Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: xMRwf0+47QyNOLU9XWkKLtkgKQEdyPhe/YU4rHgyQrY=
Subject key identifier: CE:12:4C:EA:9E:3C:64:DC:36:E2:D2:88:C7:9D:8B:76:89:29:A5:52
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 0199F6C40B6AA9A23C2852597E63BA20CDB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 10A2
Signing time: Sat 18 Oct 2025 10:01:06 +0000
Manifest this update: Sat 18 Oct 2025 10:01:06 +0000
Manifest next update: Sun 19 Oct 2025 10:01:06 +0000
Files and hashes: 1: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: Yxa4AT34L8n+9uie1wBlarm0ahPh6TU88kKAA/rFNgc=)
2: JoXcYev6DySlst62DTDcDz1JN0Q.roa (hash: PRhyl4bdJivpbrgVw6w06UO6PZN+9+qwU0T6MPbrnFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f6:c4:0b:6a:a9:a2:3c:28:52:59:7e:63:ba:20:cd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Oct 18 10:01:06 2025 GMT
Not After : Oct 19 10:01:06 2025 GMT
Subject: CN=ce124cea9e3c64dc36e2d288c79d8b768929a552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:3d:39:db:51:1d:33:8d:e0:24:ef:4e:c1:
1b:40:88:da:92:a2:89:cd:27:a1:97:2d:44:e8:d8:
4a:13:5c:f0:cd:03:ca:81:0b:2e:f7:ce:a4:bd:56:
40:82:30:bc:09:57:a2:0a:fb:fe:b4:7e:ef:84:71:
66:da:0d:25:67:89:0f:0b:5f:15:9e:f2:9e:89:2a:
84:d3:55:eb:56:72:9c:27:a8:1f:4a:bb:db:6a:68:
a3:7d:af:08:3b:1b:29:e9:cd:57:23:a4:51:51:ef:
46:6c:ac:e7:0e:86:db:96:46:a2:93:c2:5d:1d:51:
eb:2f:65:16:b3:6c:50:54:69:85:50:c4:f9:eb:4c:
ff:da:1a:6c:a5:1d:55:59:cf:8f:ac:5c:68:f0:a9:
2c:cf:e2:83:74:30:c3:c8:c2:f5:b5:2c:7e:71:6d:
fd:63:f9:66:7c:26:31:3a:90:92:83:e7:f3:bf:c2:
14:05:eb:df:88:7c:09:8f:1b:64:de:3c:ea:e1:57:
c2:91:0e:f2:1b:ad:78:ed:9b:43:61:3a:42:4a:d2:
51:9a:a4:90:76:85:03:de:52:2b:d0:50:ca:ff:63:
e9:64:d9:6e:30:04:6f:06:51:db:23:59:94:76:79:
4e:c1:48:5e:90:e0:04:e5:6f:f6:76:3b:44:7c:0c:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:12:4C:EA:9E:3C:64:DC:36:E2:D2:88:C7:9D:8B:76:89:29:A5:52
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f6:76:3b:76:49:54:22:8e:37:7f:c2:a7:65:c8:45:b0:ec:
37:7d:07:90:e1:8a:5e:19:88:fd:45:b8:1d:d0:40:83:ff:63:
a6:8e:ab:f3:7d:c6:e7:f6:bc:b0:62:12:a8:e0:0d:17:0a:fa:
2e:cc:f0:3d:d9:6f:89:84:1c:ac:47:32:27:e8:04:e8:eb:5c:
75:64:2e:68:a5:a9:70:eb:e7:6b:69:69:e3:36:a8:29:b6:ae:
99:5f:a4:cb:37:17:19:17:f7:ce:5a:8b:10:14:71:49:95:38:
7a:a0:bb:40:c0:6f:ea:ca:10:3e:47:b2:b0:05:d6:17:36:8f:
91:52:2a:29:b3:d5:cc:50:7e:d1:8d:40:8d:06:4d:d6:16:d3:
ec:e8:03:59:a0:ca:57:2e:e9:72:cf:a3:d8:61:3a:a9:5f:67:
5d:0c:26:39:53:cd:50:eb:b4:c1:bf:d4:5c:56:20:22:f5:33:
55:d7:02:26:44:8c:df:b2:0c:4e:64:38:dc:97:f7:40:7c:b0:
66:55:fc:7f:57:6b:a1:8e:5d:5c:5c:c9:dc:dd:4b:5f:ca:d1:
2d:42:f6:8b:f5:bd:11:06:ed:42:7e:c4:7d:8f:74:7c:ff:56:
65:b7:46:d2:12:81:23:4b:88:e2:84:bf:e0:36:80:21:24:85:
8d:d6:e2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 11:47:08 2025 by rpki-client