Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: YlFWC0lGcInyIz/sHDiA07a4ZZMoqg85nuIs3lY0SJc=
Subject key identifier: DE:25:B5:89:61:2B:AF:E4:9C:7D:01:28:DB:72:91:31:0B:32:91:26
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 0199FC58B737FD74A0D8F1E95A8453AFC11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 0C05
Signing time: Sun 19 Oct 2025 12:01:36 +0000
Manifest this update: Sun 19 Oct 2025 12:01:36 +0000
Manifest next update: Mon 20 Oct 2025 12:01:36 +0000
Files and hashes: 1: gLZLrbhpO6mWtu79cX_I9beQtfY.roa (hash: FKC1b4NqDGusVuG1PsHV/OorcR6VfmcWdy6GLsbONNI=)
2: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: +5DHk7Iuw0H3eHb137xM1cafp84v9fsIRIKkQJHPc1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b7:37:fd:74:a0:d8:f1:e9:5a:84:53:af:c1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Oct 19 12:01:36 2025 GMT
Not After : Oct 20 12:01:36 2025 GMT
Subject: CN=de25b589612bafe49c7d0128db7291310b329126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:90:5d:ba:63:65:e7:d2:aa:5a:ee:cb:d0:
bc:0e:e1:73:e9:1c:07:29:bf:7a:55:12:26:52:01:
5c:a0:45:9e:13:3e:96:36:51:20:93:72:69:d5:38:
58:80:f4:4e:ae:f0:a5:db:d0:7e:e3:aa:2a:ea:45:
bc:ea:ba:27:eb:c0:fd:f9:e6:40:9b:ae:5d:63:ee:
6a:ca:1c:c6:84:7d:39:b8:ba:07:18:01:c7:c7:53:
bc:6b:5f:ea:fb:6d:93:84:d1:2b:1e:74:0c:66:37:
1f:33:a2:dd:0e:79:a6:ca:af:04:f8:5b:cf:f0:8c:
b0:0a:d0:40:09:b7:5d:ad:35:c6:c0:bd:bb:71:93:
7f:25:d0:54:b8:a6:ea:83:b5:a5:35:60:da:58:f0:
39:df:b9:61:d6:d7:66:ca:26:40:96:cb:e0:a7:50:
04:27:9b:b3:9b:0a:fe:d0:41:02:da:78:7e:87:7b:
06:5d:94:7e:47:62:ff:07:bb:7a:2a:63:b3:d5:0e:
66:65:f6:ed:95:a2:62:4a:68:6b:e8:a3:61:81:74:
62:1d:fd:08:9e:23:37:f0:53:7f:32:55:c6:f0:16:
94:de:b7:aa:d7:96:0f:cc:9b:49:05:90:a0:c4:3b:
51:12:61:b5:9d:eb:5a:8c:02:67:9a:6e:91:cb:4c:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:25:B5:89:61:2B:AF:E4:9C:7D:01:28:DB:72:91:31:0B:32:91:26
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4d:2d:aa:90:1f:61:30:c7:3e:95:1e:85:a9:e8:63:ca:1e:
4a:ef:e6:84:2b:33:32:20:65:53:0d:81:5f:b0:dc:56:6a:e2:
73:39:99:0a:d6:52:7c:f2:eb:91:fd:f6:b4:39:83:a8:94:67:
35:e8:a4:26:f7:71:34:7e:9b:a8:f8:0a:aa:05:48:58:4a:c1:
75:a4:36:fd:ac:1d:3b:af:41:5b:8f:b5:d8:1e:95:6f:00:53:
d3:cd:b9:69:af:9c:61:91:b9:02:e8:d8:0c:16:78:97:7a:f9:
30:d2:b0:97:46:c6:8f:08:44:72:86:08:31:13:d3:aa:24:bc:
c6:b9:2c:7b:71:ce:50:a3:1d:c3:ce:10:20:b4:bd:3b:0c:5d:
58:c1:ea:7e:8d:bc:16:6c:10:fb:ff:25:bc:80:d7:c6:0a:eb:
b1:fb:c1:c5:af:00:e9:a3:d6:3b:27:d1:57:ff:c8:10:9c:92:
ff:ec:73:4b:4f:9e:2c:4e:34:07:40:6d:f5:e3:35:df:3e:ec:
69:37:eb:9a:e9:01:2a:81:7d:cb:b7:95:a9:13:a6:1d:b3:46:
3d:91:a6:9e:b6:7e:fe:6c:ff:30:e0:b5:ae:49:5f:cb:bb:e8:
97:5f:01:cc:38:7c:72:13:26:82:43:94:ff:63:e8:e4:ea:64:
43:99:04:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:56 2025 by rpki-client