Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: t44cMdX6ghnzDRjhEIO+OD+lZXWcSKMuoQBzXFwpq2k=
Subject key identifier: 44:E3:60:4E:D1:9D:DA:04:5B:06:76:9A:B9:E9:CF:F3:00:92:E0:56
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 019A729402C7E3FCEEFC6D814CFC8E5E69DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0B35
Signing time: Tue 11 Nov 2025 11:01:33 +0000
Manifest this update: Tue 11 Nov 2025 11:01:33 +0000
Manifest next update: Wed 12 Nov 2025 11:01:33 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: 2SvMgevMqK9Sr2r6L9zGD+GG20nqp4sJYhg/CD6NNjQ=)
2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:02:c7:e3:fc:ee:fc:6d:81:4c:fc:8e:5e:69:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Nov 11 11:01:33 2025 GMT
Not After : Nov 12 11:01:33 2025 GMT
Subject: CN=44e3604ed19dda045b06769ab9e9cff30092e056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:aa:52:62:df:a2:eb:b1:36:e5:38:12:59:a0:
e4:a3:92:4e:9d:d8:01:97:2a:45:94:ac:7d:ea:0f:
d4:9c:45:74:44:16:e2:d1:00:bd:c2:8a:d6:7e:ff:
64:65:10:d5:ae:35:ae:41:fa:dd:06:65:bd:20:05:
18:39:51:9b:46:bb:4c:f4:6b:34:ea:98:e0:3b:c2:
8c:31:45:f5:fd:8b:12:d1:08:82:72:c2:2c:3c:0d:
06:e6:9b:8d:11:61:56:74:82:9d:1d:92:ef:2c:f1:
c7:ab:45:02:df:ff:b3:25:6b:3f:81:ea:58:41:4a:
d6:28:47:da:1c:4e:63:a3:b3:18:ff:cc:d0:3f:7f:
34:24:69:e2:fa:fb:86:86:8e:af:c8:4f:e6:bc:f7:
a6:04:1e:a6:92:5d:01:b9:d5:29:46:c6:49:99:31:
14:0e:77:28:57:0e:73:e0:17:c5:cb:ae:f4:a2:5a:
4a:e1:9f:cd:ed:52:8d:66:e5:6a:95:6b:0a:6f:7f:
cb:0f:e8:6c:77:a3:0c:f0:5e:bd:49:84:43:70:f8:
e0:ca:6b:a6:b6:f6:6f:11:5f:3f:e0:8f:56:ac:ff:
aa:91:ef:42:7a:4b:23:6c:f4:23:37:72:c9:fd:81:
d1:f9:89:73:dd:85:55:23:a3:bd:15:18:8e:b9:a4:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E3:60:4E:D1:9D:DA:04:5B:06:76:9A:B9:E9:CF:F3:00:92:E0:56
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e8:31:35:72:d5:9f:45:8a:07:60:e7:60:f2:b2:75:63:cb:
97:f7:f8:12:01:bf:1a:6d:10:8c:c8:ed:39:87:1b:3d:47:50:
ee:ea:a5:3c:13:44:6d:fd:df:c5:b6:7c:a7:8d:ca:93:70:24:
91:d5:9a:9b:48:9d:35:d3:63:7f:9a:f4:80:d0:81:47:62:b3:
7d:6e:11:3e:9a:2a:9e:9c:69:67:36:4a:2d:4a:29:ac:b3:c2:
8f:99:c9:ea:93:1c:78:00:73:a1:00:58:01:19:1f:ae:35:86:
0b:66:1d:c8:0d:52:a2:1d:23:f4:a1:9b:cc:02:70:62:bc:e5:
dd:d2:da:d8:79:7e:c8:8f:63:5f:0f:92:af:fc:7f:6c:95:d7:
ee:44:8b:af:40:37:9f:09:54:df:72:a0:56:ef:fc:4f:b9:d7:
7b:c6:c1:69:8e:83:e1:31:ea:b9:47:4b:24:4b:e4:42:f4:3c:
81:83:4f:40:9f:5b:2a:02:a9:f4:d2:58:7d:96:40:a5:af:c3:
3a:5b:95:7c:43:22:87:70:53:53:a7:b0:b9:e5:80:86:84:11:
a7:61:82:27:2e:33:85:80:4e:60:40:a4:4d:08:5b:a1:50:12:
ed:4e:5f:ee:9c:a9:83:32:bb:13:30:d0:c9:ac:eb:a7:4f:a4:
4b:ee:a4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:30 2025 by rpki-client