Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
File: kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft (raw, json)
Hash identifier: VVGonlpjGN0xhrjhHuJ76UkVLwzUZ94aGj6ZstuR1c0=
Subject key identifier: 58:E8:FE:BF:21:04:AB:68:CA:BE:28:7B:5B:39:49:D1:1D:B5:1F:78
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial: 019A7338376043AD4DBF7026FEE4B0E5F2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
Manifest number: 1565
Signing time: Tue 11 Nov 2025 14:00:55 +0000
Manifest this update: Tue 11 Nov 2025 14:00:55 +0000
Manifest next update: Wed 12 Nov 2025 14:00:55 +0000
Files and hashes: 1: kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl (hash: 0expc3dowrHT165q43kwK3bdk8vXnYmFaxauBiuYhAU=)
2: pOvhTWtU4kelyPZ1fpMoPO101II.roa (hash: WJ4/oAtZUHsxbOhd3cJHFGOETOXNUNiMfn725elzUrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:37:60:43:ad:4d:bf:70:26:fe:e4:b0:e5:f2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
Validity
Not Before: Nov 11 14:00:55 2025 GMT
Not After : Nov 12 14:00:55 2025 GMT
Subject: CN=58e8febf2104ab68cabe287b5b3949d11db51f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:4d:06:66:2a:3a:3d:24:2f:aa:29:1c:8e:
97:36:18:8e:ee:ce:80:00:e0:62:60:89:d7:bf:4d:
a8:24:e3:11:e8:41:00:a9:b2:1a:d2:7d:6b:d1:e3:
e2:7b:42:a1:0a:ba:b2:a7:e5:3c:51:fe:43:70:78:
a6:38:f8:a3:43:f4:0d:24:51:7b:ff:c0:41:c8:1e:
7d:32:84:f7:9a:9f:0d:69:d9:c7:f0:6d:71:9d:6a:
83:07:c8:82:15:7f:43:0f:09:11:41:ca:3c:5c:58:
7d:91:a4:2c:2e:cc:28:d9:8a:71:71:b1:15:58:01:
28:8a:5d:f8:a1:be:cf:d7:93:6c:9c:22:2f:11:73:
e4:75:8c:8f:b1:e3:b7:1a:8b:a1:49:26:db:ad:77:
2e:c6:31:66:7d:d4:d2:7a:62:56:b2:26:61:ae:96:
e2:a7:60:0f:b1:54:6c:f5:61:b9:9a:e0:d0:07:16:
8e:93:46:21:43:ea:a0:88:ed:05:17:39:f1:6a:52:
1f:12:32:52:53:e0:4f:59:98:c5:20:b4:ee:f7:58:
b0:5e:23:33:cf:89:1c:8b:16:d0:45:1f:6e:e8:63:
3f:af:6d:89:86:18:db:af:f2:70:a1:06:49:20:b2:
56:7e:5c:ef:d0:75:3e:23:5a:e5:6f:ea:8a:4e:9a:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E8:FE:BF:21:04:AB:68:CA:BE:28:7B:5B:39:49:D1:1D:B5:1F:78
X509v3 Authority Key Identifier:
keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:31:7c:3d:3a:ef:f8:e7:d6:0e:48:ce:ab:5f:c9:03:76:a5:
0a:0b:63:9a:d6:21:fb:3b:7a:b0:97:fa:b0:e4:23:35:ee:94:
6c:dd:6d:9f:5e:aa:ff:80:ee:7f:37:7e:01:dc:10:7d:f5:bc:
7d:1a:e4:0c:03:a4:00:b8:a7:23:49:46:0d:1a:1b:1f:56:73:
65:2d:4f:e7:f9:e6:27:c3:0b:84:44:a1:25:a0:e9:1e:ec:4a:
36:d1:44:b8:64:a4:1b:8d:1e:f2:9d:b9:17:48:e3:fc:58:37:
6f:c0:2a:41:af:4c:08:9a:b3:a7:f7:96:da:f9:7f:fd:ec:26:
b5:73:8a:6a:1d:1b:c1:2e:80:18:b5:db:b9:6d:8a:77:19:c1:
7c:78:9e:ae:d4:61:95:ec:5e:86:b6:d8:0d:6a:22:08:bc:64:
11:c3:f2:63:94:55:a5:c4:3c:31:66:a4:94:92:8b:7a:00:2f:
59:d1:4f:41:53:40:55:db:0f:ea:5e:20:aa:c0:5e:94:6b:eb:
1f:e3:a2:46:42:f8:05:71:1f:65:f2:6c:e5:b4:b3:ea:64:c8:
6b:d5:00:65:82:9d:af:ad:71:3b:eb:0b:ec:db:1c:b0:1d:b8:
38:75:bf:57:77:66:2c:26:eb:30:c7:f0:45:41:a0:70:fb:66:
c3:a4:98:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzODdgQ61Nv3Am/uSw5fLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOWI1Nzg4OTYwYmQxNzkwNTY4NDhlYzk1NmZkNjExZDRj
ZjgwOTQwHhcNMjUxMTExMTQwMDU1WhcNMjUxMTEyMTQwMDU1WjAzMTEwLwYDVQQD
Eyg1OGU4ZmViZjIxMDRhYjY4Y2FiZTI4N2I1YjM5NDlkMTFkYjUxZjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1FNBmYqOj0kL6opHI6XNhiO7s6A
AOBiYInXv02oJOMR6EEAqbIa0n1r0ePie0KhCrqyp+U8Uf5DcHimOPijQ/QNJFF7
/8BByB59MoT3mp8NadnH8G1xnWqDB8iCFX9DDwkRQco8XFh9kaQsLswo2YpxcbEV
WAEoil34ob7P15NsnCIvEXPkdYyPseO3GouhSSbbrXcuxjFmfdTSemJWsiZhrpbi
p2APsVRs9WG5muDQBxaOk0YhQ+qgiO0FFznxalIfEjJSU+BPWZjFILTu91iwXiMz
z4kcixbQRR9u6GM/r22Jhhjbr/JwoQZJILJWflzv0HU+I1rlb+qKTppQ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjo/r8hBKtoyr4oe1s5SdEdtR94MB8GA1UdIwQY
MBaAFJCbV4iWC9F5BWhI7JVv1hHUz4CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82YzBlMjUtODFhNS00OTAwLWI2Yjct
ZGY0YzlmMzRkYzViLzEva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82YzBlMjUtODFhNS00OTAwLWI2YjctZGY0YzlmMzRkYzVi
LzEva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTF8PTrv
+OfWDkjOq1/JA3alCgtjmtYh+zt6sJf6sOQjNe6UbN1tn16q/4Dufzd+AdwQffW8
fRrkDAOkALinI0lGDRobH1ZzZS1P5/nmJ8MLhEShJaDpHuxKNtFEuGSkG40e8p25
F0jj/Fg3b8AqQa9MCJqzp/eW2vl//ewmtXOKah0bwS6AGLXbuW2KdxnBfHiertRh
lexehrbYDWoiCLxkEcPyY5RVpcQ8MWaklJKLegAvWdFPQVNAVdsP6l4gqsBelGvr
H+OiRkL4BXEfZfJs5bSz6mTIa9UAZYKdr61xO+sL7NscsB24OHW/V3dmLCbrMMfw
RUGgcPtmw6SYoQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:18:04 2025 by rpki-client