Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
File: kFTGmagd2WKohg8_sLfQM0Pev3Y.mft (raw, json)
Hash identifier: T5jDwkLK0vVqgAJdZ9vHGj58nm2c3sYEawi1Zdnn65I=
Subject key identifier: A4:B8:D9:5C:23:A6:3B:D3:1E:4F:2D:71:0F:6C:EE:FC:D4:BE:58:1E
Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
Certificate issuer: /CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Certificate serial: 019A71B8F153A673801A42E639D2A7523E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:17 +0000
Manifest this update: Tue 11 Nov 2025 07:02:17 +0000
Manifest next update: Wed 12 Nov 2025 07:02:17 +0000
Files and hashes: 1: AJkLm8QLqcA4cpdlMxjyYpGgKig.roa (hash: Kdq77qB2Z4PyfWGbDab2B0pk/vx4xIRx3C/YwD+0yYQ=)
2: kFTGmagd2WKohg8_sLfQM0Pev3Y.crl (hash: u1JmE5rBCBFGa3z7ytyO6JbAPjM531Ys9T/zHom14uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f1:53:a6:73:80:1a:42:e6:39:d2:a7:52:3e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Validity
Not Before: Nov 11 07:02:17 2025 GMT
Not After : Nov 12 07:02:17 2025 GMT
Subject: CN=a4b8d95c23a63bd31e4f2d710f6ceefcd4be581e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9d:b0:e0:34:a1:10:38:4d:8b:4f:f5:fb:b0:
c0:37:60:b6:af:17:ff:8d:ae:44:6d:ed:82:17:6f:
e6:fe:cb:61:a2:6f:f8:a6:9a:66:5d:4c:8e:89:e9:
40:72:eb:42:e9:50:57:03:71:14:0e:7c:33:da:bf:
c8:97:96:e3:4f:8c:43:d3:03:f9:4e:50:68:a6:46:
67:9c:3f:17:89:03:fa:c8:8f:df:4c:a3:eb:d5:b3:
7a:50:4d:4a:07:34:ec:b0:ef:88:95:b6:04:99:08:
b5:05:3e:d5:33:9a:3c:30:3c:93:d1:04:99:a0:ce:
23:d2:77:b4:57:eb:b8:b9:36:41:84:0c:7e:dc:af:
ee:ce:17:c4:77:4f:1e:ca:22:38:fe:57:ca:d3:fa:
8e:43:2b:32:03:fe:10:b6:62:47:88:a6:46:19:eb:
7d:d7:81:e9:f3:29:ea:a3:7a:8d:16:19:72:7f:38:
f5:52:38:08:29:d9:e8:98:c8:83:e8:1d:d3:e7:39:
a2:80:3a:d5:75:00:96:ee:87:18:e4:42:81:31:27:
86:5d:87:53:20:3c:91:db:f5:4a:c8:b3:87:40:38:
60:32:1f:b6:18:f6:f1:17:fa:10:e7:61:82:0d:23:
98:6d:04:7c:95:cc:35:d4:54:37:85:bd:a3:a4:f8:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B8:D9:5C:23:A6:3B:D3:1E:4F:2D:71:0F:6C:EE:FC:D4:BE:58:1E
X509v3 Authority Key Identifier:
keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ee:f8:d8:cf:f9:89:b3:fe:9b:57:ee:c0:5b:b6:84:3b:67:
f0:02:6b:c8:0a:38:69:77:da:d6:f4:63:d0:33:32:af:21:08:
fa:95:0c:98:cc:93:52:df:9d:6a:0b:d0:15:37:36:68:9d:73:
00:16:48:f0:02:95:e2:aa:eb:e5:80:8b:27:df:ee:b3:ac:3e:
46:9f:7b:eb:21:bc:6d:ff:0e:77:2b:ad:92:ab:e5:c4:de:c4:
05:45:1d:63:c5:3a:58:90:4c:2f:cb:c3:58:45:80:8d:a4:54:
7d:b3:59:69:aa:bd:47:25:42:ef:2f:d2:5b:8b:95:7b:80:70:
6f:c6:17:12:b5:73:67:f3:61:44:6c:cf:27:60:65:7e:8e:e5:
a6:23:a4:2e:e7:e6:03:3a:0a:71:e4:7d:d9:0d:b9:a4:1c:ea:
28:18:7b:98:c4:5e:fd:b8:d4:fd:93:3c:9c:22:94:29:e4:ec:
02:a0:a8:ef:9f:da:27:1a:ab:78:87:34:c6:f8:49:04:b5:b5:
da:5c:21:9f:91:63:ef:8c:11:71:55:60:f1:1c:77:8f:d2:17:
d7:2f:bc:4c:64:b7:fd:ef:92:96:e5:b9:b4:1f:a3:f4:36:25:
21:cb:5c:7f:88:de:a2:5b:72:77:a1:23:d8:51:a5:4f:a8:88:
c7:7e:14:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:41 2025 by rpki-client