Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File: CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier: 1bR0RgoszkHXGnocImCA82geizGT8K0/IvEeqF4yxyw=
Subject key identifier: 6B:48:FB:48:BE:42:16:AC:D7:FB:F6:AA:45:39:4A:19:62:F2:F1:78
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer: /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial: 019A4E86842FAEF13706EB020DBE73292139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number: 1107
Signing time: Tue 04 Nov 2025 11:00:29 +0000
Manifest this update: Tue 04 Nov 2025 11:00:29 +0000
Manifest next update: Wed 05 Nov 2025 11:00:29 +0000
Files and hashes: 1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: hw8d3XdyIeKxeMfI6IBTc2Tr7/xcFWkUTuBfLGQd6s8=)
2: p9dm9G2iCzsw8k2RDOLA-aoAnro.roa (hash: RaSFGXIJc/dpz2m+EsrfJ2ccZ5vMg1R8ZkPmnS2txJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:84:2f:ae:f1:37:06:eb:02:0d:be:73:29:21:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Validity
Not Before: Nov 4 11:00:29 2025 GMT
Not After : Nov 5 11:00:29 2025 GMT
Subject: CN=6b48fb48be4216acd7fbf6aa45394a1962f2f178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:5b:3c:6c:f1:ae:55:2a:72:45:69:e0:d8:
2f:bc:08:cb:08:81:e1:9b:60:1b:ff:26:76:f2:e4:
ad:af:68:c2:f6:61:f0:de:6b:22:b6:5f:0c:88:b8:
d0:77:5e:6c:dc:79:42:54:2e:36:bb:2d:cb:78:0c:
c2:ea:f2:70:52:ff:3b:79:fd:ba:59:51:2e:94:55:
df:e0:d4:0f:90:60:49:e1:31:fb:2b:2f:00:d7:12:
bc:26:ad:cc:c7:f6:86:fb:04:9e:61:d7:94:fb:71:
d8:14:17:94:21:63:0a:e3:37:6d:9e:ec:02:25:78:
b8:1b:e4:4f:71:74:47:07:93:28:11:5b:0b:3e:0d:
6b:bc:46:c0:55:f7:83:4b:c2:f8:83:b8:5b:3e:48:
be:4b:a7:36:83:d3:c8:31:12:4c:cb:1c:d8:d5:5e:
de:13:46:ff:8f:45:b3:ad:ef:83:45:bf:0a:14:1d:
9d:c8:81:56:a2:34:54:d6:77:76:21:18:35:40:5f:
30:bc:99:60:f6:f8:ad:d8:9e:c7:0a:43:6e:b8:64:
b1:a8:5f:4c:79:52:2e:3c:47:3c:84:a9:b4:c3:fa:
a5:61:b5:b6:3e:1d:11:2c:f1:dc:88:53:93:29:45:
cd:cf:25:6f:84:4b:3b:c6:34:7a:bf:6d:c0:45:96:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:48:FB:48:BE:42:16:AC:D7:FB:F6:AA:45:39:4A:19:62:F2:F1:78
X509v3 Authority Key Identifier:
keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c7:b6:b2:45:14:ed:1d:1f:3b:96:4e:bb:04:d0:c8:65:7d:
7d:7a:98:50:09:01:66:3d:82:1d:31:a2:e7:7a:2d:9f:dc:f0:
f1:ce:1b:78:6c:07:81:39:c0:e2:8b:fa:2d:43:5b:ba:b6:8a:
f3:eb:b3:e6:8e:41:af:e6:09:75:4f:2f:cd:65:62:38:a4:e3:
d7:17:73:41:fd:5f:79:e2:55:c1:87:ec:ea:44:65:e4:bd:08:
80:5a:41:08:5d:c2:15:12:cf:fb:b1:f0:63:42:c1:27:44:04:
a1:fb:73:64:f7:a3:26:b5:a0:2f:f4:64:fa:84:5e:be:96:34:
e8:dc:3a:13:2c:1b:bc:9b:96:21:88:40:8e:5a:f6:54:07:fd:
ba:0d:f4:77:13:73:ab:d5:1c:39:b3:3e:57:fe:30:07:b9:aa:
9f:9b:85:ee:a4:f9:8b:cc:81:7b:58:c3:81:30:ed:30:2a:01:
7d:fa:72:9e:27:c4:f4:1e:1e:83:7b:c7:79:fa:1f:50:95:95:
70:f3:15:c6:11:b1:4d:b3:c5:bd:9c:63:62:9b:71:17:1e:de:
57:f6:42:92:19:36:15:99:ad:03:fc:c7:b7:26:41:e4:27:7e:
53:c4:b0:73:fb:7e:af:67:22:fd:4d:ce:68:dd:31:d6:a1:0f:
ce:c6:f7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:39 2025 by rpki-client