Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: UQz/MYKtgDqVdHp67YoZCAd31a+zk3kGYszVPgaRXWU=
Subject key identifier: 26:BC:5E:EE:35:AB:D5:5A:16:73:84:9E:DC:00:D5:1F:37:2D:09:61
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 0199228C925E59DD2F19D1D21D464A738891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0A87
Signing time: Sun 07 Sep 2025 05:01:01 +0000
Manifest this update: Sun 07 Sep 2025 05:01:01 +0000
Manifest next update: Mon 08 Sep 2025 05:01:01 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: U8bpHudC4CxAlrGiWFGepQeXADcDCK15jJnmsJeIHYc=)
2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:92:5e:59:dd:2f:19:d1:d2:1d:46:4a:73:88:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Sep 7 05:01:01 2025 GMT
Not After : Sep 8 05:01:01 2025 GMT
Subject: CN=26bc5eee35abd55a1673849edc00d51f372d0961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:42:bf:c3:e1:39:5e:20:83:b0:b2:86:5f:
2a:b2:77:51:6e:00:03:9f:9c:1a:84:91:2b:64:bf:
48:90:d5:3d:a5:d8:2d:0a:75:45:35:d4:f4:66:9d:
fa:78:05:ca:de:b7:b7:ad:83:de:3f:d1:c1:4d:c1:
ea:a0:bf:c1:7f:06:87:4e:72:6f:d3:18:99:dd:e7:
89:2c:51:9a:f0:59:20:78:26:38:b7:71:bd:b2:d4:
ca:e8:83:b7:0a:73:03:55:c5:40:b4:9a:2c:60:d1:
59:d6:59:19:9a:84:81:6f:50:c8:35:26:34:6c:27:
55:76:d3:62:b0:3b:9b:61:d8:f5:3c:62:fd:e7:0c:
b2:4e:3e:cb:84:d9:86:16:f0:ad:67:85:83:bd:6c:
60:6f:42:b7:90:1c:86:77:db:d4:78:36:bb:a3:25:
d2:67:e7:6f:b5:80:0f:5f:71:32:f3:5b:94:81:0d:
89:9e:45:9f:89:c1:db:25:2e:77:36:51:92:de:61:
1c:d8:b0:4b:12:34:a3:b2:80:c5:ed:37:47:a9:79:
37:05:8f:b7:52:5c:2f:f6:73:63:37:8e:e5:27:56:
fe:c1:5b:46:66:81:18:3f:72:4a:2a:e5:90:b6:0e:
fc:a8:5b:c4:76:18:11:f4:ee:88:41:aa:71:45:8a:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BC:5E:EE:35:AB:D5:5A:16:73:84:9E:DC:00:D5:1F:37:2D:09:61
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8b:cc:94:77:24:d0:32:88:4d:98:7b:56:48:72:af:e2:67:
47:b9:3b:98:cf:c1:29:cd:68:05:71:72:29:5b:62:f1:39:da:
9c:5a:91:11:c4:e3:53:d3:6c:9d:3f:40:7d:09:e4:3c:94:39:
8d:c5:93:bf:b2:10:21:ef:79:f8:48:98:fe:b7:02:10:61:29:
7c:be:c7:f0:ed:ef:9f:e7:5d:ba:95:fe:4f:5b:66:0b:89:44:
cf:47:d0:e2:bb:74:a3:f8:31:0b:52:60:45:ac:90:d6:f2:1b:
0e:82:25:fa:ae:c9:81:2a:51:c5:a4:50:a8:6d:76:c3:f9:fd:
fc:aa:12:06:48:1a:2f:b2:da:ce:81:b4:3f:b5:3c:39:57:c1:
8c:4d:32:e6:83:d9:33:9a:54:5b:f9:5a:4a:e4:03:1d:4b:52:
22:21:be:29:93:1f:1f:cf:61:1b:8e:7d:6a:87:a3:53:71:7f:
06:a2:61:e3:eb:39:e0:be:c9:36:a2:d3:ea:06:36:b3:88:c3:
8f:c3:4d:bf:ed:6f:7d:5d:51:fd:1b:fc:ce:98:88:f5:1f:93:
fd:68:09:12:5d:2e:99:96:85:8d:54:a7:f7:44:6b:83:e4:bc:
e2:1a:0f:ce:31:04:a7:d9:2f:e5:06:be:4c:75:7f:23:ff:34:
e3:c8:a5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:30 2025 by rpki-client