Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: T+DOlBDC9MS9FUbsbpM6gkvCzmu3JE2vFob9znayfO8=
Subject key identifier: 88:A4:A2:4E:8F:C8:E4:E2:3C:F6:EC:88:48:E0:3E:28:5A:C6:C5:21
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 019A522C197689EE6B041E955DB2A516AD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 13FC
Signing time: Wed 05 Nov 2025 04:00:12 +0000
Manifest this update: Wed 05 Nov 2025 04:00:12 +0000
Manifest next update: Thu 06 Nov 2025 04:00:12 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: VomFKkSv7mJFUf4oTuGPUGRBgV0WZ3ZKtMKvKG+VzXU=)
2: GpM90An4j0aWnAQVOPwoRVNatnk.roa (hash: MKIleZe0XP5Hk0DTuIZD6iDzaTxtrUWEQu34eF8ZBrE=)
3: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (hash: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:19:76:89:ee:6b:04:1e:95:5d:b2:a5:16:ad:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Nov 5 04:00:12 2025 GMT
Not After : Nov 6 04:00:12 2025 GMT
Subject: CN=88a4a24e8fc8e4e23cf6ec8848e03e285ac6c521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:bf:2d:c2:dd:09:10:c4:d1:d5:10:1d:a8:
de:5f:ac:66:8d:42:1f:40:72:c0:95:ce:cc:b6:10:
6b:93:21:82:8f:52:1b:34:84:b3:89:6d:5a:d0:00:
32:e4:07:0b:b4:04:c5:72:92:02:e7:4c:a2:7b:d8:
74:a4:f6:cf:73:92:42:c8:67:56:6d:d6:cd:5b:18:
67:6b:6e:1a:fe:75:49:c6:f7:a5:22:83:6e:82:48:
31:fd:c3:98:95:15:93:fd:0d:9c:de:ac:8c:15:fb:
3b:9e:7d:b0:35:39:5e:3d:41:a0:7d:79:2a:57:01:
7d:a3:81:38:5d:9e:06:54:47:80:fb:31:f4:a0:f1:
c0:8d:86:c5:c4:e8:ed:c7:46:6b:89:dc:7a:08:23:
b0:70:36:15:50:a1:f4:01:d3:52:17:6e:ff:78:e5:
5e:55:65:e0:0d:0d:62:cf:8b:83:df:b4:1b:b0:73:
0d:0f:02:a2:5d:8e:c3:6e:5f:0b:4f:76:3f:6e:7d:
46:87:05:7a:b9:d2:ad:66:0f:a3:de:6e:88:22:20:
ef:24:3d:ad:43:30:7c:ee:07:88:8f:ef:69:7e:e8:
94:fa:9b:68:b0:ba:11:48:d2:28:05:dd:88:32:50:
53:97:66:9b:1b:8a:c9:f6:8a:5b:bf:53:07:56:00:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A4:A2:4E:8F:C8:E4:E2:3C:F6:EC:88:48:E0:3E:28:5A:C6:C5:21
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0c:16:9b:1d:57:02:f2:1f:ff:b5:92:80:d8:c9:d9:a6:76:
63:fb:72:18:f2:4c:f1:e7:a3:3c:63:57:62:6b:bf:bb:9c:10:
63:62:ba:3f:f3:b1:f0:c3:1a:b1:00:25:84:35:b3:e6:eb:5f:
6c:04:c9:8b:53:6f:6b:8e:34:a4:f6:e3:b2:5d:2a:ec:35:d3:
0c:da:c5:33:e4:68:58:93:18:54:c9:9d:e2:ea:21:bd:f1:15:
8b:5e:d3:86:b0:0d:17:43:f7:4e:a0:08:a1:6b:ed:2b:af:cc:
25:03:54:5e:24:b7:48:18:3d:34:8e:50:d1:09:40:9c:c2:64:
81:32:ab:e7:1c:3e:68:e6:8e:64:14:41:27:57:40:36:54:bd:
48:89:45:05:72:f8:12:09:63:3b:97:b0:b5:10:e4:65:16:38:
2d:f3:4b:b1:ff:0d:20:bc:d3:ec:af:8e:59:e6:e0:0b:05:17:
e3:22:53:c6:46:f5:22:8d:9e:b6:94:83:31:9e:db:7b:c1:7c:
07:f1:f7:84:c1:d7:57:9a:ba:c4:b2:57:5b:63:ad:f6:9a:3f:
dc:22:2c:27:cc:94:d0:2c:da:40:ba:18:cb:94:f5:8a:ea:1e:
50:b4:1d:00:4a:02:46:ae:1d:70:4f:4a:21:cf:8b:e1:80:a6:
d7:8d:68:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLBl2ie5rBB6VXbKlFq0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZGNmNjJjNmI1NDExMTM5YTVkMTMwOWRkOWVkOTI2ZjQz
MTQzMjAwHhcNMjUxMTA1MDQwMDEyWhcNMjUxMTA2MDQwMDEyWjAzMTEwLwYDVQQD
Eyg4OGE0YTI0ZThmYzhlNGUyM2NmNmVjODg0OGUwM2UyODVhYzZjNTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1u/LcLdCRDE0dUQHajeX6xmjUIf
QHLAlc7MthBrkyGCj1IbNISziW1a0AAy5AcLtATFcpIC50yie9h0pPbPc5JCyGdW
bdbNWxhna24a/nVJxvelIoNugkgx/cOYlRWT/Q2c3qyMFfs7nn2wNTlePUGgfXkq
VwF9o4E4XZ4GVEeA+zH0oPHAjYbFxOjtx0Zridx6CCOwcDYVUKH0AdNSF27/eOVe
VWXgDQ1iz4uD37QbsHMNDwKiXY7Dbl8LT3Y/bn1GhwV6udKtZg+j3m6IIiDvJD2t
QzB87geIj+9pfuiU+ptosLoRSNIoBd2IMlBTl2abG4rJ9opbv1MHVgDaDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIikok6PyOTiPPbsiEjgPihaxsUhMB8GA1UdIwQY
MBaAFArc9ixrVBETml0TCd2e2Sb0MUMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYzg0M2UtNjBjNy00N2FjLTgyM2It
ZjhkNmJkMzBjYzE5LzEvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYzg0M2UtNjBjNy00N2FjLTgyM2ItZjhkNmJkMzBjYzE5
LzEvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgwWmx1X
AvIf/7WSgNjJ2aZ2Y/tyGPJM8eejPGNXYmu/u5wQY2K6P/Ox8MMasQAlhDWz5utf
bATJi1Nva440pPbjsl0q7DXTDNrFM+RoWJMYVMmd4uohvfEVi17ThrANF0P3TqAI
oWvtK6/MJQNUXiS3SBg9NI5Q0QlAnMJkgTKr5xw+aOaOZBRBJ1dANlS9SIlFBXL4
EgljO5ewtRDkZRY4LfNLsf8NILzT7K+OWebgCwUX4yJTxkb1Io2etpSDMZ7be8F8
B/H3hMHXV5q6xLJXW2Ot9po/3CIsJ8yU0CzaQLoYy5T1iuoeULQdAEoCRq4dcE9K
Ic+L4YCm141oSg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:29 2025 by rpki-client