Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
File: ctjb6kAj1p9H-JvSCC__skZt0qU.mft (raw, json)
Hash identifier: 7HwI+q8VtGfhyn72YzrL7A8Qurr3qmij4dLscydToBs=
Subject key identifier: F8:A6:69:C5:9F:61:E7:71:8D:86:F9:06:90:61:30:28:0B:7B:CA:A5
Authority key identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
Certificate issuer: /CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Certificate serial: 019A70A4D1D1FAB494E85E69AD1BDD1EE34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
Manifest number: 08DD
Signing time: Tue 11 Nov 2025 02:00:41 +0000
Manifest this update: Tue 11 Nov 2025 02:00:41 +0000
Manifest next update: Wed 12 Nov 2025 02:00:41 +0000
Files and hashes: 1: Egv_COpkQ4qE0m0lj_BQmNwIMRA.roa (hash: 7o6c3PTeF8AIq/25Q6USnosQEeLS7MscdEHZbwRxm6I=)
2: ctjb6kAj1p9H-JvSCC__skZt0qU.crl (hash: dBddQtynAgfaA0b+qmFkBts7wxUC9bbmbFRyLKycddA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d1:d1:fa:b4:94:e8:5e:69:ad:1b:dd:1e:e3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Validity
Not Before: Nov 11 02:00:41 2025 GMT
Not After : Nov 12 02:00:41 2025 GMT
Subject: CN=f8a669c59f61e7718d86f906906130280b7bcaa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:c2:cc:24:c2:8c:2d:98:7b:f3:9f:dc:84:
27:40:de:fa:f2:d2:14:d5:57:ef:5c:d4:06:06:ad:
f7:74:aa:05:2a:56:d8:b4:93:58:76:0b:44:00:e6:
97:4d:6c:de:37:48:eb:b3:15:a1:95:ce:44:e0:b2:
09:c7:0b:76:52:9c:84:e1:af:7d:30:3d:3a:7b:e5:
54:1c:d3:15:7f:0d:bd:be:5a:4c:9b:7f:0c:ab:85:
e6:f0:cc:80:5f:ac:3e:75:21:14:8b:ac:f4:f3:6b:
94:67:e7:4b:f8:1f:42:55:2d:f1:33:fa:35:cd:bd:
92:70:45:74:6d:39:69:68:e6:e1:3d:63:58:3f:ba:
1a:6c:16:b6:ed:89:04:01:cd:f3:90:0f:ed:1d:eb:
d1:82:83:1e:a5:3f:c7:6c:21:f4:95:42:44:50:20:
49:dc:44:20:30:84:52:ad:6c:c7:35:59:f3:dd:9e:
93:2f:f5:01:65:de:c2:03:96:ff:24:1e:67:62:0e:
42:37:12:4f:28:72:8c:06:c8:e3:0c:5b:e6:3d:00:
53:48:76:c2:1d:ad:8c:b7:91:bf:df:4e:4c:5d:47:
5a:3a:12:d5:81:57:19:a9:8b:c4:b0:48:2c:f6:65:
4d:aa:3f:8b:6b:84:2a:6e:b5:27:cd:52:67:e8:6b:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A6:69:C5:9F:61:E7:71:8D:86:F9:06:90:61:30:28:0B:7B:CA:A5
X509v3 Authority Key Identifier:
keyid:72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0b:bb:a6:ca:14:62:0e:82:ee:74:11:2f:fc:52:d0:51:1a:
db:60:9a:a7:52:36:07:aa:c0:83:04:b2:c2:b2:ca:bf:a6:b3:
40:6a:5a:a7:98:9a:ec:6d:2f:ae:3b:b4:40:2b:75:44:11:15:
70:df:a6:c0:dc:6a:14:28:63:0c:b4:9a:1e:73:2d:2f:1c:f1:
4f:a1:66:0c:44:d9:0f:1f:dd:05:b0:6a:26:51:95:d1:3a:d4:
7f:f9:de:8c:f1:df:bd:21:8f:ad:c6:1d:22:e7:83:cc:5d:92:
68:60:0a:b9:dd:4b:f7:5e:dc:af:4a:d6:ef:d1:09:14:9c:47:
be:d4:6f:b6:54:bd:8a:ba:98:08:49:e4:be:f5:f3:b0:16:c0:
a3:36:82:e0:64:08:54:f2:57:d9:23:7b:50:af:36:f5:40:9a:
60:13:b7:4f:52:67:f4:19:fb:02:62:08:45:2f:8e:b6:65:60:
18:58:cd:74:52:24:17:44:82:5f:53:a4:76:2a:8c:bf:f3:23:
4e:55:7f:55:ef:e5:0b:21:cb:51:ed:1d:a9:cc:b6:95:79:82:
6b:4b:39:b9:3b:b7:5e:10:d2:2a:51:20:f4:31:f1:a0:99:12:
d3:54:44:a4:50:23:95:ff:04:89:46:9f:49:d6:29:4b:17:b0:
4e:0e:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:50 2025 by rpki-client