Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
File: kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json)
Hash identifier: aIfWiqT7nx118GwPt5qWNQIvaoqgOglj24tIJbWYeQk=
Subject key identifier: 9D:4E:51:0E:7C:31:37:FD:C2:AD:76:3B:9F:E2:10:D9:DC:C6:B9:4B
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 0197B70F41A8348BAA0A48B8CF319A686B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
Manifest number: 0FB4
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: 1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa (hash: Dpj5AMuFNg0086YuEbRvx4oDSlmmrMJ7GujnIQgUfaA=)
2: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: zah3/6jOX77sQte+TNCLD98eh5jOR5BCe6F6Hb9as9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:41:a8:34:8b:aa:0a:48:b8:cf:31:9a:68:6b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=9d4e510e7c3137fdc2ad763b9fe210d9dcc6b94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:50:b9:e9:58:f8:16:cc:10:77:1c:32:3c:
d1:8d:c8:9c:be:1e:be:82:3f:8e:97:f1:12:06:d2:
59:fd:d8:93:d3:d1:35:2a:5c:7d:34:19:66:ef:31:
d4:e8:7a:55:59:6f:83:69:73:45:6c:b1:c8:9e:50:
21:14:75:b7:18:e3:d7:6a:8f:17:7a:5d:ec:ab:83:
01:90:6d:a2:23:7d:32:c3:b8:22:22:99:32:52:57:
25:a0:51:30:9c:60:de:b4:fb:84:cd:83:b5:05:cc:
b8:01:35:ae:65:e9:15:d8:62:1f:85:5b:7a:fd:43:
3b:7b:e1:ed:bd:99:43:2a:20:6e:26:56:da:96:6d:
24:89:b4:dc:c7:d0:df:c1:a1:8b:f4:17:5c:a6:6f:
98:65:6b:8f:b0:7d:16:08:c4:3b:b3:ba:ea:2d:3a:
27:b5:59:d7:33:12:9f:19:9a:24:b9:ee:ec:72:55:
a4:66:a4:93:2b:07:7e:cd:26:a8:77:71:e1:1f:0a:
18:d7:a6:52:78:9f:12:b9:00:9c:cf:92:da:5a:5e:
d4:39:cc:e1:0b:3b:8f:92:40:b5:2f:61:33:c8:65:
4f:00:b2:4a:5b:1d:a4:27:bb:ab:9a:8b:f2:0b:2b:
9e:01:e1:36:d8:28:2d:eb:c3:ff:86:4f:07:7b:2e:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4E:51:0E:7C:31:37:FD:C2:AD:76:3B:9F:E2:10:D9:DC:C6:B9:4B
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d1:25:da:d5:e9:1e:f1:a0:33:58:fc:a7:50:15:43:af:84:
a9:6f:d7:4b:07:3d:d7:74:41:44:b9:4d:4e:9c:9b:4c:23:a0:
e5:c0:67:35:a9:65:86:9c:96:08:66:58:fb:41:e1:01:43:fb:
0f:3f:1d:4d:46:1c:2a:7e:c9:99:41:59:94:2d:ac:0c:89:4c:
78:cb:11:2d:7c:3d:7c:f9:3a:54:2e:19:db:4b:2e:5e:54:3f:
0f:f5:dd:1e:d0:f5:2f:1c:04:82:07:f1:c2:34:3f:be:d4:a1:
f9:81:58:d0:ad:a1:9b:82:38:32:1c:30:de:8d:b9:03:3c:b1:
86:ad:11:22:96:d2:1c:ea:dd:a3:f3:8b:b7:55:92:eb:07:eb:
e9:14:ec:b2:f4:ff:9a:66:2c:a9:eb:a7:71:27:9e:1f:84:e5:
f7:09:a4:40:27:a1:78:01:08:48:33:dc:f8:03:59:43:06:bc:
f7:ce:04:d8:74:25:08:bd:23:fb:e6:1f:07:ae:46:99:bb:af:
77:2f:8d:1b:64:a6:8f:b3:3b:67:14:64:72:a6:59:f2:24:cb:
56:a1:72:a6:8e:42:0d:f4:74:01:fd:a1:98:c1:5c:45:a8:09:
a6:0c:ea:55:e1:ad:e5:80:19:57:da:35:1e:9d:b6:f2:23:35:
e9:da:74:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:24 2025 by rpki-client