Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json)
Hash identifier: 2qDTH1NHwV04c7ipzKfBoNBa7Q9Wgv1wY3t0s90BrDs=
Subject key identifier: BA:8A:E4:7C:80:5E:7B:D9:81:A6:AD:3C:13:01:9B:DC:19:EA:FB:D3
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 019A503E192C5275AC7FBECBAB0946A9FF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
Manifest number: 09C3
Signing time: Tue 04 Nov 2025 19:00:38 +0000
Manifest this update: Tue 04 Nov 2025 19:00:38 +0000
Manifest next update: Wed 05 Nov 2025 19:00:38 +0000
Files and hashes: 1: PREVDyEb408mqa9BxzP0AsRzJeg.roa (hash: aYqJv67l6Fq1t+h1omQ5wjXrKiL4xcndOuCQgkoKKGY=)
2: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: z21VPxVLZaagBbUGZY1CMoe7kxf7zRz73nSpa1uIC+U=)
3: p4jWyPdIBFSOhKsOHJbFsDe7R3Y.roa (hash: jnU5hIXXGhayItcaB6AV8Aoaha2Knjux2sAEHQkirvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:19:2c:52:75:ac:7f:be:cb:ab:09:46:a9:ff:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: Nov 4 19:00:38 2025 GMT
Not After : Nov 5 19:00:38 2025 GMT
Subject: CN=ba8ae47c805e7bd981a6ad3c13019bdc19eafbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:52:11:df:73:b5:fb:36:da:ec:dc:b9:ca:
88:60:92:f4:16:bc:37:b8:7b:b1:7d:8a:c0:da:13:
45:63:02:81:9c:b0:aa:1b:20:52:7b:11:da:d2:5f:
01:3f:1f:22:02:49:54:7b:0a:6f:c6:86:7b:cf:61:
d8:fd:c9:05:d9:02:76:24:38:ed:d0:83:9c:b7:cf:
af:90:f4:ef:cd:3c:c5:76:33:5f:48:e8:ac:fa:4e:
35:c9:24:bc:f4:65:a1:15:ae:95:70:5d:62:03:82:
ce:d9:7d:2f:9f:3b:78:b3:9d:6f:2a:f9:a5:cd:34:
25:aa:88:8a:0a:6f:ec:99:db:7a:2c:2b:c4:ea:1c:
a5:e3:18:a7:22:f1:14:7d:01:58:ab:bb:6c:28:cf:
80:31:53:b4:21:56:8b:f3:e4:4b:24:fa:cb:3c:e2:
23:e4:cc:cc:1a:a3:fa:a3:4a:33:1c:57:28:34:6c:
f8:43:87:7b:a8:a5:4f:bd:a4:e1:c5:1f:7d:ff:dc:
43:ea:b7:51:60:cb:6f:e2:29:11:19:fb:bf:dd:7a:
4e:14:bf:83:9f:bc:cb:2c:fb:75:61:4d:7a:92:75:
35:27:82:20:e8:5a:35:34:96:02:09:a8:7c:47:b8:
31:72:58:14:26:0a:7e:a2:33:da:71:c4:63:0f:76:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8A:E4:7C:80:5E:7B:D9:81:A6:AD:3C:13:01:9B:DC:19:EA:FB:D3
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:4e:71:6e:01:06:c4:da:b4:7a:a5:41:f4:39:c3:2c:76:66:
56:46:25:7d:dc:bc:63:5b:9d:4c:78:89:48:a3:23:4e:22:93:
c3:01:c0:18:8c:3a:d9:61:a0:e8:36:18:24:38:41:9b:1e:da:
5b:73:a0:81:ad:74:aa:4b:0d:d1:5d:fe:72:6d:31:9b:14:3a:
f0:2c:88:bc:74:0c:1b:96:e1:1d:dc:e2:76:69:f3:e4:78:22:
6c:82:17:2a:2b:94:bb:a1:b9:22:bb:51:3d:28:90:7a:7b:56:
cc:72:25:fd:25:40:15:14:81:a4:7a:4a:43:24:36:8d:74:e1:
18:3a:c9:66:72:0e:3d:b5:cc:44:90:16:18:8a:a3:d1:7a:16:
72:d4:ed:01:ef:5c:95:62:6c:60:65:f1:c1:ee:dd:1e:02:40:
76:ee:28:3b:85:be:7d:76:20:6f:74:c8:58:5b:d4:96:1d:b1:
98:96:f3:20:f6:c7:b2:03:b3:f4:23:4c:b7:1c:a6:2f:a6:64:
21:ca:04:86:94:2e:92:47:5b:e8:93:86:f4:75:9d:24:ba:85:
4a:ca:f3:be:77:f4:54:7e:ef:36:ba:da:e1:24:88:2d:b4:55:
36:58:44:b5:b0:f8:f5:b7:ac:e7:fc:f7:55:8c:7f:a3:57:89:
5f:14:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:32:18 2025 by rpki-client