Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: ZAGRcm0s3gnbjIWnT2Zc7jaqLoCALP0eTKfZNvPRCYw=
Subject key identifier: 30:42:97:AC:9F:E2:0E:12:7D:7C:D5:38:1F:8B:2E:2B:B0:99:3F:D5
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 01976F9A08C4A6622AF64BD04D991AB73719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 0AB3
Signing time: Sat 14 Jun 2025 18:00:55 +0000
Manifest this update: Sat 14 Jun 2025 18:00:55 +0000
Manifest next update: Sun 15 Jun 2025 18:00:55 +0000
Files and hashes: 1: gLZLrbhpO6mWtu79cX_I9beQtfY.roa (hash: FKC1b4NqDGusVuG1PsHV/OorcR6VfmcWdy6GLsbONNI=)
2: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: MXWvSq/QP2pqcyYZYL5Ik1vSDsrFWMxNry6IArbCWPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:08:c4:a6:62:2a:f6:4b:d0:4d:99:1a:b7:37:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Jun 14 18:00:55 2025 GMT
Not After : Jun 15 18:00:55 2025 GMT
Subject: CN=304297ac9fe20e127d7cd5381f8b2e2bb0993fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:87:a0:61:64:b3:92:33:1c:e8:85:41:02:
b5:80:a2:74:5e:27:13:4f:e3:5a:7f:20:fe:28:2a:
c0:5a:8e:b0:5a:63:d0:bd:a8:0a:de:91:ba:01:d8:
96:4b:4b:b8:c1:16:49:1f:54:87:67:01:20:a4:44:
66:28:bd:ba:08:7e:0c:a4:89:74:fe:32:15:3e:5f:
49:75:56:34:11:c4:45:bc:9d:59:36:c7:6c:4e:69:
3b:20:c3:44:c8:93:0a:aa:6c:4e:30:d1:c4:47:32:
37:b7:bb:ea:8b:e5:fa:1f:24:6d:44:fd:f7:10:c9:
97:64:92:89:28:7f:27:21:ed:83:a7:75:d8:9b:60:
65:92:87:c1:e1:9f:cc:09:21:7e:e2:f8:49:80:7d:
66:f7:4b:57:86:8d:c0:a8:72:11:ea:3e:56:e5:e9:
d7:d1:4c:56:f0:69:fe:c1:0c:29:51:39:b2:1d:04:
57:21:4a:91:99:62:0d:d4:42:4c:75:40:6e:28:49:
67:e5:1f:51:20:90:92:9b:22:f2:ac:03:2e:ea:a1:
5e:a6:5d:a5:68:4e:f6:d8:84:ea:6f:02:aa:df:34:
29:f1:48:e7:4d:be:3a:7b:3a:6f:c3:7f:3a:b7:cb:
b6:49:58:d5:88:87:6a:01:63:c0:ee:87:4d:64:bf:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:42:97:AC:9F:E2:0E:12:7D:7C:D5:38:1F:8B:2E:2B:B0:99:3F:D5
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:86:d9:b8:30:bd:a2:d4:8a:cd:c4:0a:52:7e:29:30:9b:6b:
86:4d:fd:2e:ba:6d:17:4c:2e:45:29:87:dd:3d:e4:be:ec:30:
21:19:49:e6:9c:6a:6c:81:a2:ef:39:91:35:d5:00:b5:9d:ad:
a7:5d:44:66:00:40:75:3d:79:82:ed:01:cb:3e:3a:22:29:a9:
57:a5:a0:26:04:da:01:20:c8:0e:c4:c0:6b:cc:a3:dd:22:47:
28:36:9a:6f:46:42:49:dd:d6:74:b5:41:6d:c1:e7:a2:72:f9:
72:19:9e:6c:65:25:ab:6d:8f:46:a2:33:01:ba:e8:eb:b2:10:
84:3f:89:82:82:ee:c9:65:5b:7f:f8:4b:4b:00:fc:e1:61:8f:
a1:46:bf:06:94:dd:93:6b:e9:89:96:9f:42:20:14:0a:ad:2c:
5f:90:85:a6:f5:bb:88:80:57:86:41:4b:08:9c:65:4e:f3:0c:
55:3b:1d:a5:f3:71:f8:c0:8f:1c:a5:24:4d:0e:55:68:e8:10:
5a:e3:1b:98:6b:9e:b4:d6:ad:5f:f9:00:92:bb:77:0b:7f:a8:
9b:6c:4c:91:52:28:77:3f:86:21:ff:b1:ca:b9:18:ae:0e:cc:
72:4a:0d:18:a9:31:db:37:55:02:94:3f:3a:b4:95:ec:e9:21:
5d:f3:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:59:07 2025 by rpki-client