Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
File: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft (raw, json)
Hash identifier: gSGcMw44yUgR65OkwGkohHMDnetWG45TG/hvXbYXT4Y=
Subject key identifier: 78:6F:3D:60:68:69:F3:E9:00:AD:D9:A7:22:83:08:3A:C6:6C:62:D6
Authority key identifier: 91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
Certificate issuer: /CN=91362d3c0953e8c933f0092a589b75494904f962
Certificate serial: 019A7225AEF72203B36E5EA318C733D202ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
Manifest number: 15D0
Signing time: Tue 11 Nov 2025 09:01:03 +0000
Manifest this update: Tue 11 Nov 2025 09:01:03 +0000
Manifest next update: Wed 12 Nov 2025 09:01:03 +0000
Files and hashes: 1: gF4h3hPUiQwbrFzucTsw-cGzGHQ.roa (hash: EmUyYOWtfES7R4OmRJxOMl7sM7cF9x8yLjgV5Oo/MqY=)
2: kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl (hash: uQEqgZFqNmRY48yyAcBRKeIeI/UhXkuJqyCeU95mbUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ae:f7:22:03:b3:6e:5e:a3:18:c7:33:d2:02:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91362d3c0953e8c933f0092a589b75494904f962
Validity
Not Before: Nov 11 09:01:03 2025 GMT
Not After : Nov 12 09:01:03 2025 GMT
Subject: CN=786f3d606869f3e900add9a72283083ac66c62d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:93:6f:e6:7c:4d:d8:91:03:b9:d8:7f:c9:
79:ad:e3:e7:3d:7e:8c:73:95:ad:dc:bc:c8:e8:43:
21:69:b0:72:be:e9:4e:e6:67:01:06:0b:e8:3c:61:
57:fc:db:6c:02:77:e9:56:7d:c1:9e:9a:4a:93:88:
c6:62:e5:32:f5:56:17:61:96:a6:02:ed:0d:b5:e7:
31:81:fe:4f:ac:a7:7d:46:06:54:be:0f:cd:21:69:
8a:0d:ef:e6:9d:5d:41:2c:d0:ef:79:7f:65:7a:4a:
d4:06:96:30:52:f4:47:7e:af:c2:d8:d3:40:80:7e:
39:4b:cf:35:45:3a:e4:d1:42:c6:69:a7:db:c7:64:
9d:5f:00:17:ed:3d:14:98:b1:0e:90:1f:d2:66:38:
f1:fd:df:dd:70:cf:ec:1c:0a:10:48:44:5c:b7:9d:
0a:1c:ff:e1:fb:cd:a9:5a:b9:3c:28:4e:05:d1:38:
81:50:a9:5f:86:45:56:38:b9:fe:0e:83:b1:ee:a2:
13:e9:f1:1c:4f:13:a6:fb:f0:fd:a9:58:a1:fa:b4:
1d:5a:a4:d5:8d:a6:73:92:6d:96:81:59:6e:c3:1a:
24:48:6f:b0:c2:c1:ec:c4:2e:9f:02:f4:f1:2a:86:
ce:91:85:99:1d:e0:30:7e:68:d5:af:6d:ae:5a:d6:
e6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6F:3D:60:68:69:F3:E9:00:AD:D9:A7:22:83:08:3A:C6:6C:62:D6
X509v3 Authority Key Identifier:
keyid:91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f8:b7:2c:8c:6b:b1:99:47:8f:44:f7:bb:03:b3:fb:bf:e1:
7f:20:1c:46:ca:1f:0f:48:ec:1f:09:09:e5:7e:ba:54:da:93:
a4:a5:9c:0f:aa:db:3b:fe:95:58:3f:91:23:49:d4:d9:71:b7:
0f:15:83:43:55:14:06:a2:e3:e3:3a:58:2a:e2:33:ce:58:89:
fe:6e:96:c5:58:4e:b6:ab:0e:0d:7b:3b:10:2a:b8:63:ef:40:
33:f9:67:ff:86:13:93:85:2b:9a:74:c3:ad:75:42:55:a2:df:
ed:a0:84:35:35:62:c1:96:1b:53:bb:ab:49:20:bb:53:80:11:
30:c8:79:67:5d:ad:94:91:07:c4:f0:53:6b:99:1f:a5:e5:d6:
48:fb:ee:48:f7:44:76:08:d5:76:d4:bf:08:52:a0:aa:8b:36:
58:56:f3:d6:2b:f6:94:82:91:64:bb:87:6e:c9:26:a7:0b:42:
81:c2:18:1b:db:c7:aa:e6:c5:05:d7:93:01:ad:d7:2d:e3:e1:
35:b6:11:be:45:56:80:91:aa:3f:a9:00:82:9c:f1:19:67:5b:
79:78:0b:c3:86:08:f3:02:75:38:d9:a8:50:73:ac:fb:b9:a2:
1e:ab:f6:fa:38:5b:1c:97:e7:fd:f4:9b:bb:34:79:ef:c9:ac:
88:e9:2e:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJa73IgOzbl6jGMcz0gLtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzYyZDNjMDk1M2U4YzkzM2YwMDkyYTU4OWI3NTQ5NDkw
NGY5NjIwHhcNMjUxMTExMDkwMTAzWhcNMjUxMTEyMDkwMTAzWjAzMTEwLwYDVQQD
Eyg3ODZmM2Q2MDY4NjlmM2U5MDBhZGQ5YTcyMjgzMDgzYWM2NmM2MmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/aTb+Z8TdiRA7nYf8l5rePnPX6M
c5Wt3LzI6EMhabByvulO5mcBBgvoPGFX/NtsAnfpVn3BnppKk4jGYuUy9VYXYZam
Au0Ntecxgf5PrKd9RgZUvg/NIWmKDe/mnV1BLNDveX9lekrUBpYwUvRHfq/C2NNA
gH45S881RTrk0ULGaafbx2SdXwAX7T0UmLEOkB/SZjjx/d/dcM/sHAoQSERct50K
HP/h+82pWrk8KE4F0TiBUKlfhkVWOLn+DoOx7qIT6fEcTxOm+/D9qVih+rQdWqTV
jaZzkm2WgVluwxokSG+wwsHsxC6fAvTxKobOkYWZHeAwfmjVr22uWtbm0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhvPWBoafPpAK3ZpyKDCDrGbGLWMB8GA1UdIwQY
MBaAFJE2LTwJU+jJM/AJKlibdUlJBPliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wMjJlZTQtNDRkZS00MDA0LTk4Mzkt
YTQ0OWNlNDZhOWIxLzEva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wMjJlZTQtNDRkZS00MDA0LTk4MzktYTQ0OWNlNDZhOWIx
LzEva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvi3LIxr
sZlHj0T3uwOz+7/hfyAcRsofD0jsHwkJ5X66VNqTpKWcD6rbO/6VWD+RI0nU2XG3
DxWDQ1UUBqLj4zpYKuIzzliJ/m6WxVhOtqsODXs7ECq4Y+9AM/ln/4YTk4UrmnTD
rXVCVaLf7aCENTViwZYbU7urSSC7U4ARMMh5Z12tlJEHxPBTa5kfpeXWSPvuSPdE
dgjVdtS/CFKgqos2WFbz1iv2lIKRZLuHbskmpwtCgcIYG9vHqubFBdeTAa3XLePh
NbYRvkVWgJGqP6kAgpzxGWdbeXgLw4YI8wJ1ONmoUHOs+7miHqv2+jhbHJfn/fSb
uzR578msiOkung==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:18 2025 by rpki-client