Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: yWS6AOri5fGMcjMX0uGyupCOd0CQ9NbM7lMNdHof/PI=
Subject key identifier: 95:9F:B3:37:A5:A6:6C:74:8E:3B:11:FE:0C:FF:76:E2:6C:60:65:EE
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 019A4DAA7678337CDD908EAD1C61FADDAE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 1425
Signing time: Tue 04 Nov 2025 07:00:08 +0000
Manifest this update: Tue 04 Nov 2025 07:00:08 +0000
Manifest next update: Wed 05 Nov 2025 07:00:08 +0000
Files and hashes: 1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: GHBqhmoZ+0r7a5MGARcz0pIIp50sD0mOvEKY1eZnpdw=)
2: FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (hash: QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:76:78:33:7c:dd:90:8e:ad:1c:61:fa:dd:ae:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Nov 4 07:00:08 2025 GMT
Not After : Nov 5 07:00:08 2025 GMT
Subject: CN=959fb337a5a66c748e3b11fe0cff76e26c6065ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:fc:17:8b:bb:ff:55:9f:22:71:93:99:41:
4a:20:c1:23:40:65:57:f6:7b:3d:67:4d:b4:1a:dd:
f4:f9:31:7f:c4:ff:72:34:84:b1:a2:bd:e5:72:88:
ac:10:16:fa:21:1f:f3:7b:d2:d1:c3:a0:b3:20:5f:
8f:c3:8e:86:06:69:5c:59:ad:22:04:4d:5e:bc:9f:
97:33:40:02:c0:ef:c7:88:a0:11:58:e5:05:f7:73:
c3:f5:12:32:d1:d2:08:a4:5c:47:4b:f5:d2:ff:4e:
43:2d:1c:4b:5c:1e:bb:d6:c2:9f:d9:86:5b:2d:84:
dd:ed:d2:41:35:78:06:88:f4:20:95:d1:1f:7e:a5:
d3:c7:ec:96:dd:3d:32:20:a8:8f:dc:ff:48:27:4b:
67:5b:3b:d3:55:c7:79:94:f5:3c:2a:d1:49:be:ec:
ee:ac:86:d4:31:23:89:2b:dc:a6:27:cc:54:cd:9b:
92:58:1c:f8:18:4f:3f:24:58:36:ab:a3:bd:9f:c4:
54:16:0d:07:89:06:dd:72:7e:d5:f3:8b:1f:6d:15:
ed:82:93:67:99:22:30:f5:71:66:16:0b:8a:e4:67:
78:7e:f3:37:d3:5f:71:60:38:d4:37:37:68:33:e7:
70:1c:9c:63:c9:ba:9c:fe:7f:2d:93:21:9d:cd:db:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9F:B3:37:A5:A6:6C:74:8E:3B:11:FE:0C:FF:76:E2:6C:60:65:EE
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:98:2a:85:9f:71:fd:a2:19:ad:be:5d:c4:b7:c3:a5:99:f4:
90:d3:08:1c:a4:09:00:c7:9c:e3:d5:94:3a:8e:3a:8a:0d:1b:
bb:79:4b:a1:3d:92:16:49:10:3c:67:73:f3:9d:87:03:42:7e:
94:bc:22:ab:7e:86:50:8d:51:e3:c8:ea:83:a7:c3:35:2b:00:
9e:78:3f:6c:a4:34:d1:06:fb:95:a4:e6:37:b1:24:47:b3:c8:
4c:1c:7e:9f:2a:6d:bd:37:11:c2:e6:89:f3:2d:08:aa:a2:87:
6d:ce:ae:b8:82:f5:b6:59:31:da:7f:98:5d:b7:5b:ef:62:ce:
dd:38:c7:65:d4:d7:d7:a1:bf:31:66:b9:79:9a:f7:50:37:94:
f9:93:53:05:0c:3f:45:13:13:c5:0c:b3:5e:41:69:e7:b3:50:
74:db:44:b9:d8:5e:70:4f:0d:f9:a2:4f:bb:69:70:c9:42:5c:
d0:10:94:c0:81:f8:3f:c9:4d:16:ee:32:6d:7f:1c:5e:cd:84:
01:10:1b:53:81:1a:e5:80:52:06:28:78:e3:98:f9:c2:34:f7:
91:f9:a5:a2:89:11:66:e6:56:6c:35:4e:30:76:bb:60:76:d9:
61:8a:be:e5:dd:52:e5:9e:07:c0:a1:eb:04:16:f8:2b:4f:87:
f0:ef:43:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:41 2025 by rpki-client