Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: bouMk5TQTmpwVxYM6To++r5D78in60Bz4/LIMrcvnOY=
Subject key identifier: ED:41:F7:ED:E8:AD:CB:01:FC:0C:03:0D:14:43:21:89:6D:AC:22:FA
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 019A4D741F75AB466A852C214BE2D08DD00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 03DF
Signing time: Tue 04 Nov 2025 06:00:47 +0000
Manifest this update: Tue 04 Nov 2025 06:00:47 +0000
Manifest next update: Wed 05 Nov 2025 06:00:47 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: OMXKaxjRxyNpLVWTEt0hIhocYxOVMa8ExlmpuI+JzgQ=)
2: zto4NeQB1_I3QORAJXQ-oNO5db0.roa (hash: 4X/MAtxcgqfp8hiwe6Iai+qfAWiiXuU0LC7+GPHFtZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:1f:75:ab:46:6a:85:2c:21:4b:e2:d0:8d:d0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Nov 4 06:00:47 2025 GMT
Not After : Nov 5 06:00:47 2025 GMT
Subject: CN=ed41f7ede8adcb01fc0c030d144321896dac22fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:59:26:94:dc:6e:3c:51:aa:09:da:d9:89:
84:18:f1:00:9b:75:ba:ef:11:04:6b:25:7e:64:63:
aa:7b:6b:f8:e4:95:f8:04:21:85:ae:fd:2a:df:82:
5f:e4:bb:74:9d:46:f4:e4:71:9f:9d:00:48:18:36:
6a:f7:9d:65:b5:87:85:a8:0b:70:3d:10:84:d8:ee:
5c:9b:ea:eb:6f:0d:c8:97:7b:66:80:04:c3:70:33:
28:6d:ff:a5:05:b2:fc:25:42:5a:1e:f5:35:e5:35:
35:6e:e9:b0:08:ad:4f:6b:94:68:5f:ed:68:5a:d0:
26:df:43:ed:15:76:46:8b:d3:72:f1:74:df:74:20:
a6:a2:95:4a:36:74:b1:6c:20:0f:27:4f:07:1f:68:
d5:04:51:7d:c4:4e:e3:93:eb:0e:02:6f:57:d5:a6:
3c:58:6c:74:58:b2:aa:2f:d0:c4:fa:0e:bc:86:33:
5d:9e:3c:b8:07:9c:30:78:4e:0a:5a:e8:fa:9b:cb:
b9:74:d0:16:20:56:ca:5c:eb:f9:d0:0a:2b:cf:8b:
5f:f5:04:96:35:85:96:5e:82:8a:e1:ef:d2:8c:15:
2d:10:77:24:9c:d8:f8:9a:54:6f:c9:f3:1c:f0:52:
a6:d6:46:38:8d:a4:78:ce:91:0a:80:dd:c3:5a:30:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:41:F7:ED:E8:AD:CB:01:FC:0C:03:0D:14:43:21:89:6D:AC:22:FA
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5b:b0:da:31:50:19:cf:d7:b4:e2:05:84:52:6e:3b:28:00:
ec:92:1d:e4:2d:3b:0a:29:71:bb:53:a7:da:35:d3:42:d8:99:
42:85:80:3e:fe:0b:71:04:07:a3:64:6f:14:e0:1c:47:ac:a4:
05:96:5e:2f:3a:7c:13:6c:01:64:0a:02:c8:9c:d2:2a:e5:8d:
e1:66:c0:46:4e:25:28:5b:4d:48:0e:00:c5:a2:4f:5e:a5:c0:
08:ef:dd:a1:27:87:0b:38:cf:30:e1:97:81:98:91:f3:1e:6a:
d0:18:9f:d0:bd:e7:e7:2a:ce:f2:65:39:df:aa:18:9b:35:00:
17:06:ce:8b:bb:53:82:42:af:d5:4e:c9:7d:4c:b7:15:a6:38:
af:7d:57:49:a2:30:85:e0:e2:15:89:7b:e7:fe:de:05:0c:c0:
2d:8e:38:3a:9b:9c:87:70:a7:a3:35:42:4c:49:b1:f0:5a:62:
1f:94:8b:83:0e:0f:33:7d:bf:24:c9:07:6e:4f:2b:5a:32:8b:
3d:4f:88:e7:ff:af:8d:4e:3f:1f:02:b2:28:79:11:95:a2:61:
06:91:0f:f2:fe:65:43:09:ea:fa:38:43:9c:0d:e4:d8:31:77:
cc:f8:f7:51:f0:be:1d:db:95:36:ac:f4:e5:dc:bb:f7:11:95:
47:b8:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:07 2025 by rpki-client