Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File: CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier: VUNOrySfgkm6S3Z8tNJYLB5uusxRy+IZ3CUXHqqg93E=
Subject key identifier: 63:B1:F8:F7:67:E9:F2:CE:D4:43:89:FC:AE:67:A6:19:0C:D1:64:B7
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer: /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial: 019A7338425B9F00F40B5ED2296054C8437D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 14:00:58 +0000
Manifest this update: Tue 11 Nov 2025 14:00:58 +0000
Manifest next update: Wed 12 Nov 2025 14:00:58 +0000
Files and hashes: 1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: vajYVOHrCtTueZTqJo+BX0AteKUDQh8OaDZRK1nGuz8=)
2: p9dm9G2iCzsw8k2RDOLA-aoAnro.roa (hash: RaSFGXIJc/dpz2m+EsrfJ2ccZ5vMg1R8ZkPmnS2txJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:42:5b:9f:00:f4:0b:5e:d2:29:60:54:c8:43:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Validity
Not Before: Nov 11 14:00:58 2025 GMT
Not After : Nov 12 14:00:58 2025 GMT
Subject: CN=63b1f8f767e9f2ced44389fcae67a6190cd164b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:3b:50:7f:2f:2a:e9:22:f0:00:eb:ee:46:
27:fc:12:d8:0b:fa:08:ee:e0:4f:4f:02:e7:23:3f:
a8:a1:2c:05:ae:18:f7:08:01:bf:0b:5f:7f:8d:5c:
0a:28:f5:2c:22:e8:05:22:06:0c:f9:2c:60:13:65:
a4:56:2b:19:86:56:42:99:01:b6:bd:8f:d9:b4:e8:
8f:02:a3:17:b7:ea:48:aa:03:fb:bf:9a:2e:fc:e7:
a0:36:bb:ef:af:e9:ed:30:69:e9:29:53:38:33:32:
47:f6:65:1d:42:30:a5:d2:91:24:7e:09:f0:6a:f4:
dd:aa:0c:d5:d2:f4:af:17:37:42:c7:08:52:34:c4:
a3:da:fe:3f:6b:34:5b:7b:56:1d:04:80:f4:ff:23:
52:1d:ae:36:6b:81:7b:f5:71:d0:e0:cd:26:af:e4:
86:fe:2a:21:da:61:c4:5f:6d:b7:03:96:70:08:67:
19:d8:3f:b9:61:71:2c:57:0f:41:06:b6:9b:76:c4:
c8:90:73:69:83:64:db:1c:0b:93:57:22:22:97:df:
71:bc:94:9e:cb:de:3c:41:a2:45:75:e9:cb:13:bf:
8a:54:22:72:3f:37:99:3b:d5:4d:e8:a1:00:56:d6:
cf:40:ac:ae:00:06:20:97:23:23:d9:78:57:a4:13:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B1:F8:F7:67:E9:F2:CE:D4:43:89:FC:AE:67:A6:19:0C:D1:64:B7
X509v3 Authority Key Identifier:
keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:60:93:64:ba:e8:80:c6:56:98:ff:6e:34:bf:c0:d9:69:65:
ba:97:e4:e6:bf:fb:af:cd:3e:a9:42:15:22:6a:5b:24:81:4f:
e2:cf:6f:81:12:21:97:3a:84:7b:54:48:4b:9a:bd:99:04:c3:
38:40:8a:92:31:86:20:ac:84:d3:41:2e:12:78:72:d1:c3:2a:
f4:5e:14:f7:40:48:b8:b0:1e:ed:14:6f:24:76:a8:b8:74:c3:
35:f0:b8:d3:04:24:b5:d6:54:e9:99:aa:9b:a7:f5:8d:5f:c0:
4b:d3:b7:1e:64:8b:09:be:94:f0:54:f6:b7:8e:88:b2:ac:f6:
9a:ef:31:52:a0:26:7e:5f:7b:fb:3a:9b:49:d3:b3:91:6f:e6:
68:ba:28:a1:aa:b8:38:af:1a:ff:03:ad:2e:6e:70:1d:bb:f7:
52:d2:bd:4e:93:0b:da:61:a0:d7:d7:09:6c:d3:af:ab:2a:bd:
88:7e:2a:22:4c:02:86:23:18:b2:23:ac:e9:e1:a3:89:ee:44:
c5:2e:5b:7e:40:d9:e6:97:38:8c:08:ed:db:03:b5:9a:87:d0:
2e:bc:6b:45:ce:c0:d8:31:b0:3c:99:2d:4c:6e:72:b1:0e:ff:
fd:31:2f:d8:ff:cb:9d:72:77:20:49:55:21:f5:6b:fa:fc:d6:
91:f5:94:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOEJbnwD0C17SKWBUyEN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzI4MmZlM2YzZDdkNDZiZDFiMWNiNzdiMmZlYzM3ZGVl
MDA2NjMwHhcNMjUxMTExMTQwMDU4WhcNMjUxMTEyMTQwMDU4WjAzMTEwLwYDVQQD
Eyg2M2IxZjhmNzY3ZTlmMmNlZDQ0Mzg5ZmNhZTY3YTYxOTBjZDE2NGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oQ7UH8vKuki8ADr7kYn/BLYC/oI
7uBPTwLnIz+ooSwFrhj3CAG/C19/jVwKKPUsIugFIgYM+SxgE2WkVisZhlZCmQG2
vY/ZtOiPAqMXt+pIqgP7v5ou/OegNrvvr+ntMGnpKVM4MzJH9mUdQjCl0pEkfgnw
avTdqgzV0vSvFzdCxwhSNMSj2v4/azRbe1YdBID0/yNSHa42a4F79XHQ4M0mr+SG
/ioh2mHEX223A5ZwCGcZ2D+5YXEsVw9BBrabdsTIkHNpg2TbHAuTVyIil99xvJSe
y948QaJFdenLE7+KVCJyPzeZO9VN6KEAVtbPQKyuAAYglyMj2XhXpBMYrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOx+Pdn6fLO1EOJ/K5nphkM0WS3MB8GA1UdIwQY
MBaAFAkygv4/PX1GvRsct3sv7Dfe4AZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mYTcxOTUtYTBmZS00Zjg0LTgxM2Mt
MmE3NzZmNzg3YTFjLzEvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mYTcxOTUtYTBmZS00Zjg0LTgxM2MtMmE3NzZmNzg3YTFj
LzEvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmCTZLro
gMZWmP9uNL/A2Wllupfk5r/7r80+qUIVImpbJIFP4s9vgRIhlzqEe1RIS5q9mQTD
OECKkjGGIKyE00EuEnhy0cMq9F4U90BIuLAe7RRvJHaouHTDNfC40wQktdZU6Zmq
m6f1jV/AS9O3HmSLCb6U8FT2t46Isqz2mu8xUqAmfl97+zqbSdOzkW/maLoooaq4
OK8a/wOtLm5wHbv3UtK9TpML2mGg19cJbNOvqyq9iH4qIkwChiMYsiOs6eGjie5E
xS5bfkDZ5pc4jAjt2wO1mofQLrxrRc7A2DGwPJktTG5ysQ7//TEv2P/LnXJ3IElV
IfVr+vzWkfWU5g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:55 2025 by rpki-client