Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: 0SkTnKP23Twd+ag7jRplRk/KRE0pcf6tof8C9RMBhLQ=
Subject key identifier: 96:17:C2:89:99:E1:9D:19:75:22:23:66:4B:75:25:C6:54:FB:29:5D
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 0199FC58D52AEA50EB2B40BE196E1B801527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 1213
Signing time: Sun 19 Oct 2025 12:01:44 +0000
Manifest this update: Sun 19 Oct 2025 12:01:44 +0000
Manifest next update: Mon 20 Oct 2025 12:01:44 +0000
Files and hashes: 1: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: mWgwd1ylfseeMKvFaqY514z2HgEhTx+YUfQqxkhOOSg=)
2: x-sFc0XuZWyC8mb5YkUAH-GfdII.roa (hash: SLT0QNLc8vBCO5UeVhbutYzbWFamBQrhqoa9wxuI2Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d5:2a:ea:50:eb:2b:40:be:19:6e:1b:80:15:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Oct 19 12:01:44 2025 GMT
Not After : Oct 20 12:01:44 2025 GMT
Subject: CN=9617c28999e19d19752223664b7525c654fb295d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:96:5f:04:bd:bb:c0:78:e8:d5:24:d0:b8:
43:5f:9b:8a:d1:7f:de:45:a4:5a:ef:8f:ed:34:f1:
91:5b:12:db:bd:18:e7:0c:e1:fd:ba:01:76:14:87:
50:52:92:df:1a:ee:b6:dd:60:cf:82:5b:87:af:50:
43:c3:73:1c:0e:bc:50:3e:54:bf:70:40:46:fb:7c:
e8:07:92:44:52:96:5d:7e:c0:0f:02:eb:e7:cf:3e:
75:5c:1c:c1:c7:e3:66:39:f0:a2:a3:d6:09:81:48:
ed:30:91:4b:1b:9c:3e:73:3d:e7:34:43:ed:63:2d:
5d:9a:15:b1:97:bf:13:77:2a:81:35:8a:e2:0c:c5:
23:c8:a9:d7:7f:01:6a:0e:20:30:62:cd:c1:a6:71:
f2:35:12:55:0d:91:a9:39:24:5f:56:19:b8:f8:1d:
49:6d:95:5b:42:ac:44:a1:4c:27:b8:4d:c2:40:6c:
fa:44:f5:5b:22:3e:db:24:06:3a:76:33:e6:f8:88:
69:b1:2a:36:d3:13:1c:26:2d:c7:a8:b9:5e:cc:f4:
03:c9:b4:30:fa:9c:90:fa:60:78:ad:b9:56:de:e8:
1e:8b:7a:57:f5:64:39:90:fa:2c:74:e8:79:74:dc:
3f:24:58:18:21:35:f2:b2:c0:19:ce:fe:15:3a:01:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:17:C2:89:99:E1:9D:19:75:22:23:66:4B:75:25:C6:54:FB:29:5D
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:60:e6:a5:d5:3a:a2:d0:f3:ef:15:6f:ec:67:2c:e3:14:e3:
82:5d:84:f0:33:8c:a7:67:c4:9f:c4:c6:52:4b:a7:4a:83:86:
92:f2:52:6a:ff:7a:b3:2c:8c:e1:ad:d2:97:d1:5c:ce:18:95:
a8:4d:39:a7:89:83:0a:7c:c4:cc:b0:a6:2b:c8:af:1b:8a:49:
21:92:81:f6:d9:37:38:d7:4f:71:31:12:4e:4e:ca:89:08:f6:
3d:b3:20:4b:f4:f6:2b:d9:55:be:8b:16:e5:e0:7c:11:e9:ae:
37:28:43:55:a2:df:40:fd:ee:a2:00:68:42:8e:4c:9e:31:f3:
6c:15:1b:f2:dc:c8:c4:e2:f4:26:e5:32:98:5d:bf:6b:c0:34:
d6:02:5e:df:c9:43:c6:07:02:27:2e:fd:e5:6c:58:69:44:31:
36:b8:a5:2a:32:85:f8:c3:c5:cb:85:35:95:ec:ea:89:0d:4d:
35:2d:a1:a2:b8:41:88:fd:74:b2:a3:cb:92:8d:66:92:15:71:
b3:ef:7c:4d:60:f1:e5:01:3a:19:fa:e6:bd:43:bc:49:fe:c3:
ac:68:79:b4:38:14:16:fe:41:69:15:53:28:0f:fe:84:de:d1:
55:8c:ce:e5:4a:16:07:ab:3d:91:38:ea:72:73:c7:af:2c:07:
b6:a6:d5:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WNUq6lDrK0C+GW4bgBUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzUwOWU3ZWM2OGZlMmQ5NDM0MDdkNWRkMTI2YTBmNTk2
ZjJhYjUwHhcNMjUxMDE5MTIwMTQ0WhcNMjUxMDIwMTIwMTQ0WjAzMTEwLwYDVQQD
Eyg5NjE3YzI4OTk5ZTE5ZDE5NzUyMjIzNjY0Yjc1MjVjNjU0ZmIyOTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc6WXwS9u8B46NUk0LhDX5uK0X/e
RaRa74/tNPGRWxLbvRjnDOH9ugF2FIdQUpLfGu623WDPgluHr1BDw3McDrxQPlS/
cEBG+3zoB5JEUpZdfsAPAuvnzz51XBzBx+NmOfCio9YJgUjtMJFLG5w+cz3nNEPt
Yy1dmhWxl78TdyqBNYriDMUjyKnXfwFqDiAwYs3BpnHyNRJVDZGpOSRfVhm4+B1J
bZVbQqxEoUwnuE3CQGz6RPVbIj7bJAY6djPm+IhpsSo20xMcJi3HqLlezPQDybQw
+pyQ+mB4rblW3ugei3pX9WQ5kPosdOh5dNw/JFgYITXyssAZzv4VOgE0YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYXwomZ4Z0ZdSIjZkt1JcZU+yldMB8GA1UdIwQY
MBaAFAk1CefsaP4tlDQH1d0Sag9Zbyq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgt
N2Q2OTczMzcxMzdiLzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgtN2Q2OTczMzcxMzdi
LzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamDmpdU6
otDz7xVv7Gcs4xTjgl2E8DOMp2fEn8TGUkunSoOGkvJSav96syyM4a3Sl9FczhiV
qE05p4mDCnzEzLCmK8ivG4pJIZKB9tk3ONdPcTESTk7KiQj2PbMgS/T2K9lVvosW
5eB8EemuNyhDVaLfQP3uogBoQo5MnjHzbBUb8tzIxOL0JuUymF2/a8A01gJe38lD
xgcCJy795WxYaUQxNrilKjKF+MPFy4U1lezqiQ1NNS2horhBiP10sqPLko1mkhVx
s+98TWDx5QE6GfrmvUO8Sf7DrGh5tDgUFv5BaRVTKA/+hN7RVYzO5UoWB6s9kTjq
cnPHrywHtqbVGA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:50 2025 by rpki-client