Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: NLIUaZU5kUNoCezi563jdC0aLwioIPq6yiYqKD6sL/4=
Subject key identifier: 34:DA:F1:5D:45:C4:A6:C1:CC:B8:02:60:17:ED:9C:97:77:76:B3:ED
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 019A706E4558BA3BC826ACA9735810E0AE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 1437
Signing time: Tue 11 Nov 2025 01:01:06 +0000
Manifest this update: Tue 11 Nov 2025 01:01:06 +0000
Manifest next update: Wed 12 Nov 2025 01:01:06 +0000
Files and hashes: 1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: fkvkgXaTvFKxXMIUwXr8/H+TUIstoKtHMaTrN96Kyls=)
2: FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (hash: QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:45:58:ba:3b:c8:26:ac:a9:73:58:10:e0:ae:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Nov 11 01:01:06 2025 GMT
Not After : Nov 12 01:01:06 2025 GMT
Subject: CN=34daf15d45c4a6c1ccb8026017ed9c977776b3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:a3:57:84:55:27:fb:70:96:b8:7d:00:05:
e6:c8:87:15:df:10:cc:28:d0:cb:fa:3d:48:f7:a9:
73:e7:a4:9a:fd:90:e6:1f:c0:9a:b6:86:55:41:42:
1e:bd:62:fd:8a:89:90:1d:e5:4a:14:e1:17:0a:dd:
97:6f:3a:d1:ab:e0:33:70:1e:72:a4:1d:4e:89:93:
78:3c:06:09:27:97:f6:ce:21:07:a9:ad:9e:9a:f4:
13:d6:52:44:9c:c6:c7:e1:d7:cf:28:ff:a7:a6:be:
13:75:b0:07:d7:ff:05:4b:bb:4f:59:a4:8e:c6:d3:
41:ac:c7:c7:42:ef:ee:bf:8f:db:5a:a3:a0:64:e8:
66:1c:e9:bd:6c:41:94:9b:ea:bf:0d:82:89:68:69:
d8:70:dd:86:cb:5f:97:7f:49:3d:54:b4:9a:fb:c5:
c6:0d:d2:1d:be:cf:10:88:14:5f:7a:cd:bb:7e:c3:
b9:97:c3:87:c7:e7:fc:98:ed:0a:73:1f:80:3c:f2:
82:41:83:5b:4b:be:0c:64:b6:07:6f:e8:86:9c:c6:
15:54:eb:2e:68:b1:95:b4:56:6f:0c:99:43:e3:31:
c0:55:7e:b1:ac:34:37:24:47:4e:b7:95:16:79:34:
68:59:eb:49:15:fc:9e:9b:8c:36:11:65:25:b7:ef:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DA:F1:5D:45:C4:A6:C1:CC:B8:02:60:17:ED:9C:97:77:76:B3:ED
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c3:0a:e4:55:96:6f:48:d0:f2:61:96:73:65:b1:04:0b:f4:
7d:c9:32:16:fe:29:c6:64:d4:26:63:e0:0b:b9:cb:da:0d:80:
6d:d8:93:e7:5d:3d:4a:ae:42:cc:a0:31:28:e3:31:d2:be:32:
59:5a:f7:c8:bb:9d:d3:4d:4c:e0:44:4e:17:f2:d7:4b:4a:dd:
54:04:eb:20:f4:e9:5b:d8:e7:50:91:86:9e:59:01:6c:70:b5:
c4:ad:03:8f:63:e0:d1:33:14:56:03:ad:59:53:83:d8:86:c7:
63:80:69:90:94:0c:4e:8b:a1:dc:1f:b8:79:4c:58:29:3f:e3:
06:f8:16:2e:c0:3c:8d:8f:94:23:9f:62:96:9a:f1:6b:66:9d:
e4:74:f2:21:a0:33:26:b3:92:a0:83:1f:92:4f:49:71:8c:3b:
60:59:0e:96:53:76:12:e2:a8:64:cc:c8:2e:94:e3:e6:3b:38:
18:28:9d:68:03:8a:fc:b6:3b:a5:40:5e:f9:07:43:96:25:73:
01:aa:48:51:eb:54:49:fc:47:eb:6b:d8:91:8c:90:f3:73:a9:
98:c8:aa:3a:d7:16:73:4f:f1:80:59:5c:cd:40:00:2f:72:27:
38:43:8f:d7:d8:45:83:6f:ce:8e:8a:4a:4f:47:42:3d:dc:35:
67:10:64:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:36 2025 by rpki-client