Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
File: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json)
Hash identifier: GmEoHrj+nuAjBXoYVAyAFaPBfW06E3IpFgT4D8miNFU=
Subject key identifier: 88:FF:5E:B5:CB:B3:4A:E6:BE:1D:42:92:4C:7D:4C:16:6D:52:53:21
Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
Certificate issuer: /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Certificate serial: 019A28C28C80B6A907AEC1E2B9F813E6E8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
Manifest number: 06D3
Signing time: Tue 28 Oct 2025 03:00:29 +0000
Manifest this update: Tue 28 Oct 2025 03:00:29 +0000
Manifest next update: Wed 29 Oct 2025 03:00:29 +0000
Files and hashes: 1: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: lZANeDXounjVyZ7y0DAZTKrw0buuBGiFIxcEakQrmH0=)
2: D4WSO03jiEw1kzb7ndTCvZppED8.roa (hash: 91K1tOs91bcoBI4JkBxfYAcoNFaPEkkdbj6eyaYsnvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:8c:80:b6:a9:07:ae:c1:e2:b9:f8:13:e6:e8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Validity
Not Before: Oct 28 03:00:29 2025 GMT
Not After : Oct 29 03:00:29 2025 GMT
Subject: CN=88ff5eb5cbb34ae6be1d42924c7d4c166d525321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:42:b5:dc:f3:de:e4:c0:26:4a:6e:05:a5:
a0:47:7d:3a:68:3f:77:f3:97:e0:92:b6:17:14:6a:
1c:96:08:c3:ce:bd:5e:64:45:0a:ce:da:ae:a4:d5:
ee:61:30:83:d5:57:91:25:8c:50:1c:ff:9e:bd:2a:
33:99:22:d3:38:a4:84:8a:dd:05:cd:b2:a6:fa:0a:
12:40:a3:40:7f:eb:f6:de:58:84:ec:92:cc:95:7f:
70:0d:13:96:19:34:c6:70:70:bb:cc:b4:7f:43:87:
bf:1d:ea:60:78:aa:c3:1f:f6:2f:b5:4d:2d:99:af:
34:e0:7d:e6:1a:63:6d:45:9c:90:e0:a2:7d:ac:a6:
61:2a:2c:e2:b6:db:15:e2:f3:af:b6:f1:08:4b:ef:
bf:48:d5:49:9a:49:ff:ed:95:57:c8:3d:93:fe:b0:
e0:0f:c3:1b:3d:d9:ff:87:cf:10:03:17:45:f6:f5:
13:33:8f:01:50:b9:f3:2e:cd:77:d6:93:29:0f:fa:
ae:ea:48:c8:79:bb:1d:16:8d:03:14:42:e9:f0:a4:
16:a2:13:63:b2:50:10:1d:6f:44:99:bf:ae:be:5e:
1e:a4:35:aa:a4:fe:ea:e6:f7:70:39:79:55:e8:e1:
5d:a0:9a:92:bc:c9:bf:73:fb:35:06:75:6f:90:e1:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FF:5E:B5:CB:B3:4A:E6:BE:1D:42:92:4C:7D:4C:16:6D:52:53:21
X509v3 Authority Key Identifier:
keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:92:3c:45:60:48:a2:21:6c:67:c1:c4:5d:68:37:65:1a:d8:
cc:13:22:3e:62:a2:dd:2c:9e:24:53:ca:91:31:0e:32:3a:c0:
f3:77:51:fb:48:51:21:99:fe:ca:24:b3:7a:57:4f:8c:a7:5b:
fa:38:f7:15:ca:61:6c:86:9d:3b:1d:08:98:29:be:51:2d:4b:
93:28:ce:b5:df:fb:42:3d:01:70:e6:48:7d:11:f1:a8:4d:f2:
c5:6b:aa:4e:f6:c1:9d:bc:a2:76:b8:40:a5:32:ba:de:7d:d0:
c3:35:42:25:c8:69:81:85:cc:c1:86:21:3d:8a:44:ae:cb:d3:
f9:00:c1:cb:66:a4:58:c1:10:4e:bb:28:31:f6:60:47:91:8e:
b7:11:80:d6:2a:85:6a:e0:bd:6b:7e:00:6c:28:d3:42:0f:07:
18:79:11:3e:5b:0f:f8:10:b2:01:d1:27:de:d7:5c:13:79:7d:
50:4b:28:df:75:ce:c9:de:dd:52:77:d9:1a:a4:86:47:a9:1b:
d8:dd:14:61:81:86:97:17:41:30:74:9e:27:f2:ac:d8:85:66:
93:af:36:3b:bd:cc:7e:21:25:bd:9b:d3:ae:d2:ff:9d:27:fa:
30:db:f1:0f:ce:07:c2:5d:bc:90:c3:74:35:9d:38:f6:dd:19:
ec:f4:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:03:41 2025 by rpki-client