Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: W3xhGFhpEj9mFqO0xohHoP/tG7/kIk+PLSsqao+y570=
Subject key identifier: AD:EE:A9:EC:8D:8C:D7:14:5A:D0:D4:05:7F:30:40:90:F4:F0:30:8A
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 0198D4E039BC2D7432D5671AB1CD7C456E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 0B6C
Signing time: Sat 23 Aug 2025 03:02:01 +0000
Manifest this update: Sat 23 Aug 2025 03:02:01 +0000
Manifest next update: Sun 24 Aug 2025 03:02:01 +0000
Files and hashes: 1: gLZLrbhpO6mWtu79cX_I9beQtfY.roa (hash: FKC1b4NqDGusVuG1PsHV/OorcR6VfmcWdy6GLsbONNI=)
2: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: Poji6d0N6USRH+i3EpAEL0rZff7eP6fA/Z9L/EP0M9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:39:bc:2d:74:32:d5:67:1a:b1:cd:7c:45:6e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Aug 23 03:02:01 2025 GMT
Not After : Aug 24 03:02:01 2025 GMT
Subject: CN=adeea9ec8d8cd7145ad0d4057f304090f4f0308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:85:5b:a2:e1:f9:fb:31:ca:92:70:d0:f6:
d6:25:59:dd:2f:15:05:ff:0c:fd:11:3c:04:64:d9:
05:2e:f3:3f:a4:11:66:bf:d7:ec:98:db:88:e1:80:
ed:bb:45:f1:f8:44:9a:90:ee:1d:2e:74:aa:2e:52:
ea:eb:5c:a1:4d:3d:cc:51:63:cd:16:ff:91:de:9c:
25:c3:3b:4f:1b:7a:f0:06:80:d5:97:52:ea:2f:65:
73:cd:4e:92:70:3f:fe:5e:a7:af:77:b7:29:68:9c:
41:c3:85:75:d5:5d:9a:cf:a6:34:8b:40:6a:3b:35:
43:d2:ef:6e:6e:fe:78:ea:77:6a:96:a3:51:fb:9d:
b6:38:db:64:78:4f:34:fe:24:66:9a:7f:44:56:07:
bd:90:63:43:b9:89:cd:71:b2:a9:86:9c:28:93:70:
74:e2:8d:cd:cd:35:e9:bc:9f:e6:06:98:4d:cb:a7:
41:1a:64:c0:f8:b9:a3:fd:09:ba:67:dd:c3:bf:fb:
6c:00:ae:9f:f1:e5:bc:e2:04:02:c6:3c:68:30:7a:
35:51:7d:4a:63:79:d3:01:77:65:09:da:df:3a:c4:
4d:f0:83:7f:ed:eb:56:cb:c3:e0:0e:13:7c:be:17:
f2:99:4d:f3:07:08:01:0a:a7:cf:b1:1a:6d:0f:d2:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EE:A9:EC:8D:8C:D7:14:5A:D0:D4:05:7F:30:40:90:F4:F0:30:8A
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:13:f5:2d:79:88:f6:0e:88:e0:a5:43:8d:45:e9:d9:c5:b6:
84:d7:47:b8:bb:f0:87:96:d7:f6:d4:ac:d7:1b:f5:df:4f:4e:
0e:cd:fb:20:1c:4c:41:f1:5c:67:ed:9b:43:5d:39:d5:ba:e9:
dc:d0:59:76:5e:53:c6:43:af:10:b6:b1:c7:37:cf:a1:03:8e:
58:54:d2:bb:48:e6:02:85:0c:76:38:b0:5d:c5:cc:e1:5c:34:
29:b5:8a:14:64:79:9b:b4:50:3f:24:cd:a5:fd:5f:1c:89:f0:
70:04:bd:aa:1d:bd:1d:0a:f9:77:3a:58:20:ee:72:5c:64:1c:
8c:7e:eb:12:37:95:de:fd:c6:19:8a:5b:25:cd:27:b7:49:49:
7b:74:34:77:c1:58:84:11:cc:07:a4:29:6b:74:6d:29:05:eb:
fe:d8:1f:40:7c:53:d4:0d:6e:4a:cc:93:f6:b5:97:d4:c1:c2:
b9:04:c8:e5:a5:41:89:93:b7:67:5d:76:48:5a:67:56:ac:c4:
e2:39:6d:96:b8:57:25:96:64:e9:c9:1e:ee:58:17:88:2f:98:
74:35:16:f0:83:a0:15:b4:e6:74:b1:19:6d:bd:7c:a2:ab:42:
2c:f9:29:fb:79:a7:cd:78:43:e3:3c:86:7d:c9:f4:cb:9e:eb:
38:50:4c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:23 2025 by rpki-client