Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
File: kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft (raw, json)
Hash identifier: 3iQcVMRhIHTmMfi7a8aF7Iajb3QYP60gW6SejeoPX3Y=
Subject key identifier: 55:C1:55:28:CB:F9:D8:DB:7D:D1:9E:76:79:D0:A9:8B:19:2B:A4:B2
Authority key identifier: 92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
Certificate issuer: /CN=9202036a43dad06b6c2cc64bde767870676f87b3
Certificate serial: 0199FE4713D5D3A73D899EC71403802BDB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
Manifest number: 0F80
Signing time: Sun 19 Oct 2025 21:01:34 +0000
Manifest this update: Sun 19 Oct 2025 21:01:34 +0000
Manifest next update: Mon 20 Oct 2025 21:01:34 +0000
Files and hashes: 1: 9Bw4s7L1PZyJ0cmK8dHggvZkyc8.roa (hash: k8G5zSf+pp8Di/1i1Rk8bBBXkqYoG95ba1/+ZDXAe1E=)
2: kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl (hash: eyHiJeKbpp0/NXIsAfVlTkRk64XAdem440oPlnC5M9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:13:d5:d3:a7:3d:89:9e:c7:14:03:80:2b:db:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9202036a43dad06b6c2cc64bde767870676f87b3
Validity
Not Before: Oct 19 21:01:34 2025 GMT
Not After : Oct 20 21:01:34 2025 GMT
Subject: CN=55c15528cbf9d8db7dd19e7679d0a98b192ba4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:7e:c9:18:9f:d4:62:32:bf:ba:a4:48:c6:
e7:01:fd:3c:30:65:27:c0:5b:c6:72:97:1f:b8:da:
e0:cb:b3:a1:6f:4b:e7:f9:01:ae:0a:dc:a3:da:62:
da:d4:b5:77:a2:d8:ac:2b:34:b9:79:71:7b:53:cc:
c2:92:70:8d:6f:50:5d:1d:31:b5:3d:95:32:ae:8e:
89:53:f5:e8:64:66:92:d6:4d:54:56:39:db:07:2b:
28:e6:83:d9:51:fe:4c:1e:2a:70:48:8a:c3:a2:ff:
ac:8f:1d:d4:32:84:13:d4:ae:aa:a4:9b:76:df:b5:
28:79:42:f8:ed:75:dc:a9:ec:1e:af:01:2a:d4:97:
e7:63:05:8f:84:dd:57:87:c0:8e:21:52:26:bb:51:
88:8f:b0:57:75:8e:25:1b:62:50:e1:9f:fa:28:a6:
15:a2:58:b7:ff:ed:ae:81:34:84:48:b2:49:10:b8:
f6:42:85:da:1e:4f:d2:d3:10:2d:27:17:bd:ab:e2:
0a:81:21:5a:03:bd:16:37:58:cc:f7:ae:3b:86:13:
60:eb:31:17:17:ce:a0:5d:8d:f0:a6:31:2e:2b:c3:
b6:68:96:ad:18:94:16:4d:20:c5:f4:99:24:5b:00:
01:be:d2:c3:13:83:4d:17:60:d8:71:06:3e:5c:7c:
05:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C1:55:28:CB:F9:D8:DB:7D:D1:9E:76:79:D0:A9:8B:19:2B:A4:B2
X509v3 Authority Key Identifier:
keyid:92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b8:d6:2e:93:d2:01:35:45:56:a2:3f:d8:30:84:8a:da:70:
f7:dc:cf:d8:3e:c1:ed:ef:8f:3f:07:62:38:eb:3a:2a:f6:a6:
56:bb:c0:a5:44:3c:7f:0a:1f:bb:fc:b2:c3:3e:bb:22:a6:50:
3f:d1:27:2a:cc:6f:10:a5:07:92:33:0d:24:d3:b5:66:bd:d6:
7f:01:9c:ff:af:d0:02:8a:41:fa:f7:8c:89:05:77:a2:ce:4a:
ed:07:35:40:1c:2e:8e:c7:c2:fd:38:96:ac:45:67:95:b6:22:
46:75:10:1e:35:4b:11:1b:ec:68:db:86:ff:66:17:86:8f:d3:
07:bc:2c:77:60:f7:f2:26:81:9b:74:bf:b9:2e:6c:48:18:4a:
28:80:62:ae:16:64:32:1a:11:7a:eb:fa:47:b9:5f:be:c9:3d:
32:f2:f2:33:6a:f6:d6:a9:e9:07:ff:79:13:35:49:7d:c2:b4:
e4:63:41:4a:56:7c:59:b6:e9:8e:e0:65:e4:ae:eb:c4:04:90:
1a:e1:4f:19:9e:f9:aa:44:b7:39:c2:33:0b:dc:ab:9e:71:39:
2e:6d:61:d0:23:82:13:d1:26:bc:c8:7a:c5:5c:4c:03:83:6c:
d0:06:69:11:c7:8b:31:a8:54:10:55:94:13:41:d2:87:43:e1:
4b:d2:0b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:06 2025 by rpki-client