Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
File: kCGOgBpTJZXptxxkNoTqBflr9fM.mft (raw, json)
Hash identifier: AgviIXA/8l7pGuG5+fI5VoVFBjkSfOO8W6j76COxpR8=
Subject key identifier: AD:A4:B5:5A:C1:18:0C:08:2B:A8:1C:D6:6C:89:59:9F:5C:B7:D5:5E
Authority key identifier: 90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
Certificate issuer: /CN=90218e801a532595e9b71c643684ea05f96bf5f3
Certificate serial: 019A564027E6BC506A434AD200AADF0875E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
Manifest number: 0475
Signing time: Wed 05 Nov 2025 23:00:36 +0000
Manifest this update: Wed 05 Nov 2025 23:00:36 +0000
Manifest next update: Thu 06 Nov 2025 23:00:36 +0000
Files and hashes: 1: kCGOgBpTJZXptxxkNoTqBflr9fM.crl (hash: lsmkGPbhCu+aqmOx5ES4xwJXlTmPD6kiX9RSeatwcfg=)
2: wO4tKRWBwJAF_Ti9XP-8yjRZuUU.roa (hash: G7Rk/RipLXF/QPRugyDtoGfESmr50WO1Zig00oPYW14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:40:27:e6:bc:50:6a:43:4a:d2:00:aa:df:08:75:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90218e801a532595e9b71c643684ea05f96bf5f3
Validity
Not Before: Nov 5 23:00:36 2025 GMT
Not After : Nov 6 23:00:36 2025 GMT
Subject: CN=ada4b55ac1180c082ba81cd66c89599f5cb7d55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:7b:f4:17:f1:3b:f1:54:62:7f:2d:3e:ba:
98:11:69:41:d1:c0:a2:ab:78:4b:ed:b7:f8:b6:ce:
6e:c2:6c:c3:c6:bc:f4:79:fc:1b:82:82:36:fb:36:
fe:4b:9c:3f:95:9a:84:ee:4f:5b:fa:86:5e:83:4d:
7a:cc:9d:1c:d7:79:86:de:2e:7e:36:05:95:da:4a:
e0:f5:0c:93:38:00:78:05:b4:15:41:5a:05:4d:7e:
72:75:70:ea:99:2c:f6:32:3c:f7:24:68:ef:29:0a:
7c:30:9f:87:24:9e:8a:81:c5:68:28:8e:d8:ba:6e:
cb:96:f6:b4:0a:a2:7c:73:84:e5:5e:63:54:76:ee:
d4:3e:e8:fd:6e:b2:cc:21:69:cb:99:de:b9:1d:62:
aa:4f:10:63:85:0f:0d:13:e5:5f:8f:b7:78:99:0f:
aa:35:cd:67:a3:81:51:a6:11:ab:d9:fb:d9:37:1a:
70:fe:22:c5:8f:89:4a:f8:9f:40:4a:c8:a8:2e:5c:
df:67:6c:6e:e7:cf:ee:4b:5c:3c:45:7d:37:5b:78:
b7:93:ea:50:d3:f1:0c:b9:da:30:52:d4:69:46:1c:
49:b9:38:26:1e:ec:95:58:98:87:2c:bb:1f:48:7c:
7e:50:5b:d7:d4:61:9f:88:e5:8e:de:ca:5f:07:e7:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A4:B5:5A:C1:18:0C:08:2B:A8:1C:D6:6C:89:59:9F:5C:B7:D5:5E
X509v3 Authority Key Identifier:
keyid:90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:66:26:98:cd:5c:07:64:9d:22:11:9e:4d:6d:b2:82:4f:73:
e9:6c:f6:7b:a4:31:46:3d:2c:e0:23:99:78:fc:b3:a5:25:26:
af:f2:09:bd:01:63:17:06:01:ec:fc:af:80:cd:9a:27:c9:9e:
49:79:75:04:9a:fb:1b:e5:d9:0c:e1:26:02:80:6b:57:80:38:
bc:64:27:5a:57:b9:a1:88:ce:62:9c:8d:f1:e2:ab:99:52:00:
26:27:7e:51:b8:a2:b5:df:a0:a9:05:d3:8a:62:fe:a4:cf:96:
bf:f6:37:32:a2:d6:d8:e0:fd:24:e2:d2:e3:49:62:6f:3e:e5:
f1:8a:bf:09:2e:92:35:f1:84:16:86:84:d5:0f:5a:2b:74:f5:
7e:4a:d3:b0:2e:db:30:a2:98:eb:63:77:9c:69:b3:a0:78:65:
95:39:fc:7c:f1:0b:0f:00:df:32:e0:b6:d1:5d:e9:fb:e6:39:
fb:6b:e6:a2:4b:ba:21:7f:55:4c:01:f2:77:1f:84:99:1c:36:
77:33:f9:9b:9b:6b:c8:36:c8:bc:b1:d7:a7:64:19:1d:99:91:
78:0f:67:c4:f6:bb:19:45:86:68:62:12:d1:4a:a8:c6:49:6e:
0c:73:da:5f:11:3c:8c:04:64:be:1c:1a:39:31:35:d0:b1:b5:
e0:c4:5e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:20:21 2025 by rpki-client