Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: hHo8VSNHl6Oua3rZ1kqoXjd8AvA7bQ3aRgwmaV2Ry0k=
Subject key identifier: CB:F9:DA:DD:23:74:36:58:1D:56:0B:B8:C9:49:65:6D:9D:21:80:E9
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 019A01B56C3A02FA916A730833A79D74C465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 1041
Signing time: Mon 20 Oct 2025 13:00:58 +0000
Manifest this update: Mon 20 Oct 2025 13:00:58 +0000
Manifest next update: Tue 21 Oct 2025 13:00:58 +0000
Files and hashes: 1: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: pEggHb8TEmIGIh0mHaKjSK5FAMIyhIEhGkNMnFjDqSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:6c:3a:02:fa:91:6a:73:08:33:a7:9d:74:c4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Oct 20 13:00:58 2025 GMT
Not After : Oct 21 13:00:58 2025 GMT
Subject: CN=cbf9dadd237436581d560bb8c949656d9d2180e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:6e:7d:27:24:78:90:be:de:80:24:c6:01:
5c:41:a6:3f:11:b7:5c:d1:e9:2d:d9:24:af:22:5b:
c3:56:25:20:aa:a3:27:7c:a6:fc:f6:a3:29:30:4e:
94:98:5c:f7:78:24:cd:21:d9:b2:e3:e7:37:5b:04:
05:53:90:f7:2f:fc:51:a8:81:17:39:fb:c0:d0:52:
89:79:4c:6a:2e:1b:12:74:fd:ef:dd:85:a7:aa:e5:
44:e7:00:20:70:f7:7a:63:c9:d6:ca:a9:aa:55:98:
fb:b2:4e:96:e3:f1:9b:0e:73:45:73:12:97:46:61:
b3:1e:b2:71:e9:a0:1a:29:a3:95:1f:ff:ce:c3:04:
bb:8b:e9:3d:8d:1d:d3:15:1c:b2:1e:02:d7:ef:7d:
78:99:12:c5:5d:33:06:cc:fc:25:6b:1f:b8:35:09:
14:1c:20:f5:6d:72:26:b1:79:a0:5c:2d:7c:b7:53:
19:fb:e9:ea:86:a3:27:53:c4:a7:f0:a9:ba:6c:78:
0b:e5:7b:c9:3e:9a:cd:85:a0:41:b1:ce:a8:0b:58:
40:68:12:43:c5:ae:3e:59:3c:37:67:01:7c:71:4a:
af:40:fa:18:c7:e0:90:c2:63:47:37:24:f8:c6:12:
3c:57:5c:71:bd:23:ce:30:ba:7d:92:78:05:a8:c0:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F9:DA:DD:23:74:36:58:1D:56:0B:B8:C9:49:65:6D:9D:21:80:E9
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:89:a1:fc:89:36:c5:2b:0a:3d:4b:27:d0:6b:a7:44:05:ee:
b7:8a:34:10:f1:c4:87:3a:5e:64:6a:b3:56:e1:68:6b:f2:68:
ad:ce:71:62:e0:3b:a8:64:c1:52:40:c2:43:ac:de:dc:ff:90:
43:8d:c0:43:4b:ba:0c:78:b7:ac:9c:78:0f:40:a3:80:1b:a7:
e1:0c:d9:2e:14:83:00:56:97:d2:0a:22:12:10:52:65:85:90:
21:ba:c4:9e:38:45:0d:85:d1:52:b5:4f:4e:52:31:ec:93:58:
72:d7:4c:9f:bc:5a:0d:e7:3b:dc:26:2e:8c:37:83:53:4d:ac:
dd:93:53:87:d4:65:99:ef:41:1c:71:0f:c6:a2:6b:44:8c:e8:
3b:93:32:a2:70:a7:35:b7:48:24:0f:dc:e4:93:83:99:b3:bc:
61:a3:21:23:0b:b4:6f:da:f0:ce:a6:d2:1e:86:ca:c9:e4:5c:
98:82:2d:08:6e:76:f2:2c:21:07:93:f7:4f:60:03:4c:4a:69:
78:66:f8:77:86:d8:31:17:9a:87:82:d3:96:c2:ad:9e:54:3d:
ea:5b:af:62:1c:76:ad:d6:2b:09:4d:78:84:b5:b2:93:ba:e3:
de:66:36:a8:e8:35:d0:6f:fd:6b:90:0f:45:60:34:1e:d4:fd:
05:a4:d8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:31 2025 by rpki-client