83:2e:fc:
4d:d8:af:5c:af:34:09:4a:1f:62:72:16:99:17:d4:
ce:ab:7e:a0:67:dc:74:e4:e1:06:48:2f:50:ed:59:
9c:1e:c6:90:21:e5:75:00:a3:f8:83:1a:9f:99:ef:
0b:56:ee:15:1a:a6:7b:05:c6:f8:87:ee:20:4e:1a:
86:66:3e:69:4c:8b:66:8c:d5:96:e9:48:47:57:2c:
7e:36:31:0c:2c:58:77:4b:5d:1b:37:cc:c2:5e:77:
50:4f:21:11:b8:d2:4b:e7:2c:40:82:2f:1a:a5:73:
c7:92:cb:af:2c:1c:c3:3a:ca:5c:75:a8:3a:69:ae:
45:ad:de:70:49:03:74:1c:a9:52:43:9f:6a:29:4e:
99:da:66:c2:fb:e0:cb:8b:26:18:98:64:46:81:8e:
ea:7e:09:dd:bb:e8:01:8e:3f:0a:73:29:1c:1c:ad:
41:46:3e:34:43:d7:f6:2a:bd:54:e2:94:4c:10:b9:
51:cb:b8:39:32:ef:5d:28:43:59:df:8d:db:a2:67:
58:e9:e1:fd:ef:49:bc:68:26:0c:d4:15:66:f5:5d:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7B:E2:70:94:AA:7F:1B:8B:93:18:3B:BE:8B:21:2B:5C:BF:C1:DC
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:46:4b:0f:85:42:a3:21:da:21:ba:08:61:8b:5c:72:e8:5b:
10:39:da:41:bf:79:6a:e8:d2:00:e7:ed:2d:f8:5b:1d:a5:7e:
5f:6f:fc:ee:f4:ae:08:f1:bc:e4:27:51:b7:7b:c7:de:9f:8d:
68:79:95:ca:bf:f4:db:72:28:d3:00:ea:e3:80:da:8a:9c:21:
64:a2:6c:0f:64:63:b1:ec:7e:d6:ae:ec:55:a4:76:2b:f1:92:
b6:34:e9:29:8d:27:e9:97:32:78:0b:76:9e:7c:32:96:e5:fe:
06:54:61:2d:d0:32:c7:c3:77:ee:b9:29:71:e5:03:18:91:e2:
ed:b5:8e:f5:37:21:ca:0c:78:27:d1:4e:72:01:b4:0c:76:73:
42:a2:ee:3f:f0:7e:73:39:69:09:e8:14:d0:89:62:ef:3d:38:
16:b3:85:7f:ed:17:57:1a:7f:0c:54:bf:07:34:6e:37:bb:22:
10:b2:85:21:96:9e:11:b4:26:70:a9:2c:e0:dc:5d:b0:e4:6e:
d7:18:41:4b:1f:02:76:47:7f:b6:1d:87:5c:33:18:2e:70:00:
f1:a4:f6:3e:da:a1:f6:85:3b:47:38:aa:21:5c:3c:d8:a5:1c:
29:10:9d:78:84:91:76:64:ed:95:64:bc:9d:7f:d2:0b:78:f2:
d4:06:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:53:12 2025 by rpki-client