Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: c4tfNhkMq350hqdRq+IrM5qSvITCmvptlY+I5hnmuPg=
Subject key identifier: 14:0B:01:23:78:3C:6D:6F:39:87:E2:1F:A3:2C:3B:85:CB:C7:83:E5
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 019A4F2B379C521B881A514DCEC0AA73FC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 14:00:23 +0000
Manifest this update: Tue 04 Nov 2025 14:00:23 +0000
Manifest next update: Wed 05 Nov 2025 14:00:23 +0000
Files and hashes: 1: 9kHCDEYZPWH5aik7KavJ0sDUmNA.roa (hash: ijJR9ND92QYljIrNDlxEINq6c8DaInEaO2V/WhuFgzU=)
2: Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa (hash: S9ae068y1S4PtOCQAT0sFXCH1rFhFv4f3zsh6JDJIEk=)
3: ZgG20-53jQJwsyA9Uj-HDlUNiyA.roa (hash: r4Yw7FV6MragLYSnWbxNhJIL4Bz5tpt7zooYhdKRX2U=)
4: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: Gj2jvUysQhvtfUcNbr3/W+zixB02sCJX2INU4kj8fFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:37:9c:52:1b:88:1a:51:4d:ce:c0:aa:73:fc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Nov 4 14:00:23 2025 GMT
Not After : Nov 5 14:00:23 2025 GMT
Subject: CN=140b0123783c6d6f3987e21fa32c3b85cbc783e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:78:6b:0f:df:18:fc:19:21:e8:1a:83:da:
9a:20:9d:0c:4b:6d:f1:4d:bc:09:42:fd:66:f6:08:
1c:6c:26:da:aa:f0:3e:bc:f6:84:4c:a0:c9:c8:2d:
00:d8:f3:14:ac:91:c9:91:21:71:46:84:65:cf:42:
f9:65:a9:a6:70:80:14:83:61:98:c0:63:2d:07:c1:
8a:c8:b0:a1:41:f9:72:18:f4:60:69:f8:52:3a:59:
44:78:fb:80:1a:61:97:15:e4:59:05:02:ab:fe:c1:
12:88:50:f5:a8:b6:bb:10:ec:e1:e0:08:38:15:d6:
ae:e8:c1:48:08:6a:61:bb:8e:4e:ae:c7:ec:f5:21:
e6:37:68:79:ca:c0:97:97:24:39:46:75:49:8c:e9:
84:a0:4f:8b:81:9f:b7:7d:a4:d4:6c:9e:35:b1:60:
9c:4f:f1:9d:52:66:36:9f:7d:37:91:df:ec:11:b3:
d2:f7:5f:46:8e:1b:69:da:a6:36:c0:c0:07:c6:17:
26:8c:ff:e1:4a:c6:94:00:7b:2f:32:79:45:02:f7:
1c:01:5b:07:94:62:c2:ba:99:e5:67:5e:14:6f:ad:
79:ad:db:72:86:3c:da:52:99:e4:10:bb:20:21:8b:
b6:76:67:c1:d0:78:f4:bc:92:bc:1f:bc:7c:ae:17:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0B:01:23:78:3C:6D:6F:39:87:E2:1F:A3:2C:3B:85:CB:C7:83:E5
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fc:14:82:c4:1b:bf:28:64:5b:30:83:4f:fb:d0:60:7d:72:
f6:5e:e1:4f:b3:6f:84:a1:20:62:32:be:59:97:42:d9:b3:ff:
dd:91:11:20:d0:51:1d:e9:4a:e0:0c:ca:cd:1c:c1:6b:2a:01:
6e:3a:6f:2b:d0:8b:93:06:06:4f:b0:54:a4:c3:2d:13:33:f8:
e7:7a:ff:7d:78:e8:bf:20:1a:60:bf:b2:7b:59:82:fd:e8:1e:
58:b6:59:94:ec:12:50:3e:ce:2b:ee:b2:8b:36:11:2b:06:cb:
18:48:c0:d7:de:47:57:8f:0d:b1:7a:d2:76:73:6c:a4:eb:dd:
a5:58:e8:a1:20:c4:cf:53:ab:11:c5:27:8a:b7:52:b5:1b:6f:
cd:4a:05:09:f7:5b:bb:86:e4:62:ee:24:ef:a4:15:85:ac:1e:
a3:c0:c8:47:cb:a1:34:0b:50:a6:f5:42:1d:0a:a0:77:a2:ca:
fc:50:b8:19:c3:d7:81:94:73:6f:79:72:66:fa:72:36:26:d0:
40:48:f6:d2:92:f9:61:30:0f:1c:1d:8a:35:9f:1d:c0:11:47:
9b:f8:e0:fe:41:9c:e6:c0:c3:88:69:82:c5:b5:24:7f:b8:a2:
0c:81:e2:00:e9:97:16:d7:85:ec:92:4e:23:01:74:48:16:e1:
e8:2a:66:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKzecUhuIGlFNzsCqc/yGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyM2EyYjNkZDc2NjcyNzVmMDk4ODZkZjdkYTA3OWY3NTVj
ZWVkNTkwHhcNMjUxMTA0MTQwMDIzWhcNMjUxMTA1MTQwMDIzWjAzMTEwLwYDVQQD
EygxNDBiMDEyMzc4M2M2ZDZmMzk4N2UyMWZhMzJjM2I4NWNiYzc4M2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd54aw/fGPwZIegag9qaIJ0MS23x
TbwJQv1m9ggcbCbaqvA+vPaETKDJyC0A2PMUrJHJkSFxRoRlz0L5ZammcIAUg2GY
wGMtB8GKyLChQflyGPRgafhSOllEePuAGmGXFeRZBQKr/sESiFD1qLa7EOzh4Ag4
Fdau6MFICGphu45Orsfs9SHmN2h5ysCXlyQ5RnVJjOmEoE+LgZ+3faTUbJ41sWCc
T/GdUmY2n303kd/sEbPS919Gjhtp2qY2wMAHxhcmjP/hSsaUAHsvMnlFAvccAVsH
lGLCupnlZ14Ub615rdtyhjzaUpnkELsgIYu2dmfB0Hj0vJK8H7x8rhfRMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQLASN4PG1vOYfiH6MsO4XLx4PlMB8GA1UdIwQY
MBaAFJI6Kz3XZnJ18JiG332gefdVzu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjkt
MjczOGJjYjQzZDZkLzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjktMjczOGJjYjQzZDZk
LzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/wUgsQb
vyhkWzCDT/vQYH1y9l7hT7NvhKEgYjK+WZdC2bP/3ZERINBRHelK4AzKzRzBayoB
bjpvK9CLkwYGT7BUpMMtEzP453r/fXjovyAaYL+ye1mC/egeWLZZlOwSUD7OK+6y
izYRKwbLGEjA195HV48NsXrSdnNspOvdpVjooSDEz1OrEcUnirdStRtvzUoFCfdb
u4bkYu4k76QVhaweo8DIR8uhNAtQpvVCHQqgd6LK/FC4GcPXgZRzb3lyZvpyNibQ
QEj20pL5YTAPHB2KNZ8dwBFHm/jg/kGc5sDDiGmCxbUkf7iiDIHiAOmXFteF7JJO
IwF0SBbh6CpmUA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:50 2025 by rpki-client