Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
File: kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json)
Hash identifier: zQRJI1Kc88hYGTPCM3kFyNkZuqfceZ+Ya59z5cGk71Y=
Subject key identifier: 02:4D:BC:DB:96:16:72:50:25:3F:0B:CE:52:91:82:23:F6:71:23:29
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 0199FE473E058B7A3579A5676CA8EC058789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
Manifest number: 10E2
Signing time: Sun 19 Oct 2025 21:01:45 +0000
Manifest this update: Sun 19 Oct 2025 21:01:45 +0000
Manifest next update: Mon 20 Oct 2025 21:01:45 +0000
Files and hashes: 1: 1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa (hash: Dpj5AMuFNg0086YuEbRvx4oDSlmmrMJ7GujnIQgUfaA=)
2: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: DPbazW0hZCYhGsD3e0bAGqWelHu+ccB1hII5MMXLchw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:3e:05:8b:7a:35:79:a5:67:6c:a8:ec:05:87:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Oct 19 21:01:45 2025 GMT
Not After : Oct 20 21:01:45 2025 GMT
Subject: CN=024dbcdb96167250253f0bce52918223f6712329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:b0:e1:b8:25:13:fd:6e:c4:02:f0:47:07:
39:c9:c6:12:9e:e8:60:ea:cf:7c:20:3f:fd:9e:20:
e9:97:4b:21:5c:3f:38:14:24:a9:e6:bb:1b:85:5d:
74:31:9d:b4:97:aa:53:39:55:54:c5:b0:ee:c9:4e:
2b:b4:22:d8:9e:1a:f4:2d:73:ac:fd:06:d7:e3:73:
68:86:81:1b:2d:72:2c:4b:09:09:9d:56:95:55:58:
f3:ed:4c:2f:ea:e1:ac:c1:69:37:fd:6f:ee:4c:68:
b1:0f:32:81:d4:ab:4d:01:25:fa:f3:f7:37:4d:ee:
5d:0c:58:b6:1e:ad:79:25:b0:61:2d:ae:a8:9f:5b:
70:71:61:e2:92:27:b2:f7:cc:1f:c4:05:4e:85:fb:
93:44:5f:8e:3c:52:fc:e6:4f:f1:09:f1:08:05:6f:
14:f8:55:0a:35:55:9f:df:94:19:d1:fc:9d:0a:07:
b1:92:9b:fa:2c:f5:f4:4b:64:0a:c4:16:b6:8f:e7:
58:e3:07:35:e8:f1:06:ab:6e:76:8b:c4:fa:76:e7:
04:db:b8:84:a7:89:63:a6:f5:ed:cc:c0:15:b6:04:
c5:24:bf:a9:ac:e8:37:1b:bc:53:61:72:7d:5e:97:
62:a9:65:f9:98:43:42:bc:0d:62:55:8a:e4:d8:c3:
b1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4D:BC:DB:96:16:72:50:25:3F:0B:CE:52:91:82:23:F6:71:23:29
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:77:6b:fa:95:8b:70:3f:83:21:37:29:18:56:d7:d2:b8:3d:
e2:86:01:a6:a6:1a:28:78:ba:72:a0:0d:c7:57:38:bc:05:75:
6e:4a:59:e2:f7:c7:4f:9e:29:2d:47:3d:a9:c4:a0:e3:25:07:
74:de:83:56:0c:de:57:b9:a0:dd:30:a6:0c:68:a7:c4:82:19:
9f:65:fd:88:d1:7f:d7:1e:c9:d3:53:7e:83:d9:23:b8:31:73:
d1:c4:2b:53:02:18:d0:7d:f2:94:21:be:f3:e6:43:d0:d0:8a:
13:49:5d:69:71:6a:a9:00:cd:d0:b0:fe:8d:6b:64:8f:e4:a1:
9b:f4:29:22:37:fc:92:c0:34:8e:83:eb:0b:75:51:4a:05:53:
c1:ff:1b:b3:ac:28:c8:98:8d:bf:5e:a4:bb:d4:1f:64:cc:0a:
c3:68:d4:c1:e7:e6:50:5a:35:fa:4a:b1:b3:ff:58:ad:4f:74:
67:a2:19:d1:1d:ce:45:7a:f8:c9:a3:67:ad:cf:57:72:88:71:
4a:b7:75:3b:08:11:cf:91:f7:46:61:2e:30:70:59:26:cd:22:
c4:6f:8f:68:1c:f1:e0:53:ca:17:a7:c3:38:65:75:41:22:09:
f9:3f:7b:c9:d4:1f:a1:9b:cb:0a:f5:7f:c7:4f:ad:0e:5f:5f:
2b:b2:07:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Rz4Fi3o1eaVnbKjsBYeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjBjNmYwMWRmODVkNGEwMzNmMTI1NjUzZTEzMTdiNmY0
Mjg2NGUwHhcNMjUxMDE5MjEwMTQ1WhcNMjUxMDIwMjEwMTQ1WjAzMTEwLwYDVQQD
EygwMjRkYmNkYjk2MTY3MjUwMjUzZjBiY2U1MjkxODIyM2Y2NzEyMzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Puw4bglE/1uxALwRwc5ycYSnuhg
6s98ID/9niDpl0shXD84FCSp5rsbhV10MZ20l6pTOVVUxbDuyU4rtCLYnhr0LXOs
/QbX43NohoEbLXIsSwkJnVaVVVjz7Uwv6uGswWk3/W/uTGixDzKB1KtNASX68/c3
Te5dDFi2Hq15JbBhLa6on1twcWHikiey98wfxAVOhfuTRF+OPFL85k/xCfEIBW8U
+FUKNVWf35QZ0fydCgexkpv6LPX0S2QKxBa2j+dY4wc16PEGq252i8T6ducE27iE
p4ljpvXtzMAVtgTFJL+prOg3G7xTYXJ9XpdiqWX5mENCvA1iVYrk2MOxmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJNvNuWFnJQJT8LzlKRgiP2cSMpMB8GA1UdIwQY
MBaAFJBgxvAd+F1KAz8SVlPhMXtvQoZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82N2QwN2MtYTU2MS00NTdmLWEwNDQt
Y2UwYjhhNTFhNDUxLzEva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82N2QwN2MtYTU2MS00NTdmLWEwNDQtY2UwYjhhNTFhNDUx
LzEva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArXdr+pWL
cD+DITcpGFbX0rg94oYBpqYaKHi6cqANx1c4vAV1bkpZ4vfHT54pLUc9qcSg4yUH
dN6DVgzeV7mg3TCmDGinxIIZn2X9iNF/1x7J01N+g9kjuDFz0cQrUwIY0H3ylCG+
8+ZD0NCKE0ldaXFqqQDN0LD+jWtkj+Shm/QpIjf8ksA0joPrC3VRSgVTwf8bs6wo
yJiNv16ku9QfZMwKw2jUwefmUFo1+kqxs/9YrU90Z6IZ0R3ORXr4yaNnrc9Xcohx
Srd1OwgRz5H3RmEuMHBZJs0ixG+PaBzx4FPKF6fDOGV1QSIJ+T97ydQfoZvLCvV/
x0+tDl9fK7IHeQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:56 2025 by rpki-client