
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
File: kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json)
Hash identifier: hxdnGZqgPMc0XKSF4mPxoK1cj1jV9MWDm+3biM9HNsg=
Subject key identifier: 93:24:93:9E:D9:B3:F9:37:75:99:D2:7A:D8:F7:8F:F3:C4:DE:1B:29
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 0198D6CDA69DEA03BE225B12EE58FFC512BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
Manifest number: 1049
Signing time: Sat 23 Aug 2025 12:00:58 +0000
Manifest this update: Sat 23 Aug 2025 12:00:58 +0000
Manifest next update: Sun 24 Aug 2025 12:00:58 +0000
Files and hashes: 1: 1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa (hash: Dpj5AMuFNg0086YuEbRvx4oDSlmmrMJ7GujnIQgUfaA=)
2: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: KKxaSIvdMlbsFFcaJOu4E9YO/XSn0m9qa3UTwiCir6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a6:9d:ea:03:be:22:5b:12:ee:58:ff:c5:12:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Aug 23 12:00:58 2025 GMT
Not After : Aug 24 12:00:58 2025 GMT
Subject: CN=9324939ed9b3f9377599d27ad8f78ff3c4de1b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:5f:39:c6:98:5d:ea:23:e7:3e:d0:80:5f:
15:1f:ab:95:47:3e:32:4a:01:c7:a2:7c:72:d5:d7:
74:a9:f8:6b:00:ec:4f:26:46:d0:fe:57:7f:aa:c4:
bb:ec:3e:4a:fe:af:dc:ce:bc:61:8c:36:ed:ea:5d:
eb:c1:46:0a:8e:6a:53:a1:75:2b:8d:d0:0a:f4:4a:
8e:ac:70:4c:7b:32:ff:78:bd:98:c1:da:c4:af:77:
5a:51:7a:5c:4c:29:10:45:10:16:25:04:81:01:53:
33:71:1e:41:f8:99:b8:cc:ec:cf:cb:fc:67:66:6a:
0a:5d:fa:94:9f:b0:91:e4:6e:15:fc:69:ef:f0:d2:
70:eb:d5:69:84:c3:29:a5:93:c6:93:d7:0d:fc:29:
18:fd:74:6c:b8:d1:31:06:35:54:68:1b:21:ff:cd:
84:c1:8c:80:6c:63:90:aa:05:80:09:be:79:07:64:
9e:9c:1c:c6:92:bd:6d:2d:ac:e4:91:26:3c:42:f2:
7e:cf:bd:74:b2:36:71:a2:b2:63:bb:1f:b0:88:e1:
cd:4d:f4:c9:3d:0d:26:f7:9f:9a:18:a0:b5:bb:70:
f8:83:ca:8c:4c:ef:cd:17:ba:26:fc:ff:5f:11:a0:
b2:97:be:39:0d:01:f0:ec:ed:e8:a2:80:51:72:a4:
7e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:24:93:9E:D9:B3:F9:37:75:99:D2:7A:D8:F7:8F:F3:C4:DE:1B:29
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:cb:5b:bb:71:bd:2c:71:6f:b2:21:16:ee:5d:7a:70:35:98:
a3:09:21:2a:35:09:5f:9d:da:a7:3f:5c:a8:83:12:c7:e6:77:
07:04:29:67:5b:a7:3a:8c:f7:7b:95:ac:fb:df:e3:11:cf:fb:
3a:42:76:01:16:b1:23:ef:57:66:c9:96:6b:d8:b4:f2:83:d0:
fc:23:ee:b7:c5:51:73:8a:24:3e:c0:e6:71:b7:5d:b7:c7:a5:
8d:6a:97:5b:dd:73:58:c1:c8:26:0c:2e:c6:d0:a0:21:1c:6c:
53:44:ed:6e:27:f1:4f:3c:8f:3f:aa:9a:f7:a3:74:35:c9:a1:
75:4e:3b:53:35:5c:8f:42:ae:ae:58:b3:88:40:a0:27:d9:6b:
74:15:0c:b0:35:2f:52:69:7f:2d:f5:47:b7:94:2f:19:24:f4:
07:54:90:0d:8b:38:65:65:13:b3:77:06:4d:59:50:8b:15:ff:
f4:84:d8:69:ef:86:6e:0f:60:88:6f:57:c6:92:7d:2a:f6:c4:
40:04:15:b0:a0:dd:c5:f9:51:0a:8d:18:42:09:9b:e2:63:5e:
0a:03:42:1e:47:bb:34:96:89:0d:40:a2:79:d9:d9:eb:e1:d2:
ba:5d:28:a2:fe:4d:7e:f3:c7:db:05:03:d9:15:b0:59:51:f0:
9b:5f:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:21:12 2025 by rpki-client