Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: cjERzotLt3GUpBzPus0uGZEFg0lpHZxn+plDBY8iVRw=
Subject key identifier: 20:A9:C6:7F:33:5E:0D:1D:3D:5B:A2:ED:12:DF:5F:77:1D:68:DC:A7
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 019A2108B92ABE584A1202B1036D71FBDF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 03C8
Signing time: Sun 26 Oct 2025 15:00:10 +0000
Manifest this update: Sun 26 Oct 2025 15:00:10 +0000
Manifest next update: Mon 27 Oct 2025 15:00:10 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: CA4AAFP0ACRS9j5WHXdKK8qZdI6Q6Dt8Ur/VS07UAfI=)
2: zto4NeQB1_I3QORAJXQ-oNO5db0.roa (hash: 4X/MAtxcgqfp8hiwe6Iai+qfAWiiXuU0LC7+GPHFtZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:b9:2a:be:58:4a:12:02:b1:03:6d:71:fb:df:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Oct 26 15:00:10 2025 GMT
Not After : Oct 27 15:00:10 2025 GMT
Subject: CN=20a9c67f335e0d1d3d5ba2ed12df5f771d68dca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:92:a0:f9:a4:13:b2:ec:5f:09:ae:91:0a:
3d:bd:75:94:f8:37:55:17:d5:8b:b1:d2:a7:88:c9:
ec:7a:b6:a5:91:81:1c:fd:16:7b:7d:9b:b4:c8:e3:
62:c5:b6:5d:a9:2e:92:18:a4:99:e5:7b:2a:9d:be:
85:04:a1:7d:a4:60:54:11:4a:e7:83:d9:9c:05:0e:
2a:bd:94:8e:05:34:f7:95:b6:eb:2b:1d:70:10:d1:
fd:d9:5f:98:a1:97:28:88:79:ab:5f:6a:66:da:d9:
20:a5:d3:52:4d:7c:d4:eb:7f:dc:71:97:f5:3f:04:
80:7a:31:9c:09:9d:c0:33:ca:5f:57:20:46:f9:10:
95:38:09:19:08:7f:97:71:7a:49:e4:bc:9c:67:c6:
ed:98:35:e7:15:ad:0e:70:c9:65:8d:f0:ef:30:e0:
a3:78:43:de:29:88:df:05:de:17:c4:17:74:3b:e6:
0c:fc:48:e6:bd:c6:cd:50:33:f1:07:91:1b:b4:fa:
c1:39:96:80:78:01:c9:f3:0a:64:d5:0c:6a:26:4e:
99:17:21:26:d6:dc:58:fe:0a:a3:b8:6c:68:51:66:
3e:e6:8d:00:54:43:b9:65:f5:be:dc:50:b3:dc:78:
72:23:b2:98:d9:5a:57:0d:e6:c6:21:b6:0b:8a:c6:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A9:C6:7F:33:5E:0D:1D:3D:5B:A2:ED:12:DF:5F:77:1D:68:DC:A7
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a2:b7:12:ba:02:01:52:64:f5:cc:ae:4c:aa:d5:33:c4:c9:
1d:c4:0b:87:24:93:70:bd:12:70:eb:ab:19:72:c2:68:d7:5b:
15:85:4f:cb:39:6b:a0:f8:aa:63:80:fb:c3:ff:79:e5:9c:73:
3d:29:73:60:b4:f4:af:f1:be:f1:82:5c:1b:8a:79:17:a0:47:
0c:0c:a7:36:9c:4e:58:12:fa:8e:3e:dd:25:14:13:6d:66:f8:
73:6c:d4:ba:cd:62:96:3d:df:e4:eb:7e:77:59:ec:db:05:c3:
a8:28:60:b7:f7:18:64:0b:61:ed:47:ff:3b:d1:5e:fd:74:79:
67:e0:42:b7:18:ba:1f:4c:c1:50:50:2d:72:61:42:20:a7:e2:
f9:e9:28:8b:68:82:d2:3e:c9:a8:c4:fb:dc:0b:01:ab:75:99:
d2:35:6f:08:2b:62:a3:1c:0f:2f:01:7b:2d:14:8f:e3:99:53:
e1:03:41:c2:97:f8:b3:28:b3:f2:79:9e:1c:68:be:75:e9:8a:
3c:f0:53:f8:c7:0d:0a:22:a4:1d:24:c5:e5:a3:0c:db:27:b8:
22:d1:21:b0:0d:e4:8b:3e:0a:c7:81:95:04:1a:cb:d1:67:3e:
ea:c6:d4:14:3d:e6:17:3a:fc:50:fd:3e:f8:e7:34:7d:59:9d:
23:b7:84:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCLkqvlhKEgKxA21x+98YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDc0MjYxNmE2ODA0MWY3ZjBmY2QwNzkyZjM4ZTQxMDNh
NzlkYzIwHhcNMjUxMDI2MTUwMDEwWhcNMjUxMDI3MTUwMDEwWjAzMTEwLwYDVQQD
EygyMGE5YzY3ZjMzNWUwZDFkM2Q1YmEyZWQxMmRmNWY3NzFkNjhkY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqKSoPmkE7LsXwmukQo9vXWU+DdV
F9WLsdKniMnseralkYEc/RZ7fZu0yONixbZdqS6SGKSZ5Xsqnb6FBKF9pGBUEUrn
g9mcBQ4qvZSOBTT3lbbrKx1wENH92V+YoZcoiHmrX2pm2tkgpdNSTXzU63/ccZf1
PwSAejGcCZ3AM8pfVyBG+RCVOAkZCH+XcXpJ5LycZ8btmDXnFa0OcMlljfDvMOCj
eEPeKYjfBd4XxBd0O+YM/EjmvcbNUDPxB5EbtPrBOZaAeAHJ8wpk1QxqJk6ZFyEm
1txY/gqjuGxoUWY+5o0AVEO5ZfW+3FCz3HhyI7KY2VpXDebGIbYLisbs7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCpxn8zXg0dPVui7RLfX3cdaNynMB8GA1UdIwQY
MBaAFHLXQmFqaAQffw/NB5LzjkEDp53CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUt
YTIwOWI5MGYyN2Q5LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUtYTIwOWI5MGYyN2Q5
LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKK3EroC
AVJk9cyuTKrVM8TJHcQLhySTcL0ScOurGXLCaNdbFYVPyzlroPiqY4D7w/955Zxz
PSlzYLT0r/G+8YJcG4p5F6BHDAynNpxOWBL6jj7dJRQTbWb4c2zUus1ilj3f5Ot+
d1ns2wXDqChgt/cYZAth7Uf/O9Fe/XR5Z+BCtxi6H0zBUFAtcmFCIKfi+ekoi2iC
0j7JqMT73AsBq3WZ0jVvCCtioxwPLwF7LRSP45lT4QNBwpf4syiz8nmeHGi+demK
PPBT+McNCiKkHSTF5aMM2ye4ItEhsA3kiz4Kx4GVBBrL0Wc+6sbUFD3mFzr8UP0+
+Oc0fVmdI7eEQw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:40:20 2025 by rpki-client