Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
File: kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json)
Hash identifier: 66Y7NiHKwstNOELraYV2Z8dHmRDNoZMWM1hdzS2Dx4w=
Subject key identifier: E5:D0:CF:23:1F:8B:7A:F9:A3:51:E7:23:DD:51:15:FE:68:56:95:FA
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 019A4D73EC776DC40FAEFAC2C97AA1B13004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
Manifest number: 110B
Signing time: Tue 04 Nov 2025 06:00:34 +0000
Manifest this update: Tue 04 Nov 2025 06:00:34 +0000
Manifest next update: Wed 05 Nov 2025 06:00:34 +0000
Files and hashes: 1: 1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa (hash: Dpj5AMuFNg0086YuEbRvx4oDSlmmrMJ7GujnIQgUfaA=)
2: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: aMJXIki89McoHXIAzWE85u3d2HVLKuC7U9ZmmbDTWmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ec:77:6d:c4:0f:ae:fa:c2:c9:7a:a1:b1:30:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Nov 4 06:00:34 2025 GMT
Not After : Nov 5 06:00:34 2025 GMT
Subject: CN=e5d0cf231f8b7af9a351e723dd5115fe685695fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:3a:b8:c1:70:57:3e:02:4c:76:7e:d0:c5:
84:aa:93:41:fa:44:55:87:20:93:9f:3a:c1:b0:f1:
11:55:cb:7d:2c:87:43:a6:8a:d1:a5:e1:1f:32:a6:
25:9b:2c:e9:b0:64:99:69:f9:b4:c4:93:89:4a:1d:
ad:47:d5:94:cf:d0:18:34:c5:2f:59:0a:ec:70:62:
71:e7:03:12:77:84:26:b9:8e:fb:59:0f:79:ee:77:
f1:c0:f2:d8:b3:0d:85:74:09:73:ae:ce:0c:30:dd:
3d:fe:4f:cc:8e:1d:e7:e8:71:06:52:89:2e:ca:77:
74:0a:f0:73:60:0a:ec:91:6c:ae:7a:a0:f9:10:7a:
d0:38:ab:14:b0:da:b6:d8:bf:5b:c6:32:fb:99:da:
c4:70:9f:10:0e:26:db:b8:76:d8:3d:d9:53:f9:be:
2a:19:83:09:af:4f:bc:da:f1:12:0f:1e:79:f2:95:
98:82:bc:10:c4:5a:c6:c5:e5:99:83:23:14:b8:7e:
fb:76:b0:bd:33:37:22:2e:e7:44:06:c3:25:73:b7:
f1:d0:81:3b:43:90:04:e5:99:f0:3a:b9:e6:ce:73:
4e:2a:48:71:7a:d5:9c:e3:44:97:44:06:f7:dd:37:
0f:37:90:1d:df:d5:5a:ab:6b:76:31:4a:6a:82:c5:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D0:CF:23:1F:8B:7A:F9:A3:51:E7:23:DD:51:15:FE:68:56:95:FA
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e4:ec:d9:c4:2f:5d:42:f4:32:5f:9d:97:64:64:a3:c6:5e:
f1:3c:30:62:18:93:6b:a0:c9:50:3b:ec:c0:9b:5d:da:f8:c4:
96:1c:8a:ee:2d:a7:4f:c3:ab:1e:a7:04:ba:f7:54:32:dd:09:
0e:b4:43:7d:fa:e9:84:c2:e8:34:f1:79:39:d0:68:03:7a:e6:
fc:48:32:68:e7:5d:42:28:55:68:53:89:be:0c:7e:6e:c7:8b:
dd:05:26:c8:e6:b0:c6:30:07:4a:08:69:8e:df:28:99:6f:59:
dd:cd:73:c6:ce:03:70:b6:9d:9b:5c:bd:66:62:05:eb:4d:b7:
38:89:65:45:a9:ff:82:30:f0:66:2d:b3:a4:a7:59:3f:e0:17:
f8:d4:2c:06:dd:89:ee:82:33:84:9a:b8:b9:ed:52:9b:85:3e:
5f:a1:f3:b5:98:45:e6:a7:d7:9c:40:47:8f:72:3e:ca:ec:cb:
c9:5c:61:1c:3f:63:ed:d1:e6:36:f0:d1:11:ea:1e:fb:d5:45:
2f:a9:2b:ff:bc:8d:5d:0f:59:a0:35:5c:41:5d:f3:1e:42:05:
0f:03:6b:2b:f7:9d:b9:a4:2f:c9:4b:6d:a7:20:86:cd:76:c4:
c5:69:89:fd:f9:40:bb:4b:5e:5e:47:b7:51:05:16:bc:a9:4f:
20:b2:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:34 2025 by rpki-client