Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: HTp2m+WLH6LJRgtUmvzA1SGOcYQKMpEFbG9SHTedOJo=
Subject key identifier: 21:D6:2F:DF:26:CE:1E:9A:1F:47:4A:12:E0:C3:0B:82:61:89:2C:80
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 0199FC8F38BCE17F7E0B088D2DA1815FF75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 10A5
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: ZlGhgo9nb934vmvM8nHoHr0fnLRn92YFtRZZNpS5ORY=)
2: JoXcYev6DySlst62DTDcDz1JN0Q.roa (hash: PRhyl4bdJivpbrgVw6w06UO6PZN+9+qwU0T6MPbrnFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:38:bc:e1:7f:7e:0b:08:8d:2d:a1:81:5f:f7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=21d62fdf26ce1e9a1f474a12e0c30b8261892c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:b5:61:d6:4d:3a:44:e2:1b:c7:7d:c9:7e:
82:aa:9d:12:5b:ad:44:59:76:ad:9c:b1:24:df:fb:
e1:e2:f5:8b:9c:c5:62:15:b5:5a:a4:53:b9:f9:92:
23:fc:d8:47:4d:fb:64:ae:b9:09:8d:e6:d2:bb:cb:
a0:8e:10:6f:1d:90:9d:a0:00:44:84:27:ff:ef:ad:
8a:42:47:ae:28:43:69:7a:4e:46:93:ae:07:a5:e6:
fc:1a:02:6a:c9:46:98:1e:27:29:6b:bc:56:f5:49:
31:a9:ee:b4:54:4a:d6:e7:22:31:ef:ee:0d:99:d2:
92:c1:7b:17:95:61:83:3f:0d:ce:5c:9d:60:f2:a6:
09:0a:d1:44:07:47:3c:e6:c1:66:4b:10:9a:cd:c1:
6b:6e:fc:32:e0:d1:1c:a0:02:d2:a8:ed:11:b5:a0:
22:fc:74:01:42:5f:42:49:f1:26:55:5e:e8:1f:61:
84:9e:8b:bb:ad:d7:ab:2a:f2:cd:ec:2c:23:ae:a8:
69:8b:9e:90:89:38:7e:a6:49:7b:6c:1b:81:ed:f8:
1b:d9:10:dc:10:ee:d0:45:90:c9:4a:22:64:e0:5f:
ce:90:dd:51:c8:c4:62:49:01:c4:60:e7:1a:62:a1:
a7:c6:ef:05:2b:c3:1c:11:3d:92:9b:3b:35:c7:6e:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D6:2F:DF:26:CE:1E:9A:1F:47:4A:12:E0:C3:0B:82:61:89:2C:80
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8f:31:9d:c1:b0:b6:f0:2d:13:7b:dc:55:0f:7c:67:4a:54:
14:8f:eb:b2:c0:4c:06:b7:80:27:de:ab:c1:14:13:08:8d:f7:
43:f1:90:f2:8d:80:36:f6:23:4a:d4:bd:de:e9:fd:04:91:d4:
cf:f4:dd:0b:60:b7:84:df:1d:d7:da:ac:9b:4c:96:3d:06:3e:
b2:dd:42:f7:e7:bf:19:c8:28:c7:7a:c4:f5:d5:19:1d:c8:e9:
ce:2f:cd:5c:c3:6a:40:55:25:c8:c2:76:f0:22:f2:50:c1:4c:
59:9c:61:f4:39:88:06:dc:e2:8c:21:e9:19:2e:17:d5:a9:42:
9d:38:5d:da:3c:dc:e0:b5:d5:d2:0c:35:03:a4:a0:a8:02:23:
fe:db:63:54:41:48:9d:52:8a:4b:a4:0b:c9:6c:5c:d7:9c:e4:
da:00:7d:26:f1:9a:2f:ce:2f:3e:bc:bf:20:ad:30:2f:9e:46:
3b:50:8e:8c:e8:1c:a0:8e:5c:be:1f:b9:e1:cf:ad:e5:04:4a:
be:2f:0c:ae:93:55:26:1b:de:3b:97:41:83:8e:99:54:1c:c2:
6b:74:25:e3:c6:ea:27:1b:34:1c:a7:07:df:62:ca:70:81:74:
aa:94:09:20:d8:ca:0e:1b:57:f2:69:13:73:3a:e4:0d:00:37:
2b:b2:e7:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jzi84X9+CwiNLaGBX/ddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTRmN2Y0ZTRlOWU3MmMzYTMzOTNmYjVkNmVhNzQyYmMx
YjRjMjgwHhcNMjUxMDE5MTMwMTA4WhcNMjUxMDIwMTMwMTA4WjAzMTEwLwYDVQQD
EygyMWQ2MmZkZjI2Y2UxZTlhMWY0NzRhMTJlMGMzMGI4MjYxODkyYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh61YdZNOkTiG8d9yX6Cqp0SW61E
WXatnLEk3/vh4vWLnMViFbVapFO5+ZIj/NhHTftkrrkJjebSu8ugjhBvHZCdoABE
hCf/762KQkeuKENpek5Gk64Hpeb8GgJqyUaYHicpa7xW9Ukxqe60VErW5yIx7+4N
mdKSwXsXlWGDPw3OXJ1g8qYJCtFEB0c85sFmSxCazcFrbvwy4NEcoALSqO0RtaAi
/HQBQl9CSfEmVV7oH2GEnou7rderKvLN7Cwjrqhpi56QiTh+pkl7bBuB7fgb2RDc
EO7QRZDJSiJk4F/OkN1RyMRiSQHEYOcaYqGnxu8FK8McET2Smzs1x24v/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHWL98mzh6aH0dKEuDDC4JhiSyAMB8GA1UdIwQY
MBaAFAmk9/Tk6ecsOjOT+11up0K8G0woMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUt
Mjg0YzgyZGVjN2M2LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUtMjg0YzgyZGVjN2M2
LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVo8xncGw
tvAtE3vcVQ98Z0pUFI/rssBMBreAJ96rwRQTCI33Q/GQ8o2ANvYjStS93un9BJHU
z/TdC2C3hN8d19qsm0yWPQY+st1C9+e/Gcgox3rE9dUZHcjpzi/NXMNqQFUlyMJ2
8CLyUMFMWZxh9DmIBtzijCHpGS4X1alCnThd2jzc4LXV0gw1A6SgqAIj/ttjVEFI
nVKKS6QLyWxc15zk2gB9JvGaL84vPry/IK0wL55GO1COjOgcoI5cvh+54c+t5QRK
vi8MrpNVJhveO5dBg46ZVBzCa3Ql48bqJxs0HKcH32LKcIF0qpQJINjKDhtX8mkT
czrkDQA3K7LnnQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:26 2025 by rpki-client