Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: G82mrtHVRVbotXKjKgqy9riFVhh5JFbl5DRtZkhZIb8=
Subject key identifier: 0B:3A:3B:02:C8:71:DD:01:27:6E:D1:CE:B3:82:72:21:DF:17:2A:45
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 019A71808A8FABFECC702F3DBAFA291F09F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 06:00:40 +0000
Manifest this update: Tue 11 Nov 2025 06:00:40 +0000
Manifest next update: Wed 12 Nov 2025 06:00:40 +0000
Files and hashes: 1: F94-zZFEc6qh0jKnwFf7o1uXF7I.roa (hash: w7SpfiHOXF1SxdkUidpIylH68mEs/yNWYY/p77Td/KQ=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: z9aTbs6dfDdUVgBN1qd8vdt9yssVz5qBrOKOGlvNXK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8a:8f:ab:fe:cc:70:2f:3d:ba:fa:29:1f:09:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Nov 11 06:00:40 2025 GMT
Not After : Nov 12 06:00:40 2025 GMT
Subject: CN=0b3a3b02c871dd01276ed1ceb3827221df172a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:31:6a:0e:52:77:ab:d5:eb:81:a9:1a:df:
8a:76:37:c4:e4:3d:17:a5:d3:d0:d4:2e:66:ee:2c:
35:c5:30:3a:c7:2e:4c:15:ff:af:a4:ab:c6:5e:cc:
89:6f:50:af:ca:46:68:55:08:c2:bb:13:45:27:c1:
33:12:37:4c:73:32:23:48:ef:b3:56:08:7f:de:69:
90:e2:20:da:a1:ac:74:c8:d1:f6:cc:4d:fc:3c:8e:
f1:7a:cb:f3:5b:05:0b:ce:f1:ef:a8:43:8e:cf:8e:
12:93:ef:ce:d7:7d:e0:5e:c1:d3:89:42:c3:1c:d0:
a5:25:59:89:fe:38:b7:dc:4b:9e:16:09:e2:aa:af:
2b:c4:fd:4b:c3:ae:fc:4e:b1:00:6b:01:3d:fd:90:
0f:23:23:ea:e0:97:74:60:c7:bb:3a:82:1b:fd:23:
92:46:fd:a0:45:4e:a0:24:68:40:8a:37:2f:c4:d8:
31:4a:9a:43:e4:98:19:d1:89:48:fe:dd:9e:3c:0b:
93:6b:4a:75:14:02:29:33:fd:f7:b9:95:19:3c:a4:
77:04:32:7e:82:a2:21:d1:ef:a4:8a:74:22:28:2e:
7a:be:31:79:ca:3d:22:03:31:80:7c:c0:6b:bc:92:
bb:3b:44:de:f7:d4:0f:ec:50:13:9c:5c:6e:f8:e3:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3A:3B:02:C8:71:DD:01:27:6E:D1:CE:B3:82:72:21:DF:17:2A:45
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:33:fb:65:36:48:40:62:1d:cd:ad:cb:56:07:ac:91:7b:d3:
ac:d2:dc:78:51:e3:03:69:9a:f5:eb:16:aa:e5:fb:91:c3:3a:
09:49:57:d3:f0:83:d0:8e:97:4b:ac:06:8f:c9:69:10:96:db:
b9:3a:6c:50:32:d4:ef:86:0d:64:33:2d:3b:18:37:00:5f:dc:
6f:71:57:19:d2:9a:04:46:63:74:63:ba:c2:16:fe:a6:82:80:
52:47:52:9a:80:a4:38:74:a2:d7:37:1e:9a:24:88:98:7f:4e:
0f:50:a9:30:7a:f4:c1:31:ff:75:e5:83:f6:de:bb:61:42:8b:
45:95:58:07:b5:aa:3c:59:de:1b:54:40:37:50:dc:71:f8:87:
5c:76:ab:b9:1e:df:8e:53:17:10:33:1e:1c:79:77:f0:0e:05:
ab:c7:0c:9b:b3:49:59:0f:6a:fa:e0:00:a7:67:d4:3b:fd:bf:
9b:c4:60:e9:20:eb:86:7b:e9:88:53:f3:64:64:38:3d:eb:ac:
8f:8d:d0:38:99:f0:2f:9d:36:66:df:04:b2:94:3f:ab:0b:f8:
94:da:a0:8c:75:bc:ca:01:66:87:ae:a5:97:fe:f9:a2:f5:04:
1d:0d:51:46:6c:ab:fa:43:d0:36:a5:0a:76:da:32:2a:b9:6d:
be:53:8c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:00 2025 by rpki-client