Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
File: cteauEKpTJvypSwgz21pussxOKs.mft (raw, json)
Hash identifier: TPing0GVF0LkFzm2h/MeIdoqhXXELXLv4GFVd03V7wk=
Subject key identifier: 78:0A:D9:25:62:28:3A:08:C6:76:30:01:26:19:66:28:B1:2A:A9:74
Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
Certificate issuer: /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Certificate serial: 019A4B4E2682C94E37B8DBB124C56C4D4188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
Manifest number: B2
Signing time: Mon 03 Nov 2025 20:00:04 +0000
Manifest this update: Mon 03 Nov 2025 20:00:04 +0000
Manifest next update: Tue 04 Nov 2025 20:00:04 +0000
Files and hashes: 1: cteauEKpTJvypSwgz21pussxOKs.crl (hash: pky9T0cl6/naMBOw/yfYyl822+WsPJ/J5+y6dSnhxA0=)
2: f6JeufGW2lCJK2Fq36WrD5nhNQ4.roa (hash: fWpRQy4BGYecUExHy8QQpY4WySNw0miKYzuPwOjiykQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:4e:26:82:c9:4e:37:b8:db:b1:24:c5:6c:4d:41:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Validity
Not Before: Nov 3 20:00:04 2025 GMT
Not After : Nov 4 20:00:04 2025 GMT
Subject: CN=780ad92562283a08c676300126196628b12aa974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8f:c0:be:36:08:94:38:96:17:22:55:7b:13:
fd:1c:37:46:4c:3a:f5:3c:07:b2:8e:20:1f:b4:f3:
d3:ad:d5:0e:3f:7d:25:ba:c7:3b:93:c5:06:52:a5:
04:a2:fb:0b:9c:6d:6d:1a:b3:e6:a3:05:43:a1:c3:
d3:e2:ba:c6:f4:ed:a4:d4:4f:39:ab:75:13:6e:1d:
c7:a4:fe:99:07:a1:a6:7c:32:61:a2:b9:4c:e9:8f:
6a:66:a9:b9:82:ed:5e:0a:0a:90:c2:b1:40:79:91:
9d:b9:30:fe:74:21:0e:fb:64:19:a5:9a:28:21:a0:
04:36:c9:ab:9e:e4:6f:e0:55:75:e2:0f:76:60:f5:
41:28:4a:d3:46:3b:6a:55:75:45:e7:fc:3e:f0:9f:
2a:bf:30:42:6a:dc:91:bb:d2:1e:6c:ee:6b:06:e2:
71:d7:e2:64:86:2d:01:bd:d1:ce:6b:81:55:cb:e0:
c2:40:76:16:50:b3:41:fe:8e:2f:94:e4:1e:86:86:
84:c1:c6:6e:80:d7:66:8b:45:de:88:c6:12:fa:e7:
5d:51:59:ae:10:ad:4c:1f:68:fd:a1:4a:49:b9:bf:
a7:28:6f:68:0e:2e:4a:26:24:2c:10:cf:c3:ed:6f:
78:dd:0f:20:e1:d3:cc:7c:f4:20:c8:9e:59:f9:4e:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0A:D9:25:62:28:3A:08:C6:76:30:01:26:19:66:28:B1:2A:A9:74
X509v3 Authority Key Identifier:
keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:52:e3:71:97:f8:60:07:66:20:ed:f7:51:c6:07:7f:a9:f1:
c1:49:aa:47:93:60:24:02:0b:b0:f3:85:64:37:70:38:40:30:
a6:b4:39:65:27:07:33:62:46:27:cd:0a:e7:ca:55:8c:48:ca:
f7:dc:d2:42:63:e1:a5:64:3c:6f:2b:7e:d6:7d:62:16:9e:3c:
06:66:5e:a3:39:bc:0f:c6:bf:62:db:e9:35:30:60:1d:29:38:
3b:e5:e1:e7:31:22:36:ba:c0:63:3e:f0:0a:9c:ec:3d:f0:98:
f6:da:07:54:63:d4:a4:1a:4d:e9:e8:7f:ff:2f:5d:3f:cf:9d:
69:df:38:18:d9:fa:d0:73:59:81:66:92:59:e9:6c:cb:30:5f:
c6:6e:fb:68:dd:9f:1e:32:c2:21:46:35:85:a1:3d:74:20:7b:
46:38:45:40:83:56:a6:a8:e0:2d:ef:b0:3d:77:db:3c:05:53:
9a:5e:e5:16:9d:f9:ec:fe:5d:aa:84:75:4c:90:45:70:d9:39:
05:39:fd:dc:9b:57:32:32:90:64:76:1c:31:3c:d8:a9:90:6e:
2c:89:1d:13:16:d1:4c:2c:a2:34:b4:82:cb:e1:92:46:78:0c:
d8:07:65:5c:7c:9d:1c:d4:c6:7f:e0:75:11:c4:20:da:e6:a0:
ed:fc:aa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:08 2025 by rpki-client