Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
File: CteC3XOwPU5NdCHikNY6rfdcFyg.mft (raw, json)
Hash identifier: /L5ANvlhJdM5QgdmrSWGoGSAVZG6snOuEOg1C9WcLqE=
Subject key identifier: 3F:E9:84:8F:33:5E:4C:3F:BC:F9:F3:E5:37:DE:E0:77:68:D0:AF:61
Authority key identifier: 0A:D7:82:DD:73:B0:3D:4E:4D:74:21:E2:90:D6:3A:AD:F7:5C:17:28
Certificate issuer: /CN=0ad782dd73b03d4e4d7421e290d63aadf75c1728
Certificate serial: 019A725C5DF18C82D334977A71C07EE2B401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
Manifest number: 94
Signing time: Tue 11 Nov 2025 10:00:47 +0000
Manifest this update: Tue 11 Nov 2025 10:00:47 +0000
Manifest next update: Wed 12 Nov 2025 10:00:47 +0000
Files and hashes: 1: CteC3XOwPU5NdCHikNY6rfdcFyg.crl (hash: b0Nq5wBQChJkaY/7phBLOPqg/ds+fAZRll6+aN2adGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5d:f1:8c:82:d3:34:97:7a:71:c0:7e:e2:b4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad782dd73b03d4e4d7421e290d63aadf75c1728
Validity
Not Before: Nov 11 10:00:47 2025 GMT
Not After : Nov 12 10:00:47 2025 GMT
Subject: CN=3fe9848f335e4c3fbcf9f3e537dee07768d0af61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:d2:f7:bc:69:e4:67:10:cf:0f:78:0e:08:
5c:ff:0b:cb:41:77:f9:ee:03:ac:c9:30:3c:b4:2a:
13:03:a1:f3:89:1e:dc:d2:b1:3a:0d:d7:0c:3c:b3:
4e:46:fb:a8:6d:05:f8:81:48:15:4c:7a:56:7f:c8:
9c:5c:d3:5f:98:cc:e3:0a:51:62:02:3a:30:46:eb:
64:1d:c0:1b:7c:cc:89:6c:c2:c5:77:74:57:b9:f6:
23:50:f4:a4:81:0d:5e:a2:4d:37:aa:82:80:87:a1:
b5:72:7b:69:e7:c2:ed:6e:95:7c:56:4e:1b:af:2e:
ea:06:68:62:f7:23:b9:71:b8:dd:f4:5d:f5:c6:3c:
ec:28:77:87:01:65:68:cc:1d:23:85:bc:10:fe:2d:
38:4d:c2:d4:87:d2:86:6b:09:90:ef:ee:8f:ef:8a:
96:14:09:7e:6f:0f:5c:42:d3:10:03:de:11:d0:2e:
3c:5e:d6:57:f6:75:06:16:98:55:1f:e3:6a:0b:25:
79:83:96:2f:3d:cd:01:f0:28:a2:7d:49:4f:02:84:
30:9a:22:8c:c1:b8:f3:5a:a1:b3:29:99:a2:5d:43:
e2:8e:c2:ad:35:97:21:d2:4d:58:9d:94:99:c2:14:
98:28:b2:73:50:62:a9:8a:3d:8e:54:db:b1:3c:47:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E9:84:8F:33:5E:4C:3F:BC:F9:F3:E5:37:DE:E0:77:68:D0:AF:61
X509v3 Authority Key Identifier:
keyid:0A:D7:82:DD:73:B0:3D:4E:4D:74:21:E2:90:D6:3A:AD:F7:5C:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9f:34:c0:95:22:2b:08:f4:15:c4:58:97:89:ab:ac:33:99:
ea:bd:55:75:3e:9a:b7:d1:22:16:89:be:a1:fd:77:ef:87:ee:
fd:ee:aa:f2:f5:c0:9f:79:9b:13:d6:40:5a:88:a2:f8:7a:54:
7a:9a:47:82:c1:64:c6:d5:0d:ae:af:f8:84:63:ca:4f:a2:50:
ca:4e:ee:63:de:07:62:d8:7b:51:af:cd:bb:92:b5:b8:e4:df:
dc:1f:6c:77:ce:50:47:89:02:4e:08:57:13:72:38:b7:6c:7f:
e3:28:0a:38:42:ba:8d:9d:49:9d:ff:96:7c:5f:41:6e:ed:1c:
7b:21:f4:20:51:ec:ea:9d:fe:ab:f7:26:d9:d8:a1:e2:a3:88:
c6:f6:a1:97:16:32:c9:79:c5:9f:87:bb:45:cc:66:63:99:a5:
5e:72:f9:fe:78:a5:93:d4:db:91:28:da:bb:8f:c6:02:1f:ac:
50:1c:6a:b8:7e:bb:f6:90:75:37:3a:2a:3e:34:8b:c1:35:17:
dd:21:b3:1b:b1:08:f3:3c:a1:3c:c8:3a:51:33:05:37:46:00:
f8:9f:e2:12:58:e2:da:98:ea:d1:70:a0:b4:7b:89:8b:1a:49:
f9:f6:14:92:e2:34:f0:e1:ac:60:6a:28:cd:57:be:18:3a:a8:
67:f4:df:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:43 2025 by rpki-client