Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: 8oVRbxPGq/bn+KYQQiW0KTJKgRYZg6dyR1AKQGQPqfc=
Subject key identifier: 7C:AD:40:52:92:4B:04:FC:D7:82:B8:B2:37:BA:2F:AC:76:A6:2E:89
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 0197C493687D9437B520153580DA7BE0B36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 0ADF
Signing time: Tue 01 Jul 2025 06:01:24 +0000
Manifest this update: Tue 01 Jul 2025 06:01:24 +0000
Manifest next update: Wed 02 Jul 2025 06:01:24 +0000
Files and hashes: 1: gLZLrbhpO6mWtu79cX_I9beQtfY.roa (hash: FKC1b4NqDGusVuG1PsHV/OorcR6VfmcWdy6GLsbONNI=)
2: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: efc03QrLAGWMCuEZoK11pbaSSczYpwB43hekuynZClc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:68:7d:94:37:b5:20:15:35:80:da:7b:e0:b3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Jul 1 06:01:24 2025 GMT
Not After : Jul 2 06:01:24 2025 GMT
Subject: CN=7cad4052924b04fcd782b8b237ba2fac76a62e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:ef:a0:8f:41:cc:d1:af:63:70:77:74:99:
4e:62:f1:9f:c8:fd:96:22:33:3a:71:94:ae:ef:46:
f3:1d:00:fa:60:76:32:cd:e4:ea:7d:6d:87:be:2b:
e1:3c:a6:75:42:7c:10:5b:b3:39:84:fd:05:b1:cb:
7e:b7:69:75:4c:de:0b:85:05:37:5d:17:ae:42:8b:
ce:65:70:5e:66:68:45:dd:27:f7:86:5b:e1:6d:8a:
55:11:24:18:87:2c:07:fd:f9:a5:78:c5:2f:55:5e:
2c:d3:3c:90:2e:a4:ec:65:7a:c5:cd:b6:64:31:86:
89:44:01:e3:16:c8:82:93:f8:8d:8b:ac:3a:9d:af:
79:45:4b:9c:3f:68:e3:06:e9:40:e5:5c:bc:13:cf:
d6:8d:5d:c6:e3:b9:de:7a:da:9e:53:18:1d:ea:a1:
02:18:3e:8c:79:4e:64:d0:fe:5c:57:e7:b4:86:1a:
b0:84:d0:1e:37:4d:da:14:93:ba:c6:f9:3d:f5:6a:
2e:14:8f:2a:1d:1a:ef:5b:6c:e9:cf:9a:b6:e8:f1:
a0:3b:70:4d:23:37:a1:5b:2a:ad:20:84:f7:8f:f4:
11:93:95:3c:e9:58:5f:38:08:f0:9f:c1:da:c7:13:
6c:69:8b:79:50:28:0a:3b:f3:6f:c1:ef:dc:47:aa:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AD:40:52:92:4B:04:FC:D7:82:B8:B2:37:BA:2F:AC:76:A6:2E:89
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:77:4f:9f:83:89:d2:cb:5f:fe:65:38:0f:55:46:00:40:b4:
01:30:e4:c1:4e:8e:a8:9b:c4:0d:02:d5:ea:dd:14:0b:5f:11:
9b:ae:20:e9:7b:74:3f:5b:7c:93:29:a9:7f:48:d0:73:82:eb:
3e:98:72:a5:ae:25:56:59:71:35:c1:e5:f1:b4:fb:47:1f:e9:
93:ec:35:d9:10:65:37:87:c2:3a:bb:73:c0:d8:58:8a:dd:b1:
5d:52:a8:26:29:df:ea:0a:2e:6d:8c:ba:b8:5a:c1:35:a0:87:
aa:d5:02:e9:a6:8e:a2:92:c2:c0:96:10:7a:c3:dd:b1:4c:04:
8f:98:42:cf:bc:79:3a:05:3b:5b:1c:99:c5:3a:ea:d3:2e:0c:
cb:92:2e:ab:f5:3b:14:d0:85:39:b5:cd:57:b2:cd:07:d5:44:
b0:9b:02:98:1d:e1:e2:12:ab:a5:61:34:23:ab:30:d7:91:2a:
24:15:bf:0a:a2:9b:74:af:28:46:55:41:f5:41:a7:e9:97:e8:
07:00:2d:9a:2b:8f:7f:6a:22:99:ee:2d:b9:a6:24:d9:93:0b:
c0:bd:9a:b5:58:c8:7a:bd:66:27:24:c9:6d:ad:ca:ed:93:4b:
e1:7d:91:19:c2:9a:54:e5:a4:f2:0b:68:40:3a:f3:af:9b:65:
5c:02:30:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:26:40 2025 by rpki-client