Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: zsLFjd4Mnzv2H50RghGavw5641NnNIf7KMxnzll2OcU=
Subject key identifier: DC:57:BC:39:D4:FC:36:D4:FD:30:7C:FD:9B:3E:AA:3A:3A:B1:8C:DF
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 019A4D73EDA14EC0BCA80FAE8CAE0CE20245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 123D
Signing time: Tue 04 Nov 2025 06:00:34 +0000
Manifest this update: Tue 04 Nov 2025 06:00:34 +0000
Manifest next update: Wed 05 Nov 2025 06:00:34 +0000
Files and hashes: 1: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: qC7zNYLBYtF8SoGpF6fWrbgAV2zkXOwehU8l5QADc9A=)
2: x-sFc0XuZWyC8mb5YkUAH-GfdII.roa (hash: SLT0QNLc8vBCO5UeVhbutYzbWFamBQrhqoa9wxuI2Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ed:a1:4e:c0:bc:a8:0f:ae:8c:ae:0c:e2:02:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Nov 4 06:00:34 2025 GMT
Not After : Nov 5 06:00:34 2025 GMT
Subject: CN=dc57bc39d4fc36d4fd307cfd9b3eaa3a3ab18cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:c2:b3:59:07:df:4c:83:82:e0:ad:cc:f3:
d3:ef:d7:40:ae:f2:7b:fe:49:ba:1d:9c:e7:8a:c1:
0c:99:a7:d6:1c:03:c3:55:0e:5c:39:97:ee:c8:56:
34:10:cb:bd:65:24:28:0a:0d:c5:63:6a:be:da:25:
0e:4c:5e:03:27:64:9c:c0:87:25:7a:21:cb:93:38:
af:7b:da:9b:0a:19:26:37:f1:55:f2:2d:72:0c:6a:
d4:41:2f:1a:6e:7f:a8:0c:a2:c4:6c:a4:37:46:f5:
55:5f:a0:56:01:a5:e2:29:e0:8a:29:38:37:7b:52:
11:22:63:c4:b7:d3:ce:c9:e8:53:e9:9d:e9:29:7f:
16:03:ad:53:44:e7:f7:b4:73:fe:91:cc:96:ab:9e:
21:77:0d:2e:98:d7:15:a9:85:c4:a0:09:f8:06:26:
f2:ec:62:98:70:6f:89:e0:59:d9:6d:a6:4a:4b:4b:
35:ea:b4:be:00:3c:4a:e9:80:18:b8:fe:9f:f1:d9:
1d:48:97:45:f5:77:0c:e0:65:0d:3e:35:94:db:8d:
4c:dd:93:16:b3:51:14:29:75:47:c6:b5:10:eb:3a:
33:26:ed:0d:f7:eb:a9:7d:e3:ef:3e:aa:73:4f:f2:
2a:72:5d:f0:76:4a:fd:f5:1e:83:1f:d1:ac:c8:df:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:57:BC:39:D4:FC:36:D4:FD:30:7C:FD:9B:3E:AA:3A:3A:B1:8C:DF
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0c:9f:77:f3:88:4a:da:a2:8e:9e:a5:22:06:c4:05:40:6a:
9d:92:3e:94:96:cf:49:af:91:f0:21:e0:0e:fa:3d:2b:bc:cb:
b2:d6:17:27:c6:26:92:2f:a6:11:86:fc:1b:08:4b:99:da:1f:
57:cf:bf:8c:7e:92:89:3d:e9:ce:6d:d8:08:9d:70:86:74:3e:
2d:d3:7f:60:19:ca:26:98:3a:e7:f7:3e:26:d6:f5:71:05:25:
d1:b4:71:9b:1d:2a:c7:eb:21:72:8d:2e:50:a6:3f:fe:c8:9d:
ba:c2:82:b1:f0:eb:bd:68:b9:c4:a4:4d:93:66:aa:cb:d8:2c:
ba:d3:df:6e:b0:db:12:af:c7:75:62:92:42:9d:e6:21:ae:0d:
fe:5a:de:35:7a:44:44:f4:51:07:b2:d1:b3:19:6d:89:29:e1:
9a:ad:79:61:3a:3d:c7:ef:af:42:4c:0c:5b:7d:0f:4a:21:54:
72:f7:d4:43:28:3b:cb:74:d2:e2:a0:14:e8:28:1c:e3:1a:d5:
45:c9:0d:23:f2:44:a8:1f:b4:cd:46:50:c5:e0:4a:ed:89:bc:
08:b2:29:b9:49:6c:fb:3e:ea:e5:c1:75:e6:ed:75:98:96:45:
54:e0:73:1f:66:88:17:a4:b2:64:69:9b:1e:ec:7e:9b:1c:7a:
0d:55:ba:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:13 2025 by rpki-client