Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
File: KTbYQje3g8aiQFErjKckFhwNYds.mft (raw, json)
Hash identifier: T/uHf99uGcnvobgJDzTSIvGUR9ID6dAFvJw+5dFTbNw=
Subject key identifier: 53:BF:06:13:1A:7B:E9:C3:0D:0A:B1:B7:74:2F:F7:F1:D1:31:E2:D3
Authority key identifier: 29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
Certificate issuer: /CN=2936d84237b783c6a240512b8ca724161c0d61db
Certificate serial: 019A72265CC3FC203C0E8F081C2550CBA822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:48 +0000
Manifest this update: Tue 11 Nov 2025 09:01:48 +0000
Manifest next update: Wed 12 Nov 2025 09:01:48 +0000
Files and hashes: 1: KTbYQje3g8aiQFErjKckFhwNYds.crl (hash: EVmDzvDXX+tagnKt9E9EV0U+ZqswbS4obom0x6cZ/uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5c:c3:fc:20:3c:0e:8f:08:1c:25:50:cb:a8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936d84237b783c6a240512b8ca724161c0d61db
Validity
Not Before: Nov 11 09:01:48 2025 GMT
Not After : Nov 12 09:01:48 2025 GMT
Subject: CN=53bf06131a7be9c30d0ab1b7742ff7f1d131e2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:83:65:d9:fe:9d:96:8a:dd:dd:f0:44:25:
f5:73:23:61:69:4f:9e:45:25:b9:14:6b:4b:ff:c7:
10:96:ab:78:a3:c6:3b:b9:b4:1a:8d:b2:3b:36:85:
60:bc:d4:ea:c5:c0:ba:28:5f:36:7d:6c:ae:cc:f6:
25:1c:17:64:eb:6e:f5:b0:60:b7:81:be:cb:ce:4b:
ce:a1:66:52:f2:1e:8f:23:69:20:ce:e8:be:b8:61:
96:8f:66:42:06:8c:4d:cb:7e:b5:66:f9:e3:2e:a3:
20:86:a7:e9:17:91:30:4f:aa:0b:e8:71:3b:a0:f0:
12:56:a5:56:a9:6a:93:e0:5a:20:2d:ce:13:02:19:
c5:3a:7b:b1:54:55:ed:0f:2f:30:af:71:e8:0c:c4:
05:2c:5f:cf:dc:49:52:e8:5b:60:70:b4:c0:76:81:
a2:e1:70:58:3c:89:22:e9:ad:71:83:7b:93:49:e2:
9e:da:aa:50:33:7d:66:d5:5c:57:44:51:57:f1:34:
4f:81:e8:2b:4f:fb:88:e6:35:4b:17:0d:e3:c4:f5:
b3:b9:9b:76:34:da:e6:8b:81:b2:25:b8:1d:f5:7a:
d5:48:56:32:64:09:4d:b9:b8:1d:f4:4a:6b:01:c6:
7f:0d:42:50:3e:c7:61:be:88:6e:72:01:96:03:9c:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BF:06:13:1A:7B:E9:C3:0D:0A:B1:B7:74:2F:F7:F1:D1:31:E2:D3
X509v3 Authority Key Identifier:
keyid:29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3f:d5:2e:7d:2e:0f:9f:90:55:5f:4d:f0:92:67:28:12:a5:
bc:3f:3e:5e:93:44:c3:dc:31:72:c5:d8:6c:67:df:d9:31:5c:
76:b0:74:95:3c:d1:fe:dc:d8:5b:e3:8b:df:7b:5e:e9:e0:c0:
3a:47:cd:ca:82:fd:0f:0b:63:cd:55:e3:f8:29:12:b2:b8:9b:
6c:99:ca:a5:ba:ec:f0:be:d9:ef:e9:9d:39:e2:b7:0a:bb:c9:
4c:5f:17:40:75:9e:a9:1a:32:18:53:1f:d3:56:6a:f9:ed:fc:
80:ef:e8:60:94:a9:65:36:cf:51:30:6b:2a:5a:e7:22:87:86:
69:01:cd:49:27:6d:cb:5a:78:38:98:bd:dc:df:2a:57:0b:b1:
1b:6c:ef:cb:bf:e1:3b:ff:97:c2:90:d2:f1:c8:ad:ee:75:e5:
05:07:0a:3f:ab:41:cf:19:f5:d0:db:4a:cc:56:ed:68:42:74:
aa:cb:02:eb:25:57:da:6d:fe:97:12:85:59:be:32:f8:cf:ed:
b2:19:a1:37:43:2c:87:cd:00:70:6f:21:fa:9c:b1:5d:ea:a2:
c0:23:da:31:99:a8:af:0d:27:4b:58:3d:1f:5e:fd:f5:a7:fb:
ac:6e:80:da:8f:c5:89:17:5e:3f:9d:ab:d5:be:da:d8:ab:56:
58:fc:8f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:57:13 2025 by rpki-client