Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
File: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json)
Hash identifier: ATfGrvOVknP/2t8ZFPFdMONGTRIKD5Db9ZXMV4iuUqM=
Subject key identifier: D5:B9:F5:D2:4F:BA:05:FA:4F:1E:81:7C:72:47:A2:28:77:5E:05:65
Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
Certificate issuer: /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Certificate serial: 019A533F3905AFD7B248AA9519CF9EE31465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
Manifest number: 06E9
Signing time: Wed 05 Nov 2025 09:00:43 +0000
Manifest this update: Wed 05 Nov 2025 09:00:43 +0000
Manifest next update: Thu 06 Nov 2025 09:00:43 +0000
Files and hashes: 1: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: W/UslMYyKzHfTzhaN8ZhKu9A63eQ14w4hGIMzscLaPg=)
2: D4WSO03jiEw1kzb7ndTCvZppED8.roa (hash: 91K1tOs91bcoBI4JkBxfYAcoNFaPEkkdbj6eyaYsnvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:39:05:af:d7:b2:48:aa:95:19:cf:9e:e3:14:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Validity
Not Before: Nov 5 09:00:43 2025 GMT
Not After : Nov 6 09:00:43 2025 GMT
Subject: CN=d5b9f5d24fba05fa4f1e817c7247a228775e0565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:31:4b:fb:1a:e3:9b:52:11:b9:a5:4a:4a:c5:
59:69:df:66:a4:dc:70:02:46:7b:4e:4e:37:9a:84:
a4:17:69:4c:72:72:16:d4:a1:fc:7e:3f:a1:78:5c:
cb:32:3e:3c:04:79:19:88:5d:96:fc:ab:2b:32:3a:
a1:77:11:a6:24:bc:87:1b:ab:20:f6:fc:0b:b8:db:
77:9e:ff:f1:8e:6c:ec:38:cc:dd:de:6c:e9:7b:8e:
0d:1c:46:80:d7:50:c5:2a:4d:fd:4a:8d:b9:d0:d5:
30:18:ef:e8:c1:94:49:72:70:25:c1:60:24:bd:0a:
19:1d:89:0c:80:68:05:5d:c9:bf:52:ff:89:38:6d:
64:4c:04:20:21:05:06:6d:fa:82:ca:11:53:72:cb:
ab:93:d2:2d:28:8a:2c:db:36:c1:f1:4c:67:75:15:
2c:b6:54:d0:22:9d:e2:41:c9:1f:43:7d:8d:5c:e8:
04:0e:7e:6b:32:4d:dd:d4:52:6f:50:91:26:05:c4:
4f:c6:76:f3:2f:ad:c5:11:fd:ec:25:a2:b3:74:a7:
fb:77:cc:6a:9b:5e:fc:ad:74:31:1b:2b:a4:26:67:
ef:c3:42:01:9e:f2:18:f7:cd:eb:6f:55:f5:45:64:
e3:2d:02:12:45:c6:31:df:07:b6:95:0d:cc:8e:2a:
b1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B9:F5:D2:4F:BA:05:FA:4F:1E:81:7C:72:47:A2:28:77:5E:05:65
X509v3 Authority Key Identifier:
keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:05:24:8b:6a:5f:4c:c7:e8:e3:40:a6:25:27:a8:f5:c8:56:
82:ea:03:21:12:b6:d7:1f:58:ad:a2:57:a1:9b:05:03:fa:7d:
73:4f:af:1b:98:80:b3:8b:e3:69:59:c1:29:74:6f:20:d7:db:
31:c7:f7:db:c3:aa:a0:f7:37:17:b4:db:e0:18:40:45:59:d5:
33:41:19:c8:f0:12:be:a8:a2:04:40:88:f9:c2:2d:cc:ab:dc:
8b:81:00:0b:62:52:3f:43:73:9a:a5:00:83:4d:e7:92:57:fc:
31:8b:07:7c:d9:b2:1a:5c:bd:e6:23:41:fe:09:f0:c8:3c:1d:
cb:80:ce:87:fc:42:ae:ef:fb:ae:ac:22:d6:40:0e:dc:5a:83:
c3:75:b2:14:33:bd:c3:25:77:83:1e:fe:80:91:a4:f6:86:59:
83:45:38:15:95:5f:76:2d:90:0c:40:2b:f6:c0:e3:a9:4e:af:
40:40:57:15:60:3a:8d:15:40:a7:b0:e2:6f:a9:84:dd:48:d4:
5e:0d:d3:fe:27:1b:fb:d0:af:be:41:7b:f3:3a:7b:2b:31:07:
5d:f1:fe:b9:26:d8:67:93:d1:98:82:2b:a1:45:b8:69:2f:40:
4e:16:dd:1b:b0:dd:fd:fc:05:ba:c9:78:56:7d:8e:60:d8:01:
72:9d:38:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPzkFr9eySKqVGc+e4xRlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5M2FkMDhhZDczYzJhYzQzOGFjNjk4MTYzODFlN2FhM2U4
NjU3OWEwHhcNMjUxMTA1MDkwMDQzWhcNMjUxMTA2MDkwMDQzWjAzMTEwLwYDVQQD
EyhkNWI5ZjVkMjRmYmEwNWZhNGYxZTgxN2M3MjQ3YTIyODc3NWUwNTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTFL+xrjm1IRuaVKSsVZad9mpNxw
AkZ7Tk43moSkF2lMcnIW1KH8fj+heFzLMj48BHkZiF2W/KsrMjqhdxGmJLyHG6sg
9vwLuNt3nv/xjmzsOMzd3mzpe44NHEaA11DFKk39So250NUwGO/owZRJcnAlwWAk
vQoZHYkMgGgFXcm/Uv+JOG1kTAQgIQUGbfqCyhFTcsurk9ItKIos2zbB8UxndRUs
tlTQIp3iQckfQ32NXOgEDn5rMk3d1FJvUJEmBcRPxnbzL63FEf3sJaKzdKf7d8xq
m178rXQxGyukJmfvw0IBnvIY983rb1X1RWTjLQISRcYx3we2lQ3MjiqxEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNW59dJPugX6Tx6BfHJHoih3XgVlMB8GA1UdIwQY
MBaAFAk60IrXPCrEOKxpgWOB56o+hleaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wOTU5ODUtZDBkYy00ZDQxLTk4ZWIt
NDFhYTQ3NWQxNWI4LzEvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wOTU5ODUtZDBkYy00ZDQxLTk4ZWItNDFhYTQ3NWQxNWI4
LzEvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQUki2pf
TMfo40CmJSeo9chWguoDIRK21x9YraJXoZsFA/p9c0+vG5iAs4vjaVnBKXRvINfb
Mcf328OqoPc3F7Tb4BhARVnVM0EZyPASvqiiBECI+cItzKvci4EAC2JSP0NzmqUA
g03nklf8MYsHfNmyGly95iNB/gnwyDwdy4DOh/xCru/7rqwi1kAO3FqDw3WyFDO9
wyV3gx7+gJGk9oZZg0U4FZVfdi2QDEAr9sDjqU6vQEBXFWA6jRVAp7Dib6mE3UjU
Xg3T/icb+9CvvkF78zp7KzEHXfH+uSbYZ5PRmIIroUW4aS9AThbdG7Dd/fwFusl4
Vn2OYNgBcp04dQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:37:03 2025 by rpki-client