Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: OvDVp32Ss2EE5MeF7ha1HH6q67u1HnrWTvDhD0PCMgU=
Subject key identifier: 0E:03:9A:85:0F:39:66:5E:66:21:11:0B:FA:2C:23:9E:8C:7E:AE:79
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 019A530835E05004189C8D12BB316858EF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 16A0
Signing time: Wed 05 Nov 2025 08:00:38 +0000
Manifest this update: Wed 05 Nov 2025 08:00:38 +0000
Manifest next update: Thu 06 Nov 2025 08:00:38 +0000
Files and hashes: 1: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: wboQEJnM3X7/7IqGeJiPBwkCPmVp9qXT0+SesiJypSY=)
2: tX7ugzTELMCfaa10qZ6cRQFzo6s.roa (hash: pM1f1c7cpi8tX6YPlXTmsRIvmuNbzIiqqMIx6Cp/Bqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:35:e0:50:04:18:9c:8d:12:bb:31:68:58:ef:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Nov 5 08:00:38 2025 GMT
Not After : Nov 6 08:00:38 2025 GMT
Subject: CN=0e039a850f39665e6621110bfa2c239e8c7eae79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:7b:6e:98:62:8c:65:4e:b2:3f:ce:6b:32:
17:7a:0b:69:7d:ae:59:a0:de:73:25:0f:00:80:43:
df:89:85:4d:c2:f3:3a:87:96:11:cb:74:1b:8c:a5:
0a:7a:ca:46:fc:f9:d7:e1:71:2a:ba:20:f0:f4:d8:
df:ca:74:07:80:02:e2:82:7f:53:cc:99:58:23:12:
f5:b4:90:a9:8f:64:1a:5a:22:75:2c:3a:65:97:1f:
24:ad:30:1c:2c:f1:42:34:e0:7d:8d:0a:a6:99:c0:
84:4d:4e:2c:9b:a6:e7:d6:44:ef:db:2f:e3:78:90:
77:ec:c0:c2:d7:c8:27:82:3a:ac:cf:ca:17:72:a8:
41:ca:80:24:36:ac:8b:d3:e0:43:bc:76:99:fa:31:
ab:4f:95:17:f5:16:c3:bb:5d:74:d8:53:3d:1d:dc:
b6:8b:6f:43:fc:cd:de:d0:67:7b:bd:12:5e:dc:df:
5c:3c:7d:c6:e9:65:78:6d:28:81:0d:af:ed:6c:af:
19:2b:8d:8e:da:2c:9c:54:03:90:bc:ef:f3:f7:66:
71:e0:fb:49:54:45:c0:52:08:92:29:53:36:47:4c:
33:48:89:6e:6c:df:de:9c:e3:65:05:2f:e3:c9:d2:
eb:ac:e4:5d:fa:dc:51:3b:51:b8:ba:eb:7a:51:c9:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:03:9A:85:0F:39:66:5E:66:21:11:0B:FA:2C:23:9E:8C:7E:AE:79
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7d:0d:a7:45:a9:c7:6d:a4:59:61:ee:ae:d1:d9:3b:3c:52:
22:be:8b:d5:f1:88:a4:d1:c5:95:28:82:ab:11:45:c4:58:30:
62:48:24:9b:4b:00:46:c0:f4:ab:49:bd:bc:35:e3:11:0a:f1:
bf:61:53:dc:f3:da:ec:4e:13:ff:3c:03:7e:3c:22:cb:02:03:
28:05:c0:65:98:8a:5b:05:75:2a:50:00:da:67:fc:dd:97:3b:
b1:3e:9e:1e:fb:10:69:0c:65:33:02:6e:a2:ec:80:0c:ec:d3:
db:e4:78:9a:e3:2c:06:5d:86:dd:2f:42:7c:6a:c5:18:01:1e:
68:f6:9d:3b:f2:21:3d:98:51:d5:1b:7c:66:9f:fd:d6:6f:52:
bb:ca:d0:fc:8c:6f:0f:26:60:20:b4:d1:5d:9e:96:65:19:78:
62:33:c5:67:bd:6d:d7:1f:49:d9:74:e6:5a:42:07:fe:b8:d7:
c9:55:cb:c8:c7:c6:fe:76:b1:ba:e4:4e:92:3b:eb:d1:39:db:
19:14:b3:cb:96:dd:cf:2c:da:de:15:37:35:24:dc:f2:fb:cf:
18:01:cf:9d:bc:f6:46:51:43:09:ed:7d:d0:b8:da:b9:2b:26:
d0:9e:cb:54:da:2a:34:c4:cb:22:63:13:18:25:9b:8f:21:f7:
f2:e4:73:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:44:19 2025 by rpki-client