Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: XqsJUXkofRZfba743cEqzZ05mK6Wn9CnICxFZKVzZOs=
Subject key identifier: 01:64:6C:45:14:C1:74:DA:49:FA:2A:05:D4:56:57:EC:0A:4E:A3:31
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 01987C09C84F89C0D6BC45556EC197E679FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 114C
Signing time: Tue 05 Aug 2025 21:01:12 +0000
Manifest this update: Tue 05 Aug 2025 21:01:12 +0000
Manifest next update: Wed 06 Aug 2025 21:01:12 +0000
Files and hashes: 1: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: nnt02KNFJVDogvKTJsT53W7LEqU+EMj7gKPrd/kuNDQ=)
2: x-sFc0XuZWyC8mb5YkUAH-GfdII.roa (hash: SLT0QNLc8vBCO5UeVhbutYzbWFamBQrhqoa9wxuI2Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:c8:4f:89:c0:d6:bc:45:55:6e:c1:97:e6:79:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Aug 5 21:01:12 2025 GMT
Not After : Aug 6 21:01:12 2025 GMT
Subject: CN=01646c4514c174da49fa2a05d45657ec0a4ea331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b9:aa:c7:22:5a:23:07:58:79:8f:fd:29:06:
51:19:47:d6:24:75:9b:47:64:55:db:84:89:01:37:
71:ce:b0:40:08:98:eb:d4:5c:96:cb:66:6e:b2:5a:
c5:56:a0:8e:b0:fa:ee:2d:a5:0c:fc:f0:bd:cf:c4:
cf:e1:ce:f3:31:6d:74:4d:e9:b2:56:6c:2e:e8:e2:
f7:ee:e1:93:93:1e:86:06:37:be:95:0e:31:af:a1:
f5:4b:c3:e3:c1:60:a1:46:17:18:82:24:76:5a:74:
97:39:07:08:fa:52:e1:42:71:86:a8:95:86:68:db:
e3:00:46:e7:a6:20:f4:9a:dc:90:b3:17:ac:d1:3a:
75:8f:bb:b9:c1:86:2d:d2:7c:e1:30:3e:84:07:94:
a7:e6:9b:f7:4c:6b:1e:50:22:d8:5a:97:75:d2:81:
d5:bb:c9:e9:61:51:b7:96:46:a5:84:65:14:0a:9a:
c1:d2:b1:72:c5:39:21:38:4d:20:b7:40:20:f2:ac:
b3:e4:8b:56:a8:1a:53:06:07:9e:0f:f3:22:fe:72:
c7:76:9b:34:b9:91:0a:94:aa:95:c3:6d:82:8b:1d:
53:34:a2:a2:a6:5c:c7:01:10:53:91:5c:e7:20:b4:
bb:7e:b9:51:da:20:22:14:c0:e9:0e:b8:54:03:f3:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:64:6C:45:14:C1:74:DA:49:FA:2A:05:D4:56:57:EC:0A:4E:A3:31
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:85:1f:ff:96:d4:69:7c:0e:eb:08:c9:58:a9:af:85:24:b7:
d6:bf:d4:0e:73:8c:7a:8a:a3:25:43:65:de:41:f4:cb:be:f0:
cd:7f:af:35:b5:95:9a:d9:e3:f5:9e:eb:fd:84:aa:9d:ab:3d:
ac:fc:2e:72:ce:9c:05:bb:fb:5b:c6:0f:92:f3:df:e3:9c:94:
06:ce:7d:74:92:85:e6:b2:b4:8e:d4:e1:1f:cf:06:9d:a4:8b:
58:21:11:24:36:12:ea:25:10:85:65:f3:1f:f1:63:75:a9:a8:
7a:6d:25:26:c3:1a:9a:82:fa:f4:59:5b:d9:49:7c:39:c2:7e:
2a:1d:31:05:6b:f1:2c:61:7f:0b:dd:eb:b7:22:d7:8d:a5:6a:
9c:c3:71:61:93:c8:de:37:19:22:63:cd:09:72:bb:a6:1d:14:
22:34:86:ce:45:8c:09:98:a7:e1:91:8d:02:b5:81:2a:d0:84:
57:15:b3:63:be:e2:2e:b4:b9:06:2b:30:49:2f:b1:bf:31:8d:
37:3a:a2:c7:4f:8e:d2:88:a1:ed:98:f9:4f:17:ac:1a:84:ab:
9b:4c:d3:b2:61:ac:ca:99:3a:86:54:9a:3d:ca:34:a9:94:ca:
ac:2e:f4:0a:7f:d8:a7:9b:3e:58:0f:d5:37:00:be:6c:36:4f:
9a:80:26:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:52:20 2025 by rpki-client