Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
File: kTxeovTqvz88Qt88Mx6cuhDJOgk.mft (raw, json)
Hash identifier: JPQM6gSdNfNVZbyZuqU0V3BGvcXWSX06GprWDLSkPqk=
Subject key identifier: 2C:DF:67:D0:F9:E6:8F:67:70:FE:E8:B7:95:86:D2:65:33:53:05:D8
Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Certificate issuer: /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Certificate serial: 019A4E18D85A404943C107EC6107FDAAF894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 09:00:42 +0000
Manifest this update: Tue 04 Nov 2025 09:00:42 +0000
Manifest next update: Wed 05 Nov 2025 09:00:42 +0000
Files and hashes: 1: kTxeovTqvz88Qt88Mx6cuhDJOgk.crl (hash: 9pvvvKPZM9sG7LERTFWul1rN75/M1RMGig8Z4+ZmvIg=)
2: y0VMz-pFHy2RJvHhIyZB92njV7Y.roa (hash: uVs/qgL9urgJyfwUIJcBcgFvjGj1s6IUF07oWo8sQcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d8:5a:40:49:43:c1:07:ec:61:07:fd:aa:f8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Validity
Not Before: Nov 4 09:00:42 2025 GMT
Not After : Nov 5 09:00:42 2025 GMT
Subject: CN=2cdf67d0f9e68f6770fee8b79586d265335305d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:35:24:c4:96:72:72:15:b9:4a:54:c7:d4:
cf:40:eb:7e:80:e8:72:8e:01:fc:aa:2d:9a:90:91:
fe:50:70:ff:f5:4e:c8:ff:5a:d9:b8:d7:fd:7a:6b:
7c:e6:85:bf:01:cd:42:21:06:25:3e:ad:f3:f9:b3:
2a:a7:dc:8d:ef:2f:c8:40:df:ff:75:a9:b8:94:e4:
db:88:b8:2c:ff:11:cc:eb:bd:87:31:cf:73:cf:a6:
e8:7d:2c:0b:ae:c4:39:ba:b5:98:94:c1:7e:de:cc:
ac:90:02:87:30:ea:80:33:f0:23:ef:73:55:67:75:
cb:90:07:f7:83:30:e9:36:93:28:5a:e2:02:28:e1:
68:a7:6c:93:8c:7a:ae:34:5a:14:6d:75:82:1f:65:
a7:a9:3f:c2:6a:db:f7:86:ec:38:ad:ff:25:c2:d4:
0a:62:b0:80:b5:9e:c9:c6:85:21:e0:d0:3d:10:35:
43:d5:e5:df:14:fd:a6:32:c2:fc:9c:18:4b:3a:72:
42:54:7c:e9:9f:69:c8:2d:9a:a1:25:f4:e2:52:8c:
c2:e9:c3:d4:01:1a:f7:8d:4b:21:81:0f:e7:b0:a5:
ab:76:35:00:dd:4c:65:76:98:2e:02:00:7a:c0:19:
8e:1f:c2:01:a2:9c:a4:e6:f1:68:47:06:01:f8:3c:
46:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DF:67:D0:F9:E6:8F:67:70:FE:E8:B7:95:86:D2:65:33:53:05:D8
X509v3 Authority Key Identifier:
keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:72:a4:fd:1e:2a:90:1b:14:55:c9:d3:14:89:e7:7a:a4:e2:
67:49:c9:8b:9b:1c:a0:d4:cd:f9:cd:5f:78:38:44:dd:bf:4d:
e0:db:e8:4d:61:ec:2e:e4:45:53:e6:80:ee:91:35:54:8e:6c:
d1:d2:60:f4:c7:54:c7:b0:9b:6f:d0:2c:11:55:56:39:78:8f:
ab:d3:05:f7:a4:ee:31:8b:a6:72:ac:04:15:d7:0d:b8:55:e4:
d7:f6:7a:ed:40:ce:aa:b8:51:be:e0:84:04:80:be:db:87:6c:
e0:ea:9b:4c:4a:61:56:94:26:42:e5:f2:54:10:f2:24:08:a5:
67:d9:a3:a1:74:41:c8:39:28:6a:35:6d:b2:cc:74:37:50:35:
59:0c:95:ae:b1:66:d1:cf:10:b0:c3:9f:9c:ed:03:3b:64:ff:
64:ed:e4:f0:1b:c2:2e:93:f2:3a:43:af:eb:59:10:7f:f2:c6:
6e:c2:58:e0:5c:09:2a:e7:92:5b:f9:da:8e:31:c0:9a:88:38:
13:e1:74:ac:35:6a:72:20:a3:5d:a8:e4:89:34:b8:91:7c:9c:
6a:13:e0:46:93:c8:6a:2f:ae:07:dc:f9:4a:48:43:90:71:e4:
fa:bc:48:58:38:24:67:92:31:db:e4:85:86:e6:21:28:50:f5:
e7:9b:28:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGNhaQElDwQfsYQf9qviUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxM2M1ZWEyZjRlYWJmM2YzYzQyZGYzYzMzMWU5Y2JhMTBj
OTNhMDkwHhcNMjUxMTA0MDkwMDQyWhcNMjUxMTA1MDkwMDQyWjAzMTEwLwYDVQQD
EygyY2RmNjdkMGY5ZTY4ZjY3NzBmZWU4Yjc5NTg2ZDI2NTMzNTMwNWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCM1JMSWcnIVuUpUx9TPQOt+gOhy
jgH8qi2akJH+UHD/9U7I/1rZuNf9emt85oW/Ac1CIQYlPq3z+bMqp9yN7y/IQN//
dam4lOTbiLgs/xHM672HMc9zz6bofSwLrsQ5urWYlMF+3syskAKHMOqAM/Aj73NV
Z3XLkAf3gzDpNpMoWuICKOFop2yTjHquNFoUbXWCH2WnqT/Catv3huw4rf8lwtQK
YrCAtZ7JxoUh4NA9EDVD1eXfFP2mMsL8nBhLOnJCVHzpn2nILZqhJfTiUozC6cPU
ARr3jUshgQ/nsKWrdjUA3UxldpguAgB6wBmOH8IBopyk5vFoRwYB+DxG7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzfZ9D55o9ncP7ot5WG0mUzUwXYMB8GA1UdIwQY
MBaAFJE8XqL06r8/PELfPDMenLoQyToJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1R4ZW92VHF2ejg4UXQ4OE14NmN1aERKT2drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjQwZDktOTc4ZS00MmEzLTgzMWUt
YjEwOGFkOWUyMmM4LzEva1R4ZW92VHF2ejg4UXQ4OE14NmN1aERKT2drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80YjQwZDktOTc4ZS00MmEzLTgzMWUtYjEwOGFkOWUyMmM4
LzEva1R4ZW92VHF2ejg4UXQ4OE14NmN1aERKT2drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXKk/R4q
kBsUVcnTFInneqTiZ0nJi5scoNTN+c1feDhE3b9N4NvoTWHsLuRFU+aA7pE1VI5s
0dJg9MdUx7Cbb9AsEVVWOXiPq9MF96TuMYumcqwEFdcNuFXk1/Z67UDOqrhRvuCE
BIC+24ds4OqbTEphVpQmQuXyVBDyJAilZ9mjoXRByDkoajVtssx0N1A1WQyVrrFm
0c8QsMOfnO0DO2T/ZO3k8BvCLpPyOkOv61kQf/LGbsJY4FwJKueSW/najjHAmog4
E+F0rDVqciCjXajkiTS4kXycahPgRpPIai+uB9z5SkhDkHHk+rxIWDgkZ5Ix2+SF
huYhKFD155so5Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:31:06 2025 by rpki-client