Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: C3JcaVvKy3ijBzR6Q5FHu+mGDVpXdiU4NivGdRvmbYg=
Subject key identifier: 04:A3:97:56:8E:81:F5:86:F7:7E:C5:9C:00:B0:33:EE:10:30:D9:2F
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 01989335C88B1C4BE4663F062AC151CCD4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 0B4A
Signing time: Sun 10 Aug 2025 09:00:32 +0000
Manifest this update: Sun 10 Aug 2025 09:00:32 +0000
Manifest next update: Mon 11 Aug 2025 09:00:32 +0000
Files and hashes: 1: gLZLrbhpO6mWtu79cX_I9beQtfY.roa (hash: FKC1b4NqDGusVuG1PsHV/OorcR6VfmcWdy6GLsbONNI=)
2: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: yR1pbTPehU4IDHmO7XscAYHNmQgpPJn0qGjFTftMsSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:c8:8b:1c:4b:e4:66:3f:06:2a:c1:51:cc:d4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Aug 10 09:00:32 2025 GMT
Not After : Aug 11 09:00:32 2025 GMT
Subject: CN=04a397568e81f586f77ec59c00b033ee1030d92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:0a:b1:c8:05:b1:69:f0:54:86:be:ed:40:
1b:15:46:a1:0c:96:93:e1:64:eb:15:ea:29:7c:0c:
43:0b:b9:bf:d5:12:b9:00:d3:57:43:68:75:a1:92:
f5:30:6c:1c:3e:b4:c0:ab:9c:08:50:73:db:79:59:
fd:6c:26:bc:36:a8:73:eb:50:77:ad:8c:1d:ae:bb:
99:0a:3a:35:76:28:77:8e:ee:68:f3:be:91:82:9d:
9c:23:42:9b:6f:eb:11:82:ca:31:69:5e:53:b8:88:
89:79:37:e4:38:bb:52:2f:49:01:84:03:81:3a:d8:
cf:eb:f8:21:8b:80:53:ae:72:d8:64:56:25:57:db:
22:ac:40:bc:1a:d3:db:87:70:2b:fe:64:76:6d:9e:
38:a6:47:3b:09:99:ac:f3:c7:43:3d:21:be:2d:46:
f3:0b:c0:0c:8b:4d:19:64:e5:d3:1f:31:37:a1:84:
03:c2:a6:39:02:2e:47:9b:16:44:24:7a:fa:d3:77:
06:00:c5:fa:52:07:9b:c0:47:04:40:81:46:2d:cc:
df:79:a1:48:2f:d9:dc:50:e4:af:6b:10:b1:cd:0c:
11:0b:ed:3d:a5:03:cb:03:e9:7e:29:16:35:2c:27:
e9:54:fd:75:5d:6b:5b:b0:c9:28:29:fc:64:6c:e2:
67:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A3:97:56:8E:81:F5:86:F7:7E:C5:9C:00:B0:33:EE:10:30:D9:2F
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8f:03:f3:9b:f3:2e:88:fa:ef:da:64:c6:e6:39:f7:ae:24:
18:84:da:af:05:c8:c2:a3:d5:0a:4a:68:a7:ab:e8:34:dd:45:
75:a7:f3:70:7a:95:06:4b:d5:66:5f:14:8b:4d:6e:04:3f:c7:
a4:58:23:e5:ae:0d:d4:e5:10:55:29:ba:6c:81:bd:3c:1d:a7:
05:41:67:7a:94:fb:d2:ee:97:46:78:8d:91:81:85:8b:c2:e9:
df:24:c3:63:30:62:03:7d:4d:c8:92:23:fa:65:10:e5:69:f4:
3e:2a:22:2d:a4:40:04:bc:e4:dd:c1:f4:1d:1d:31:34:87:74:
40:67:5a:ae:6a:9c:ce:e0:0f:31:ef:cf:6c:b0:32:f8:54:9b:
78:f4:f1:68:e9:5e:cc:97:1f:f0:4a:88:64:4e:cb:3b:9c:5f:
0d:90:eb:0b:2b:ba:93:52:b2:f4:87:34:f9:c2:54:4f:f4:35:
35:b2:8c:4b:e4:4f:7d:39:21:2d:08:8b:ea:77:69:00:c2:6a:
69:95:24:90:40:08:c8:66:db:7e:db:7f:e1:da:5f:fd:44:88:
61:b4:fc:6f:ef:17:79:ea:49:47:2c:33:9f:6a:09:76:ef:00:
54:77:05:75:e4:09:64:cb:ca:db:3d:30:40:ee:17:35:6d:4f:
fc:75:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:40 2025 by rpki-client