Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json)
Hash identifier: FdIb1RuoxfNHrpu1UzrFRl++r5oURF8javBl6jgW/K4=
Subject key identifier: 0F:8E:20:5C:76:BA:C2:B0:E5:96:21:43:3F:FB:F0:D7:F6:A1:6D:6E
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 0199FC215486AD692294CF81860437236BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
Manifest number: 13DA
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: kGuaXeFXRy7zk4r_fksHu1gERzY.roa (hash: eMXSEjP4L4hwARJ1cK2WpXviS5zDUtCbinSWtpWSvYQ=)
2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: n4ENdwrj7WUCyU5IzuoWOaBC71TOcWvgCPF1k/qY+PU=)
3: x_9yjr6rLqSNbiZnjmWq-mNvOgg.roa (hash: mAB0u4tnNy3pI1HtMQoSvS+geYvks2ItYBoen25rRrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:54:86:ad:69:22:94:cf:81:86:04:37:23:6b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=0f8e205c76bac2b0e59621433ffbf0d7f6a16d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c0:53:3f:a9:2d:be:b7:22:c8:99:b7:f7:f9:
ca:55:63:ab:d3:99:64:19:55:ae:e8:e6:26:3b:28:
28:27:30:61:a3:6c:55:f2:99:01:15:d3:6b:e0:ca:
e7:ed:f9:8c:a4:2b:1c:fd:6a:73:b7:b6:71:c1:f5:
19:01:39:38:af:e5:2d:39:ef:d5:44:79:a1:01:e9:
94:0b:19:13:3f:d5:ff:ae:01:61:c1:fa:1c:55:a3:
73:27:b1:b1:f7:3a:11:2e:83:2c:90:dc:14:f4:ea:
bd:fc:3e:4b:0f:60:aa:57:0e:29:7b:f6:58:23:dc:
81:2b:78:bc:b3:5d:77:2d:17:79:82:04:7c:b4:b8:
0d:c1:a3:9d:33:8e:4a:41:66:63:93:5d:20:f4:c8:
11:e4:36:dd:dd:6c:48:d4:ae:39:a3:dd:ee:42:d7:
ad:c5:fd:55:90:2f:d0:d7:81:a5:b7:3a:55:e9:b2:
ee:77:4e:df:df:1f:57:9d:04:54:82:67:2d:82:ff:
f3:c2:8a:c8:0c:d4:1e:18:1e:cc:f0:02:e4:d1:8c:
20:5a:b6:d8:56:3e:bf:90:e4:8d:27:6a:b2:3b:2b:
cb:9f:bd:79:47:15:01:70:74:b3:c1:72:e4:6c:3d:
52:54:cb:8d:de:91:69:6d:21:6e:d4:3c:e4:66:d2:
8c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8E:20:5C:76:BA:C2:B0:E5:96:21:43:3F:FB:F0:D7:F6:A1:6D:6E
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:31:1c:62:7d:73:6c:98:98:8c:26:4c:be:24:ba:41:57:d1:
91:a7:07:96:32:0b:6c:4d:59:6e:9d:8e:09:b9:6c:45:1b:d7:
e1:81:15:4c:9c:23:91:aa:f2:35:90:2a:32:e3:be:8f:72:f6:
2b:7d:6d:73:cb:5d:0b:3a:49:2a:11:b1:a3:1d:70:6d:53:c7:
f6:1b:54:a0:58:9b:1b:25:8e:71:f8:96:f4:d9:55:51:67:f9:
3e:bc:18:12:a5:6c:34:46:a0:f2:0c:e8:0a:ac:a4:65:dd:16:
51:21:5e:53:cd:e9:87:54:0c:8a:ff:82:fb:27:92:e4:a0:1b:
6a:b0:69:6f:fe:2e:09:b9:58:a4:32:f6:b8:58:e3:2d:c8:94:
4e:d6:92:db:cf:17:ad:a7:98:bb:e5:c3:55:86:a2:c8:37:aa:
4d:a3:5d:49:b9:db:79:87:75:a8:cb:42:5f:ad:5a:96:99:95:
99:f2:74:d6:d0:0c:62:dc:81:62:6b:3c:49:98:77:51:e0:b1:
b7:2a:4b:f2:b9:46:c9:12:45:c9:d5:69:b0:4b:2c:c4:da:c0:
e5:2d:92:ce:11:92:6c:09:59:a5:c0:61:3b:20:f5:02:bb:e8:
76:74:a2:ce:95:c6:32:06:15:93:3f:11:8b:7e:a7:32:91:bb:
da:0e:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:47 2025 by rpki-client