Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier: rLkyeAMRs7bbfy/fh/OkchZTbVEnvKZ2jA5Do7bs33A=
Subject key identifier: 1E:22:D5:14:77:C6:E2:09:A4:E3:F4:05:2A:AC:43:D4:4F:76:FB:12
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 019A500768D75ACF02BA76E51B5C3460708C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 18:00:54 +0000
Manifest this update: Tue 04 Nov 2025 18:00:54 +0000
Manifest next update: Wed 05 Nov 2025 18:00:54 +0000
Files and hashes: 1: 1YWYnMlB7bNjXZ-mR2gEvtLN3Bc.roa (hash: iv4yYaqxX9/BpncOJNi6FP4hgIeS1SbHKqiyIfxcth4=)
2: 4CDjeVRMh18gOoZFQB0kG87F3Ac.roa (hash: iS2zUZpr0OcJtSkJuXKr1ZglVEc7UdAcxQ+F6PuEqkI=)
3: CDG-7PWVVdm5Z7h-n4Ap6W6lHRg.roa (hash: 7yd+Jrhn2cJ3wJGfKqF6or4RqCKrwJRg13HNF9MQpQc=)
4: Kr-1FkX8isznu7LNjpkGbo9RXAQ.roa (hash: Nkup561eSF2a1lVSMy8ZbGKlbupLimNEQbbUAaz0DIc=)
5: Qxvf4dambUM4wGGmpG65pgeoc3M.roa (hash: dkmpKTZscpBI0IsTqLbisMD9yO7kEmJGfj1/YKPtkuc=)
6: RmzxPNQi61FBVP1fRDu5ucEzyaI.roa (hash: hjLdRcYfGc3ePa8Zdnij2feYL0ptV5CZuH2vbOXAvTw=)
7: SkASK4zN7bPehdagCz89JkwUfsA.roa (hash: d1RW1sYrndntlpLL9/PiKBPVX2QhXX5rJ7D+z0FCw9w=)
8: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: e28VoJNwVpqwTI0b+op9eI7C0Q/LnBkJVEDEia8fsS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:68:d7:5a:cf:02:ba:76:e5:1b:5c:34:60:70:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Nov 4 18:00:54 2025 GMT
Not After : Nov 5 18:00:54 2025 GMT
Subject: CN=1e22d51477c6e209a4e3f4052aac43d44f76fb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b7:58:88:f7:db:f2:4d:dc:7e:d7:3f:bd:cb:
c9:a1:e3:18:93:47:a4:5a:80:70:50:20:08:6e:01:
f5:7c:c2:91:18:89:f1:e9:b6:f6:68:85:52:42:95:
46:c6:f3:7e:03:ae:f0:ba:93:95:3c:ae:1b:25:09:
53:41:02:06:8e:c3:f9:c1:5d:3d:96:83:f3:c8:5a:
32:e4:9e:37:4f:dc:47:56:12:01:47:50:19:b6:9f:
cd:ee:b7:f0:73:17:9e:81:67:cd:f4:94:82:38:ce:
ff:c1:2c:b3:f2:3b:e6:64:27:49:37:81:4a:a2:c7:
d4:ee:12:63:34:ca:f1:d2:fa:81:6b:c3:44:90:27:
63:43:ae:90:23:65:b7:69:0b:d0:aa:78:3f:a1:2e:
a6:36:79:6c:59:6b:3b:f8:75:cc:99:03:84:29:e4:
27:b4:b2:17:bf:3b:7b:3c:1f:7d:a4:db:40:8d:43:
e8:f1:c7:b2:9b:20:9c:28:24:0c:1c:a0:3a:c0:74:
5c:da:72:a3:10:2b:68:fc:1d:e0:cb:a7:41:e7:84:
ed:d7:34:37:94:ee:5f:1b:a9:5e:36:d1:9c:2b:4a:
20:1a:2c:68:3f:b1:81:50:b9:94:e3:a1:7c:88:39:
9d:a8:85:1e:c4:f8:4e:61:13:a1:32:38:7c:06:91:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:22:D5:14:77:C6:E2:09:A4:E3:F4:05:2A:AC:43:D4:4F:76:FB:12
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:89:eb:dc:65:3a:53:ec:f6:bc:e7:c7:b3:5c:f4:56:e6:50:
65:23:22:a6:f3:88:a8:7a:f4:18:9a:61:eb:1c:5d:d5:ad:9e:
5e:4c:cc:f9:3b:25:f9:4d:95:36:f1:4b:75:d9:11:5f:97:d6:
e3:41:60:43:ba:12:12:35:60:66:85:d5:66:7d:ae:fb:e3:ec:
99:58:3f:65:b3:0a:1c:54:04:0a:87:14:62:32:f7:9c:a8:31:
1d:18:8f:d7:c3:57:0e:cd:e4:1c:9e:a4:39:28:c2:2e:c0:8b:
43:33:f9:c3:8c:85:25:ef:13:a4:f9:a3:bc:56:b9:d2:e2:01:
50:69:1a:e0:e5:2e:13:c0:65:de:e4:95:72:e2:c7:aa:dc:e9:
71:b0:43:da:9e:90:96:5e:2b:1f:6f:0c:1c:9e:18:4c:bf:74:
db:83:03:9f:e9:09:8b:8f:c5:7e:fc:eb:d0:29:e2:0e:34:36:
19:9e:0e:2b:13:31:50:b9:f0:02:ea:23:e4:b7:a1:60:78:84:
79:bd:23:04:d4:e3:2f:83:6b:cd:5d:81:9c:e7:60:2f:c4:b1:
72:b4:c4:51:c1:5f:71:55:6a:b4:11:91:97:c1:d7:d9:2a:89:
14:0c:cb:4c:60:b2:29:dc:6d:b5:53:0c:19:3f:65:dc:a2:14:
de:4c:ed:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:13 2025 by rpki-client