Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: kgX8RouKgY2V4/J7Ab+vSwa41YEYGnXNBtXg+Jjrg2U=
Subject key identifier: 33:5A:65:11:1A:FE:58:12:2C:C6:09:0B:A8:10:F5:3A:84:BE:9B:0C
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 019A4E86BBA1DC16348628CF9180242599A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 1143
Signing time: Tue 04 Nov 2025 11:00:43 +0000
Manifest this update: Tue 04 Nov 2025 11:00:43 +0000
Manifest next update: Wed 05 Nov 2025 11:00:43 +0000
Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=)
2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: Pw/67JiZQzOw3DI+6/YgKNGNffwxSkBPEV1QsiwAmHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:bb:a1:dc:16:34:86:28:cf:91:80:24:25:99:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Nov 4 11:00:43 2025 GMT
Not After : Nov 5 11:00:43 2025 GMT
Subject: CN=335a65111afe58122cc6090ba810f53a84be9b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:4a:3a:67:9d:6e:7c:5a:ef:96:57:1a:6d:
15:46:4a:f8:07:9f:25:64:23:fd:21:40:f0:98:25:
33:48:49:7c:a2:e4:58:ac:a5:6f:1d:c4:be:90:12:
01:52:ac:d1:55:f9:6b:a6:80:04:da:f7:6d:61:cd:
44:c9:1b:ea:a8:58:08:40:06:40:22:b9:fa:26:7c:
7b:e9:1f:ba:fd:63:13:0d:11:6d:88:71:50:b5:e3:
c0:6e:77:7c:0d:74:ce:96:51:87:1c:f7:ac:7b:c4:
fd:76:ee:b8:ee:0b:c8:78:de:08:88:97:1a:4c:43:
68:a2:52:9f:ad:f6:76:96:5a:52:b6:40:4c:46:d4:
6c:f0:21:5c:1c:7a:3c:d8:df:a3:0a:13:bd:13:fc:
13:e7:c9:eb:bd:fa:d5:71:73:36:c3:4a:75:3f:29:
ed:58:64:53:a3:ad:86:dc:31:50:d3:dd:6f:57:9b:
db:f6:21:bf:82:52:55:7c:ca:70:31:f7:85:f6:92:
07:55:3e:c5:e0:2e:f3:6c:e2:ff:16:d2:fc:f3:56:
62:2d:ed:76:54:95:48:97:d8:3e:37:06:d2:34:75:
6d:31:94:7b:d5:ac:d4:84:8a:df:e9:8a:5b:26:22:
98:34:2e:3d:45:0a:01:e6:b2:22:9f:e8:f8:32:97:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:65:11:1A:FE:58:12:2C:C6:09:0B:A8:10:F5:3A:84:BE:9B:0C
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0e:f4:fb:2f:01:56:19:b9:ef:32:9d:cc:22:a2:64:6a:4f:
0c:f7:d3:ca:4c:5a:85:73:9f:e8:47:08:0c:0c:f2:92:b3:b1:
a8:4b:4a:a3:76:b8:1f:d3:49:4e:31:6b:6c:d8:02:a1:e8:62:
9e:51:99:be:0b:5a:8e:b0:39:d7:a7:20:79:40:be:ea:c5:5c:
42:ec:32:06:df:1a:80:98:0b:ac:9e:5a:fe:42:4c:8e:5f:b2:
1e:73:c6:d4:c8:b9:f8:84:4d:e7:91:37:8b:a0:d1:c9:a4:0f:
1d:30:37:5e:90:66:1e:5c:28:85:75:23:d6:f3:c6:46:7b:43:
c7:ff:dc:de:83:dc:82:c7:28:c4:b4:a2:a9:42:3d:2c:01:8e:
42:34:3f:01:69:22:c9:37:18:14:85:8a:89:fd:9d:9c:06:d5:
11:e0:4f:54:9e:eb:f1:e7:b6:d2:03:8a:44:12:25:f6:ba:18:
4d:3e:da:11:a3:5a:20:21:58:a5:d7:7c:b9:c4:38:67:2b:72:
98:c3:b4:bd:6c:4a:03:95:59:91:2f:80:5b:34:73:5b:35:4d:
df:93:05:db:de:f7:6c:86:dc:76:d0:6a:ba:6f:f2:4f:12:53:
f8:2c:84:d0:8d:64:c7:02:39:28:a5:de:f0:c1:08:2b:3c:d8:
c1:f1:f1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:15 2025 by rpki-client