Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
File: cteauEKpTJvypSwgz21pussxOKs.mft (raw, json)
Hash identifier: 4MipRypqIK8aCSqziugpDT9p48pBZjVmyA/sjHSwppw=
Subject key identifier: D5:0E:6B:B4:2F:28:FC:70:C2:7A:98:41:FD:61:E8:8C:C6:EC:BF:15
Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
Certificate issuer: /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Certificate serial: 019A54F6172C85F232FBB6767C7E9D3E0FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
Manifest number: B7
Signing time: Wed 05 Nov 2025 17:00:05 +0000
Manifest this update: Wed 05 Nov 2025 17:00:05 +0000
Manifest next update: Thu 06 Nov 2025 17:00:05 +0000
Files and hashes: 1: cteauEKpTJvypSwgz21pussxOKs.crl (hash: XRuGi7h4EswmCwZJHAEkyJtaPXHf+5pPGDx00MI2KWI=)
2: f6JeufGW2lCJK2Fq36WrD5nhNQ4.roa (hash: fWpRQy4BGYecUExHy8QQpY4WySNw0miKYzuPwOjiykQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:17:2c:85:f2:32:fb:b6:76:7c:7e:9d:3e:0f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Validity
Not Before: Nov 5 17:00:05 2025 GMT
Not After : Nov 6 17:00:05 2025 GMT
Subject: CN=d50e6bb42f28fc70c27a9841fd61e88cc6ecbf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:21:ae:77:8d:d8:ab:74:d6:9a:b0:6b:54:
e3:19:95:32:40:04:2c:20:ad:4b:64:80:d9:d4:75:
b6:a9:46:c0:81:cb:21:9f:f0:99:6f:1f:a2:c1:f3:
ea:57:2b:56:6d:0a:fc:c4:c4:19:31:85:12:06:ae:
ed:85:d8:2b:90:e0:fa:b6:02:8d:12:11:9b:d9:7c:
14:46:d2:26:11:50:a6:65:df:c8:62:77:d7:45:ae:
8d:49:cc:10:a0:e3:3e:96:fb:d0:b5:43:b4:8a:28:
0d:e3:0e:c3:2b:ed:3a:e7:8b:ac:12:dc:ee:92:df:
d5:a4:05:7c:40:c6:3f:ec:86:f5:62:a6:d5:df:77:
4e:e5:f9:98:22:49:de:3d:e2:6d:30:37:96:fd:f5:
bf:50:db:d4:fa:07:ad:f8:89:d8:0e:c4:ad:34:84:
6c:b6:0b:da:d5:07:50:94:90:98:6d:86:f8:bd:46:
d7:cb:55:d5:18:c1:6f:08:75:51:f3:ec:36:a5:e5:
c4:ea:d2:e4:14:31:5c:19:41:d2:76:89:36:5e:86:
02:09:e3:b9:14:1a:ba:53:cf:85:64:58:3a:dd:05:
0c:1f:63:b5:d8:f6:70:3d:70:30:75:d4:dc:97:34:
93:24:1c:31:d8:e4:26:c7:2e:09:32:f7:90:0a:46:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0E:6B:B4:2F:28:FC:70:C2:7A:98:41:FD:61:E8:8C:C6:EC:BF:15
X509v3 Authority Key Identifier:
keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d3:4b:3d:82:7e:10:37:6d:e9:d5:b3:7f:6a:02:04:bc:a9:
61:07:a8:95:3a:2b:23:d8:58:1a:c9:1d:3d:cb:9c:52:cf:f0:
a7:4e:1b:67:eb:5d:9e:b9:ff:13:5e:1a:2d:e4:f8:b2:5e:f9:
b5:21:a5:b0:e4:6d:20:45:83:11:fd:35:de:63:e0:b2:31:df:
12:71:51:96:8a:8b:22:d4:41:fc:50:bc:75:88:30:6f:e7:ea:
ef:69:16:73:99:bc:be:bf:97:fa:f4:ea:73:3b:e4:ce:7f:49:
59:d7:00:95:37:59:06:cf:38:17:10:80:62:46:3a:b1:aa:95:
27:3f:ca:43:5f:cf:ca:0c:d7:19:6c:22:fc:30:0c:96:a1:95:
cf:8e:14:34:6c:a5:06:63:28:84:a9:62:ba:17:9b:75:e5:69:
96:63:db:31:6d:3b:a8:6a:9b:e8:a7:17:68:8d:cf:c0:4e:bb:
de:66:39:e4:f5:02:80:6b:4b:9c:3a:aa:0f:47:04:9f:83:1d:
fa:b1:ce:29:b1:24:1d:50:c6:f9:04:98:27:7b:f2:59:b5:e8:
5d:e7:01:e4:2b:c4:1a:05:d6:96:cc:e8:11:42:42:d0:ca:99:
f2:2e:99:6c:54:c3:d7:9c:d5:7e:f6:8e:75:e7:60:4a:85:56:
5e:09:0a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:55:21 2025 by rpki-client