Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
File: kTxeovTqvz88Qt88Mx6cuhDJOgk.mft (raw, json)
Hash identifier: u0CNWkJRahCGZrgbR/wFtnsvV3aZD9L+oB31UMZ2RmI=
Subject key identifier: 05:1C:1F:81:78:A6:4B:22:CD:B9:5F:16:EB:C7:F5:23:2B:99:06:8F
Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Certificate issuer: /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Certificate serial: 019A72CABE5D24A38A76800934B7F71F98C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:01:20 +0000
Manifest this update: Tue 11 Nov 2025 12:01:20 +0000
Manifest next update: Wed 12 Nov 2025 12:01:20 +0000
Files and hashes: 1: kTxeovTqvz88Qt88Mx6cuhDJOgk.crl (hash: XrO75CRmaQG6uAVsmaz1qXI4uyo3JdfnVNruBtV3CvQ=)
2: y0VMz-pFHy2RJvHhIyZB92njV7Y.roa (hash: uVs/qgL9urgJyfwUIJcBcgFvjGj1s6IUF07oWo8sQcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:be:5d:24:a3:8a:76:80:09:34:b7:f7:1f:98:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Validity
Not Before: Nov 11 12:01:20 2025 GMT
Not After : Nov 12 12:01:20 2025 GMT
Subject: CN=051c1f8178a64b22cdb95f16ebc7f5232b99068f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:6f:93:56:a7:ae:c1:a1:69:3b:86:39:2e:
e5:af:56:b4:a8:a3:99:02:6c:64:75:76:b4:61:ee:
a3:a9:2f:c1:d0:db:5e:0a:13:05:58:bb:18:19:2e:
2b:8d:fd:73:b1:1c:54:57:1b:d2:e3:71:b6:7b:3b:
d9:fa:08:9c:98:3c:26:a4:fd:e2:83:5b:84:3a:44:
11:0a:8f:1e:cd:89:12:45:f0:da:6a:35:cf:2e:71:
f7:58:c3:be:f0:e7:5f:84:ed:58:1e:a5:db:72:a9:
34:16:5d:27:62:f6:0c:2f:7d:0f:7b:d6:b4:1b:8f:
3c:99:d0:d9:af:38:a1:f5:90:98:6b:e1:72:bc:f1:
d3:d3:b6:4a:99:e5:8a:cd:14:dd:16:70:a1:5e:a8:
9c:f9:f0:06:8f:03:59:14:16:29:29:3d:30:52:74:
e7:8a:2c:5c:00:85:b8:fe:f3:78:37:b5:30:87:1b:
03:1e:32:be:5b:0d:0e:98:5d:33:88:3d:9f:1b:59:
b2:c4:6e:68:47:8e:6a:4e:67:3d:f2:3c:ab:61:ad:
98:98:65:4b:11:7a:d0:4d:a3:2c:db:e8:80:cc:de:
db:79:32:4b:30:6e:a8:51:d2:ca:39:7c:24:06:98:
b1:2b:98:30:98:04:fe:4a:e5:c8:53:9e:78:26:25:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1C:1F:81:78:A6:4B:22:CD:B9:5F:16:EB:C7:F5:23:2B:99:06:8F
X509v3 Authority Key Identifier:
keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7d:83:4a:4d:97:3a:27:fc:a7:c5:eb:ba:c1:53:9a:cb:73:
30:58:40:28:b1:75:71:da:ec:e7:ed:65:ea:c1:52:66:e8:ba:
e9:44:41:bf:a4:49:c6:4e:75:90:dd:72:e9:98:b7:cf:f5:36:
f9:3c:94:72:8e:5c:42:b0:a4:6f:64:ac:55:e5:39:ee:5d:46:
f0:40:ad:c0:94:d4:57:1d:aa:4c:2a:1a:c0:6a:12:6c:34:13:
d5:d0:06:fc:1d:b3:23:1e:5d:ad:d4:ea:12:d8:74:3b:99:9b:
ad:c6:5d:39:d4:b9:4a:25:7e:22:e0:d2:7c:bc:fe:02:09:11:
9e:72:4d:70:1d:f9:0e:bc:6e:e8:77:8a:9a:38:04:9d:c9:7b:
7a:e6:a1:f7:7b:23:d5:73:6a:70:c8:fa:bb:4a:dd:1a:b2:ea:
13:ab:2c:f0:5a:55:de:9f:fe:9d:ae:d3:19:55:f9:86:ef:a9:
77:05:54:22:04:8f:d8:01:38:75:68:a4:04:5e:d4:fb:45:ee:
21:b5:61:44:02:0b:e1:46:ff:7a:7f:a1:96:29:61:11:c3:bd:
87:2c:da:8b:c8:7a:a3:85:07:fb:05:ad:4e:2f:48:90:69:c1:
5d:b3:d9:71:cd:a4:05:d6:f1:b3:42:40:b1:70:1a:ce:b3:df:
8d:57:81:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:55:14 2025 by rpki-client