Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: 7qCtBNbjPDrsX8jiTUT6myKrn7sTqhOQ13CiqFcb7/g=
Subject key identifier: CE:34:B6:5C:5A:A6:E9:35:A2:37:A8:EF:B1:2B:A1:E8:6E:36:8A:3E
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 0199C3EA3F6BFB664BEC7AA02AFCF9D49E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0D2C
Signing time: Wed 08 Oct 2025 13:02:12 +0000
Manifest this update: Wed 08 Oct 2025 13:02:12 +0000
Manifest next update: Thu 09 Oct 2025 13:02:12 +0000
Files and hashes: 1: 1bCVWoklxu9pgUWQ1mLHB-EXkFA.roa (hash: D3wGeYBSZH8FYHWMq5xGTReS6aaUmIPr/PoC2v0b+3Q=)
2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: R5YsOSVwgMO5lCsZGlAOym/N85YufK5HtsSxLeTpT7Q=)
3: vpqI0SPiMCscv2APIfDksYTh41I.roa (hash: hkscOp/XUtYy+TgoXBDOQozFrFzTsJ23rQpXU2E0uBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:ea:3f:6b:fb:66:4b:ec:7a:a0:2a:fc:f9:d4:9e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Oct 8 13:02:12 2025 GMT
Not After : Oct 9 13:02:12 2025 GMT
Subject: CN=ce34b65c5aa6e935a237a8efb12ba1e86e368a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:1c:2f:cb:8d:61:57:0b:41:2d:c5:90:22:
41:6e:bc:e5:ac:3d:4d:d6:a3:ca:1a:92:50:6a:be:
0a:d5:9e:0e:4f:d6:33:db:85:34:39:6a:1f:eb:79:
c7:93:fb:91:90:ff:51:cf:69:cc:0f:b8:4c:a8:d6:
34:56:27:f7:c5:ed:a6:ef:4c:e8:7d:4f:d6:10:75:
b6:25:08:84:92:75:86:bd:3d:90:67:0d:24:42:41:
bb:41:bc:1f:f3:73:bd:33:71:9a:29:9d:ad:eb:9e:
cd:c6:95:cb:8d:02:e0:f8:45:0d:c4:88:43:f7:48:
35:d3:42:f6:a4:27:49:ce:db:67:e7:a8:3a:8f:5d:
a0:a3:70:90:d0:14:b5:3b:b4:25:e8:c5:6a:07:f6:
60:0c:e3:fb:86:3c:ef:81:9a:8f:a4:77:56:a5:f6:
05:1e:a1:b6:b3:e2:5c:34:ac:42:31:98:19:0e:1c:
b2:eb:2f:c4:7f:dc:1b:d9:3d:88:94:d3:95:6f:2b:
9c:a8:08:0f:d9:5a:ba:da:62:49:8a:b6:31:14:01:
03:2e:88:09:96:df:83:7c:4c:cb:32:32:81:c8:a3:
35:8f:54:31:80:b3:0a:90:ed:45:06:86:74:eb:e0:
c2:46:9e:f8:ae:a7:b4:ad:fc:11:bd:35:98:8c:5d:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:34:B6:5C:5A:A6:E9:35:A2:37:A8:EF:B1:2B:A1:E8:6E:36:8A:3E
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f6:6d:0a:0e:f7:c5:d0:26:0e:39:60:91:96:d6:f4:a2:cf:
ac:ee:dd:bb:07:e6:94:e8:d5:53:45:43:2d:ff:57:b3:e5:aa:
d5:f8:93:12:01:4b:89:74:f7:0b:d0:f1:da:83:67:7f:c2:3e:
49:71:58:58:b0:5e:e6:74:82:c9:cb:91:34:0a:e5:9d:c0:fe:
3c:06:08:cd:75:61:6a:f0:60:7b:66:fe:9a:06:2e:4e:f1:49:
d2:21:8a:d0:b1:32:cf:29:7f:3e:76:0f:e2:0d:22:e7:23:ef:
25:cd:3e:9f:d7:0d:f9:f2:a6:04:6d:18:b8:25:d1:87:aa:a0:
83:24:10:cf:12:41:19:73:f0:e4:01:95:0d:7f:1e:45:ac:36:
58:b5:69:a9:e2:86:c3:94:45:e2:33:ce:ec:a1:05:98:23:8f:
57:b0:10:2f:3b:ca:81:0f:58:38:08:fc:29:ec:f5:53:f9:c0:
e7:ef:8a:40:f2:21:26:0d:36:03:01:99:28:4d:1e:ec:75:81:
6b:82:9c:4b:14:83:5a:c3:88:b6:a4:2a:fb:80:e0:21:95:cd:
6c:33:a2:27:7a:f2:f6:b4:ab:29:16:20:af:e6:27:cf:86:b4:
9b:10:bc:9f:f1:34:09:36:a8:a6:fd:59:b2:6c:e3:a5:ba:32:
f7:dd:09:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:21 2025 by rpki-client