Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
File: KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json)
Hash identifier: ITRgelTLQWrAX3wvmoZ3vLMb10bXNnp1FrE8CUBtJ/4=
Subject key identifier: DC:A7:9B:1A:B6:95:25:6E:AA:8B:BE:3B:26:D1:38:45:31:88:26:E2
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial: 019A4E189659A6D5E3E7DD7B93324670C952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
Manifest number: 0B05
Signing time: Tue 04 Nov 2025 09:00:25 +0000
Manifest this update: Tue 04 Nov 2025 09:00:25 +0000
Manifest next update: Wed 05 Nov 2025 09:00:25 +0000
Files and hashes: 1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: IP7TWJQQKZCkImMe04B49UGLsHQKuN4JAccn+7FrN9A=)
2: Yu3sg19gw9RqxXtaBobOTcFABCU.roa (hash: s1VpHCeBK4q+0ERblkTkQcFQicVxzMLQOo1cXvgRehs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:96:59:a6:d5:e3:e7:dd:7b:93:32:46:70:c9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
Validity
Not Before: Nov 4 09:00:25 2025 GMT
Not After : Nov 5 09:00:25 2025 GMT
Subject: CN=dca79b1ab695256eaa8bbe3b26d13845318826e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:46:da:b3:f4:c2:eb:f9:ba:f3:b7:94:ae:
10:2f:04:75:bc:86:02:f0:62:11:54:3f:f5:2f:7a:
78:17:83:29:f8:95:46:ef:b5:a1:43:cf:90:88:58:
57:b0:26:33:b9:e4:dd:2a:8e:35:c1:7f:9b:48:aa:
2e:6d:74:aa:ff:ab:35:ac:d3:28:01:5a:82:9f:7a:
f3:5f:ae:3e:40:d0:06:41:83:9e:b7:cc:10:d3:df:
d8:9c:12:76:47:c9:e7:5e:6b:a1:d5:02:ba:11:88:
94:93:9a:12:60:83:40:6c:ff:1e:d7:ff:30:6b:cc:
d2:b8:ae:c5:a1:04:ed:16:39:0c:51:23:95:b1:19:
c5:fb:0f:06:6e:cd:f0:2e:3a:18:c0:01:d5:63:03:
e8:9e:97:a8:9f:ad:76:e4:9d:a2:94:88:78:e7:44:
5f:fe:eb:83:1c:ac:ed:79:8a:6d:89:ea:eb:57:fd:
3c:e3:4d:d3:12:df:9f:29:aa:b7:30:a0:9d:81:8f:
63:eb:42:59:db:85:15:83:ba:b5:88:30:c3:34:ec:
01:1a:b6:11:d0:30:35:07:da:fe:92:c5:cc:4e:13:
04:cc:fc:46:4d:6b:04:22:77:df:92:13:d2:06:d7:
f9:48:47:45:c5:94:6e:9c:c5:60:6a:54:72:83:63:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A7:9B:1A:B6:95:25:6E:AA:8B:BE:3B:26:D1:38:45:31:88:26:E2
X509v3 Authority Key Identifier:
keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:84:98:0c:ae:8e:a3:44:f3:ea:19:0f:b4:14:34:91:8b:5b:
02:1e:1c:9f:2a:67:6e:81:e7:dd:38:e9:d0:c7:c8:0c:5a:e8:
05:ee:4b:da:38:d8:ae:e7:c6:8a:e4:9d:fe:23:ec:ca:89:2a:
c7:32:02:ad:eb:57:66:35:fa:df:40:4c:2b:e7:2a:df:c8:ed:
e9:16:d1:f0:09:a3:0e:db:c4:27:21:51:5c:75:48:7c:30:02:
3d:7b:69:4f:a0:1e:19:65:64:c1:10:7b:1e:8a:79:4e:2d:61:
e4:8d:4a:5f:26:91:64:66:ef:40:e9:bd:ff:50:cd:8c:e7:d7:
9f:55:7e:f5:1f:99:3b:fa:e1:61:ca:d2:13:5b:63:74:ac:ba:
28:9a:d1:58:f7:42:5a:ec:aa:72:86:76:06:a2:48:d1:79:fb:
10:64:1f:3c:e2:36:1e:e9:1b:6e:af:ce:c7:57:c5:b8:fc:75:
e6:c7:50:f5:fe:9e:85:b8:9f:20:b5:9b:72:7e:87:8a:10:dd:
80:0a:d5:9c:88:0f:24:8e:d8:94:d3:39:59:3a:a7:ea:fe:a6:
47:7b:15:72:7c:ee:5e:9c:d4:04:3e:34:89:44:ca:73:7c:ac:
05:c4:25:4a:af:2b:7f:13:f2:18:9d:04:b2:27:0e:c3:d0:4d:
c0:e7:f6:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGJZZptXj5917kzJGcMlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MzZmNjQzMjhjMWU2NjkxMTQwOWVhN2M2OTcyMmY4ZDI2
MjY2YjUwHhcNMjUxMTA0MDkwMDI1WhcNMjUxMTA1MDkwMDI1WjAzMTEwLwYDVQQD
EyhkY2E3OWIxYWI2OTUyNTZlYWE4YmJlM2IyNmQxMzg0NTMxODgyNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqlG2rP0wuv5uvO3lK4QLwR1vIYC
8GIRVD/1L3p4F4Mp+JVG77WhQ8+QiFhXsCYzueTdKo41wX+bSKoubXSq/6s1rNMo
AVqCn3rzX64+QNAGQYOet8wQ09/YnBJ2R8nnXmuh1QK6EYiUk5oSYINAbP8e1/8w
a8zSuK7FoQTtFjkMUSOVsRnF+w8Gbs3wLjoYwAHVYwPonpeon6125J2ilIh450Rf
/uuDHKzteYptierrV/08403TEt+fKaq3MKCdgY9j60JZ24UVg7q1iDDDNOwBGrYR
0DA1B9r+ksXMThMEzPxGTWsEInffkhPSBtf5SEdFxZRunMVgalRyg2Mn+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNynmxq2lSVuqou+OybROEUxiCbiMB8GA1UdIwQY
MBaAFCk29kMoweZpEUCep8aXIvjSYma1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83ZGM3MTItZmY1ZC00ZmYyLWEyYWUt
MzlkYzUzZTM3ODJmLzEvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS83ZGM3MTItZmY1ZC00ZmYyLWEyYWUtMzlkYzUzZTM3ODJm
LzEvS1RiMlF5akI1bWtSUUo2bnhwY2ktTkppWnJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYSYDK6O
o0Tz6hkPtBQ0kYtbAh4cnypnboHn3Tjp0MfIDFroBe5L2jjYrufGiuSd/iPsyokq
xzICretXZjX630BMK+cq38jt6RbR8AmjDtvEJyFRXHVIfDACPXtpT6AeGWVkwRB7
Hop5Ti1h5I1KXyaRZGbvQOm9/1DNjOfXn1V+9R+ZO/rhYcrSE1tjdKy6KJrRWPdC
WuyqcoZ2BqJI0Xn7EGQfPOI2Hukbbq/Ox1fFuPx15sdQ9f6ehbifILWbcn6HihDd
gArVnIgPJI7YlNM5WTqn6v6mR3sVcnzuXpzUBD40iUTKc3ysBcQlSq8rfxPyGJ0E
sicOw9BNwOf2wQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:31 2025 by rpki-client