Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: ZAJaNjxfwzanXMDWJpkBQs0Fjg5KEDFB+KF+QeSAsYk=
Subject key identifier: 73:10:F7:53:E3:5A:A6:51:9A:D9:6A:26:F6:C5:E2:B6:30:85:BB:B6
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 019A4FD0A4313A51FE6C72CEDAD3CAEB94DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0B23
Signing time: Tue 04 Nov 2025 17:01:04 +0000
Manifest this update: Tue 04 Nov 2025 17:01:04 +0000
Manifest next update: Wed 05 Nov 2025 17:01:04 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: fuKMtbUR5+5bJp40hwtXxv/J2p0qrCCRJ7ICscoWAs0=)
2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:a4:31:3a:51:fe:6c:72:ce:da:d3:ca:eb:94:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Nov 4 17:01:04 2025 GMT
Not After : Nov 5 17:01:04 2025 GMT
Subject: CN=7310f753e35aa6519ad96a26f6c5e2b63085bbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:01:1d:eb:e4:71:f6:60:ba:31:13:06:a1:
b5:84:d2:0e:79:5b:3e:b0:56:9b:85:c8:99:33:6e:
b0:64:8b:02:89:4c:42:dd:8d:c0:d6:d1:f0:33:c3:
35:ab:d4:3c:69:9e:f6:02:a7:54:7d:c3:f3:68:71:
6e:1f:7a:92:91:3b:45:4e:9b:3d:6c:53:b1:f0:a3:
7b:4d:60:32:c8:e5:e9:d5:c0:48:f8:e1:af:29:c7:
04:7a:09:7c:8e:35:97:74:90:f8:86:32:f9:b5:19:
42:43:dc:12:42:5b:15:37:15:ea:9d:1f:46:a6:22:
78:06:8e:7d:e0:82:ac:e0:bb:1a:01:c6:27:53:5b:
13:10:42:1c:3c:69:19:3a:4e:24:21:e1:f8:f2:cf:
7c:f6:6a:a0:68:60:cd:1e:e0:a9:a0:b1:59:32:c8:
44:14:3d:e4:9b:c9:2f:88:b8:6d:58:60:6a:5b:ff:
62:2c:ab:56:cd:23:fb:4e:4b:c5:c2:70:44:d6:c8:
3e:47:f4:3f:17:3c:fd:72:b8:d7:84:28:a8:71:6d:
ba:ba:88:88:1e:08:05:6c:76:89:f7:5e:83:0f:9c:
42:4f:3e:5e:dd:ed:fb:17:21:0f:58:7d:7c:fd:52:
4b:44:88:e7:01:94:67:7e:10:fc:cb:73:48:59:23:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:10:F7:53:E3:5A:A6:51:9A:D9:6A:26:F6:C5:E2:B6:30:85:BB:B6
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c8:5a:90:a6:1e:25:d9:37:04:0d:71:ba:4b:cc:fe:be:b3:
5a:76:6c:5c:d3:91:f0:94:38:fc:cd:d3:d0:fd:25:b4:22:cd:
7d:e0:81:28:d4:87:ab:0a:9f:4a:cf:e4:7c:2b:85:45:3d:19:
79:63:91:5c:db:df:81:53:45:4e:59:db:1f:df:87:5c:46:12:
3b:12:67:a5:a3:3d:f1:5b:c3:7c:c2:80:bc:ab:91:aa:58:87:
e3:16:71:ef:78:8b:5a:8a:22:3b:c1:c9:63:87:4a:97:35:85:
df:ac:c7:22:08:55:ea:25:e2:18:47:06:18:0f:bb:c0:00:ef:
7e:2b:18:f0:94:3e:1e:d6:3a:3e:fe:e9:28:85:97:89:1b:fd:
ae:f4:f4:81:bc:6e:52:d9:47:fc:26:77:0f:c9:21:a4:07:af:
f3:a1:d0:0f:9b:27:61:5a:73:d8:8d:3d:ca:a1:5a:92:f3:98:
44:a8:03:21:29:4e:50:50:1d:b8:48:ad:c7:4e:9a:93:77:48:
1d:aa:3f:f9:26:5c:fd:93:26:08:57:1e:ba:1f:46:bd:73:d4:
88:4a:ab:0a:fe:3d:5e:5f:0d:1f:58:48:fd:7c:76:d1:7d:86:
b6:f7:3c:cb:f9:30:29:44:81:a5:85:bb:95:db:d7:7f:e7:7b:
a1:fe:c7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:49:16 2025 by rpki-client