Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: 86P7inlswHZZsUuDmuqohiy0TuAmwny0RpGNOnsl2sQ=
Subject key identifier: 24:01:43:6D:64:7C:E9:C8:CE:06:3D:82:A3:99:4A:C9:CD:60:DD:93
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 019A4EF5587DCF292F93385C538FB86D856D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 1303
Signing time: Tue 04 Nov 2025 13:01:30 +0000
Manifest this update: Tue 04 Nov 2025 13:01:30 +0000
Manifest next update: Wed 05 Nov 2025 13:01:30 +0000
Files and hashes: 1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: 49hoXOuM/B/gEFoOr0dM2PVHaAsfmxxkGRhPtnZaT0k=)
2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:58:7d:cf:29:2f:93:38:5c:53:8f:b8:6d:85:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Nov 4 13:01:30 2025 GMT
Not After : Nov 5 13:01:30 2025 GMT
Subject: CN=2401436d647ce9c8ce063d82a3994ac9cd60dd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:34:3e:79:99:76:14:ac:e4:65:5c:9b:6e:
31:37:3b:b9:74:86:36:1c:46:8d:26:c9:f8:4d:63:
6d:af:4b:88:7f:40:36:8e:11:67:95:c9:07:16:9a:
41:d8:15:55:b7:4a:a3:ef:4e:c0:47:92:37:15:95:
98:a2:93:2a:5f:13:5c:d4:ea:51:dc:c5:54:f1:43:
f8:4a:9f:40:67:2a:bc:78:c0:a7:d4:3a:64:5f:ed:
56:e4:6f:8a:4a:24:a6:3a:bd:52:05:5c:85:c2:02:
f2:95:e0:f2:04:3d:31:4e:9d:ba:a2:85:23:e1:d2:
94:d2:62:43:40:02:d8:0b:a5:68:e7:a3:08:c9:e4:
9c:a5:eb:f1:e7:34:b3:0b:24:3e:c9:b5:6a:9c:cf:
a2:d3:10:d7:d5:23:a1:bc:37:68:6c:4d:ad:11:22:
a8:df:21:9d:eb:f8:8c:d3:60:10:32:60:cc:45:48:
97:f6:8c:25:4e:6c:c3:76:00:c7:6e:56:3c:79:43:
68:7e:2c:89:74:5e:3c:77:d4:c3:18:cb:d8:9b:46:
8b:46:f7:b2:20:a9:d5:77:46:8e:e4:bc:0d:3d:26:
e6:15:c5:88:0f:46:c8:eb:ac:39:b9:d6:2d:0c:b0:
de:41:a9:e4:c0:61:33:91:73:a9:ab:9d:80:c3:26:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:01:43:6D:64:7C:E9:C8:CE:06:3D:82:A3:99:4A:C9:CD:60:DD:93
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:37:3c:fc:a5:43:59:89:a0:10:1a:f1:85:60:28:c5:d7:24:
04:66:27:9f:95:53:86:5a:99:9f:95:3e:a3:0a:02:a0:45:59:
9c:86:86:9c:4c:01:b0:4c:ac:25:b2:e0:ff:bb:29:1e:b4:70:
ab:98:29:26:38:ca:0c:f6:da:78:d5:24:86:7f:e5:c3:f2:84:
a4:af:f8:5c:d2:81:21:f1:c4:6a:6c:b3:10:d0:8e:c0:94:22:
92:35:05:a0:ab:7e:7c:10:97:b9:df:ac:a8:35:6f:e0:f4:d9:
45:4d:9d:0b:68:b3:1f:5e:b6:73:77:9a:ae:13:2b:25:a6:64:
1a:5d:3c:43:ee:ee:13:c9:4a:54:ab:e7:b1:e1:3f:f5:91:96:
5f:dc:f9:5d:ac:72:2d:05:12:b4:18:05:a6:95:bf:64:29:d9:
75:02:8d:74:a1:c8:53:dc:f5:e9:b3:54:91:8a:78:6a:6b:6a:
2c:cd:37:e0:0b:0a:6f:cf:ea:7a:dc:28:85:3e:53:aa:5b:71:
03:92:9c:9b:3c:3f:98:ae:de:44:0c:7d:38:90:4b:fd:a0:48:
51:5d:02:68:2c:9a:30:36:db:3f:69:f1:87:7e:97:fd:79:67:
da:84:e2:b4:e5:02:43:c4:a8:e9:31:dd:eb:ad:46:2b:bc:13:
d3:41:2b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:57 2025 by rpki-client