Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: xExJHUiE5er+OXpKVEg6a40/0KVi3c3Jw0Yci7Y78UQ=
Subject key identifier: 59:AA:E8:51:9A:88:E5:FF:CD:6A:E4:AE:53:9E:21:32:39:6B:BF:8F
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 019A1B3E2D18AC8C1B4E23C18EB38FFB45C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 1223
Signing time: Sat 25 Oct 2025 12:00:50 +0000
Manifest this update: Sat 25 Oct 2025 12:00:50 +0000
Manifest next update: Sun 26 Oct 2025 12:00:50 +0000
Files and hashes: 1: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: yocBBmZGa4v64kD3kaF2OtDZN5A2xzwwHkiiHpVy1tA=)
2: x-sFc0XuZWyC8mb5YkUAH-GfdII.roa (hash: SLT0QNLc8vBCO5UeVhbutYzbWFamBQrhqoa9wxuI2Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3e:2d:18:ac:8c:1b:4e:23:c1:8e:b3:8f:fb:45:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Oct 25 12:00:50 2025 GMT
Not After : Oct 26 12:00:50 2025 GMT
Subject: CN=59aae8519a88e5ffcd6ae4ae539e2132396bbf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:9b:84:ed:9e:02:79:32:24:c2:2c:65:f9:
c1:24:28:ff:dc:5b:0b:43:a7:6d:2b:20:c8:ae:5d:
57:6b:bb:57:b9:33:61:d0:43:dd:84:1c:bb:1e:47:
af:6a:dc:67:84:d8:e3:22:fa:e2:74:cb:78:61:b6:
09:84:da:a9:32:98:54:3f:62:8d:e2:69:88:5d:4c:
4d:47:02:fb:a5:8f:a9:8c:08:40:2c:37:dc:c0:da:
e4:22:88:55:96:48:84:97:07:83:8c:49:08:5a:ed:
3a:07:6c:21:78:1f:38:1b:ad:6a:c0:6d:e9:dc:cc:
97:1c:12:a9:e3:6a:b8:99:ec:be:98:5c:67:75:d0:
e7:f9:0f:94:3d:40:e5:05:5b:06:39:16:88:97:16:
b8:f2:8c:46:bc:b7:d1:e4:12:70:0c:2d:da:7a:94:
d2:c9:10:29:3a:7e:af:36:97:87:b8:7a:5f:16:e9:
c9:88:41:c0:89:64:93:d8:e8:09:09:93:d0:7c:6d:
6b:a9:d6:63:cf:18:c7:08:02:78:73:6c:d0:d2:b5:
97:cf:99:68:e1:c9:57:f4:31:97:c3:f7:e6:0d:2a:
42:ab:1c:1c:dd:c3:b0:ed:f2:8d:5c:e7:1b:47:1c:
78:65:0d:2e:76:61:2f:91:4d:c8:d8:0e:c0:83:3b:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AA:E8:51:9A:88:E5:FF:CD:6A:E4:AE:53:9E:21:32:39:6B:BF:8F
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4f:a0:5d:25:36:b2:32:dd:0d:d4:89:7f:7c:16:df:e7:d8:
9f:a0:52:db:7a:b3:2c:8b:92:d1:ce:a0:92:fa:e4:52:25:81:
99:b8:81:5d:4f:ed:93:96:9c:25:ce:fb:03:3f:11:29:60:b4:
1d:7f:26:6a:ee:aa:a5:46:81:0a:db:69:61:39:e4:9a:71:63:
ca:66:a7:61:43:74:73:b4:0c:ac:5c:7e:5b:6c:40:c8:62:6d:
ce:3c:69:20:b0:f7:e1:fc:76:b7:1e:d6:55:0d:77:59:3c:25:
06:20:eb:d8:16:5d:35:c0:42:ec:9e:82:3e:20:b8:c3:04:f9:
51:d4:75:ae:70:f6:8a:10:b7:2b:b2:b6:2d:99:b4:81:8e:f6:
2e:03:f6:c7:99:b2:70:a5:a7:be:c8:47:6f:e3:9c:41:ed:14:
9f:07:1f:f4:9c:ee:be:cc:75:82:1f:a5:02:f8:30:25:e4:28:
3e:9d:e9:e2:2f:c2:6c:f7:ff:10:e7:ba:8e:f0:bf:66:c3:ae:
a1:f4:65:26:38:17:24:e2:86:c1:af:5c:26:37:d7:af:6c:48:
2d:d1:68:26:9d:67:9b:c3:76:9c:9c:4e:88:9b:56:1e:9a:c2:
45:1b:0a:9a:26:16:a1:7e:d8:f1:a6:ed:36:9b:3f:bd:41:ae:
a1:57:65:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZobPi0YrIwbTiPBjrOP+0XEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzUwOWU3ZWM2OGZlMmQ5NDM0MDdkNWRkMTI2YTBmNTk2
ZjJhYjUwHhcNMjUxMDI1MTIwMDUwWhcNMjUxMDI2MTIwMDUwWjAzMTEwLwYDVQQD
Eyg1OWFhZTg1MTlhODhlNWZmY2Q2YWU0YWU1MzllMjEzMjM5NmJiZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvKbhO2eAnkyJMIsZfnBJCj/3FsL
Q6dtKyDIrl1Xa7tXuTNh0EPdhBy7HkevatxnhNjjIvridMt4YbYJhNqpMphUP2KN
4mmIXUxNRwL7pY+pjAhALDfcwNrkIohVlkiElweDjEkIWu06B2wheB84G61qwG3p
3MyXHBKp42q4mey+mFxnddDn+Q+UPUDlBVsGORaIlxa48oxGvLfR5BJwDC3aepTS
yRApOn6vNpeHuHpfFunJiEHAiWST2OgJCZPQfG1rqdZjzxjHCAJ4c2zQ0rWXz5lo
4clX9DGXw/fmDSpCqxwc3cOw7fKNXOcbRxx4ZQ0udmEvkU3I2A7AgzvXRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmq6FGaiOX/zWrkrlOeITI5a7+PMB8GA1UdIwQY
MBaAFAk1CefsaP4tlDQH1d0Sag9Zbyq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgt
N2Q2OTczMzcxMzdiLzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgtN2Q2OTczMzcxMzdi
LzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiE+gXSU2
sjLdDdSJf3wW3+fYn6BS23qzLIuS0c6gkvrkUiWBmbiBXU/tk5acJc77Az8RKWC0
HX8mau6qpUaBCttpYTnkmnFjymanYUN0c7QMrFx+W2xAyGJtzjxpILD34fx2tx7W
VQ13WTwlBiDr2BZdNcBC7J6CPiC4wwT5UdR1rnD2ihC3K7K2LZm0gY72LgP2x5my
cKWnvshHb+OcQe0Unwcf9Jzuvsx1gh+lAvgwJeQoPp3p4i/CbPf/EOe6jvC/ZsOu
ofRlJjgXJOKGwa9cJjfXr2xILdFoJp1nm8N2nJxOiJtWHprCRRsKmiYWoX7Y8abt
Nps/vUGuoVdlVw==
-----END CERTIFICATE-----
Generated at Sat Oct 25 15:44:01 2025 by rpki-client