Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File: CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier: OpCCZKKR2AulTt5t36NKFyrgJuRmpTCiyQTOGcOo2bk=
Subject key identifier: AF:CB:2A:07:1D:AC:C2:19:90:3B:7A:F1:DE:77:7B:A8:14:25:61:51
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer: /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial: 01988AA13792C7EC785FD5B0CA8B13ACF9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number: 101D
Signing time: Fri 08 Aug 2025 17:01:17 +0000
Manifest this update: Fri 08 Aug 2025 17:01:17 +0000
Manifest next update: Sat 09 Aug 2025 17:01:17 +0000
Files and hashes: 1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: M6Daud4Meq0rNRTkz2HdO6inzABmGENQcNuHikyOB1U=)
2: p9dm9G2iCzsw8k2RDOLA-aoAnro.roa (hash: RaSFGXIJc/dpz2m+EsrfJ2ccZ5vMg1R8ZkPmnS2txJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a1:37:92:c7:ec:78:5f:d5:b0:ca:8b:13:ac:f9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Validity
Not Before: Aug 8 17:01:17 2025 GMT
Not After : Aug 9 17:01:17 2025 GMT
Subject: CN=afcb2a071dacc219903b7af1de777ba814256151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:d1:e1:bb:5d:e4:74:54:56:bc:f8:ea:ff:
33:50:08:8b:5b:42:37:46:74:29:61:a4:af:85:66:
a8:c7:f3:75:62:7b:84:8c:e6:10:bc:78:c6:0d:7b:
6d:93:14:fa:17:11:1e:3a:48:06:13:b8:4f:11:10:
14:96:47:f9:2e:5d:4f:23:db:8b:02:71:42:f2:ee:
7e:da:f6:8e:84:4b:90:2b:2b:62:c0:ed:6a:3b:e6:
2c:0b:c6:e5:d2:29:ea:2f:f2:c1:9f:e7:9a:65:4e:
79:e1:f7:52:66:88:eb:8b:35:82:61:60:5f:91:49:
37:5e:a2:47:f7:8d:cf:9f:cb:7d:77:8b:7a:6a:d4:
e6:ef:24:73:26:4e:2b:f2:a6:be:f8:48:ff:1d:2c:
83:96:db:63:b0:c2:58:f1:0b:00:14:8a:8a:e4:f2:
65:cd:83:33:de:c4:c9:68:a1:75:5f:81:cc:6e:2d:
21:e8:b7:da:27:81:e6:40:76:0d:be:e8:05:e7:40:
ac:a3:52:6b:82:82:5c:f0:99:95:7d:b6:09:14:28:
bf:0f:a7:ff:3b:48:2b:8e:f8:bc:bb:30:a2:6b:13:
6c:c9:81:10:5e:1f:60:ca:50:44:e0:35:e0:68:71:
de:8f:d5:20:03:81:cb:d0:3b:f6:00:ac:94:1e:e9:
62:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CB:2A:07:1D:AC:C2:19:90:3B:7A:F1:DE:77:7B:A8:14:25:61:51
X509v3 Authority Key Identifier:
keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:03:43:55:ef:46:c6:f3:a4:21:c3:98:13:41:d4:71:13:ad:
2b:ae:70:2f:3e:30:b1:d0:83:6b:5e:5a:a9:68:8d:3f:4f:01:
62:e8:fd:eb:4b:a3:e2:1a:72:6c:6b:8f:3a:51:d1:10:b6:2d:
eb:9c:f2:34:90:3d:3d:d1:18:74:3c:e1:34:df:7e:cb:1e:9c:
c0:b5:7b:c7:97:47:62:c0:cd:86:f6:4a:3a:70:75:e6:82:6b:
b2:24:d4:73:a3:07:9d:8e:69:ad:fd:66:a8:2a:d7:61:14:7c:
51:4c:77:81:36:92:ac:23:a3:61:9b:f4:c8:2f:37:56:29:e0:
32:c6:62:36:8a:98:df:89:da:e3:f5:f1:7b:ec:3c:e2:fc:61:
07:01:b4:22:d0:1d:e4:72:1d:48:f1:a9:e4:96:8b:7d:33:62:
88:10:75:29:90:c3:04:a5:87:52:bd:66:ee:e3:75:ba:1f:e1:
c7:d9:dc:50:b5:ef:4e:a5:b5:22:df:9c:c3:f6:cf:dc:86:a9:
3c:e3:00:18:fe:76:bc:e5:ab:b8:cf:0c:0b:f8:ec:a8:bf:1c:
10:35:ff:16:1e:75:97:11:21:d8:4e:eb:71:98:96:62:bb:e9:
8a:62:d9:fa:8e:4f:67:f7:a7:bb:da:2e:b9:1e:50:0f:0c:ac:
d4:1d:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:09 2025 by rpki-client