Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier: jy8jKgUX1YX4HB1J8J/o80YYxBpeLPGoIOYx/ftR/Jo=
Subject key identifier: 7F:E3:1D:A8:D7:5D:3B:A6:E5:04:F7:ED:DC:A7:F1:8E:5A:AE:F4:AC
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 0197B7B34EAAD6A604A1BA9FC9F8D7213498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 18:01:11 +0000
Manifest this update: Sat 28 Jun 2025 18:01:11 +0000
Manifest next update: Sun 29 Jun 2025 18:01:11 +0000
Files and hashes: 1: 1YWYnMlB7bNjXZ-mR2gEvtLN3Bc.roa (hash: iv4yYaqxX9/BpncOJNi6FP4hgIeS1SbHKqiyIfxcth4=)
2: 4CDjeVRMh18gOoZFQB0kG87F3Ac.roa (hash: iS2zUZpr0OcJtSkJuXKr1ZglVEc7UdAcxQ+F6PuEqkI=)
3: CDG-7PWVVdm5Z7h-n4Ap6W6lHRg.roa (hash: 7yd+Jrhn2cJ3wJGfKqF6or4RqCKrwJRg13HNF9MQpQc=)
4: Kr-1FkX8isznu7LNjpkGbo9RXAQ.roa (hash: Nkup561eSF2a1lVSMy8ZbGKlbupLimNEQbbUAaz0DIc=)
5: Qxvf4dambUM4wGGmpG65pgeoc3M.roa (hash: dkmpKTZscpBI0IsTqLbisMD9yO7kEmJGfj1/YKPtkuc=)
6: RmzxPNQi61FBVP1fRDu5ucEzyaI.roa (hash: hjLdRcYfGc3ePa8Zdnij2feYL0ptV5CZuH2vbOXAvTw=)
7: SkASK4zN7bPehdagCz89JkwUfsA.roa (hash: d1RW1sYrndntlpLL9/PiKBPVX2QhXX5rJ7D+z0FCw9w=)
8: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: hDeJ8K0ppW8QnnY35TLvcO+wVUeqBzHbja+13qyZBBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4e:aa:d6:a6:04:a1:ba:9f:c9:f8:d7:21:34:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jun 28 18:01:11 2025 GMT
Not After : Jun 29 18:01:11 2025 GMT
Subject: CN=7fe31da8d75d3ba6e504f7eddca7f18e5aaef4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:1b:67:18:47:00:f1:6c:e1:9d:bf:1a:9a:
78:13:28:43:0d:bb:99:63:f2:e9:3b:09:f9:de:af:
52:d3:f6:ba:43:d7:72:07:22:41:3c:2e:3f:0f:86:
c5:5b:04:ca:b8:a2:7a:7b:57:3d:b2:0f:bc:60:af:
b6:19:7e:1a:7f:bf:36:65:73:02:01:d1:b2:3c:92:
d7:bc:a4:c9:39:f6:50:8e:d8:a2:8d:5f:74:57:5a:
d5:3a:73:a0:84:e9:13:12:c0:c0:7d:80:ee:67:bf:
b7:25:db:08:31:20:48:de:37:29:d0:a4:ea:0f:2e:
21:3f:43:01:f2:f5:bf:a0:19:dd:2c:09:ab:4a:26:
6e:5f:c9:69:b1:47:ee:cc:38:7c:97:c8:4c:91:51:
0f:80:f0:ff:4e:71:9a:8c:52:1d:16:f0:54:ee:68:
c2:d6:b7:8d:78:50:fa:a9:19:6b:66:b7:6e:41:1f:
25:44:2e:64:c0:2b:48:4a:2a:3a:de:89:d9:dc:fb:
68:d4:be:74:d1:41:fd:80:b3:78:a5:ca:25:68:18:
4b:1c:f4:ab:9f:d9:cb:fb:40:96:d4:4f:02:5b:04:
aa:86:ef:3b:e2:22:ca:9e:a5:e7:7b:21:24:70:bb:
fd:87:f6:7d:b2:0f:ed:f1:6d:e7:98:ce:be:02:c1:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E3:1D:A8:D7:5D:3B:A6:E5:04:F7:ED:DC:A7:F1:8E:5A:AE:F4:AC
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4b:fb:1b:a8:2e:21:b6:e6:50:df:25:70:4c:1a:c3:9d:23:
32:15:1c:69:b4:6a:07:33:9b:8e:42:af:53:1e:b5:33:15:2e:
d5:2e:80:44:45:40:04:30:a5:1d:6d:77:ea:76:b2:93:d8:46:
88:ab:8b:d2:9d:49:b0:37:ef:58:2b:b3:e7:3b:7e:4e:86:7c:
c6:29:c9:11:76:2e:6e:11:23:23:77:2c:35:62:2f:b0:d1:f8:
ae:8d:57:cf:6b:69:1a:22:06:83:17:95:bb:ee:e7:99:19:2a:
5c:3d:25:23:7b:2b:0e:e7:0c:00:20:0b:77:8c:fd:e2:47:dc:
c5:54:d6:e6:e5:40:a3:bd:92:6f:fe:29:ee:d9:8e:f8:9a:a4:
d3:2d:e9:06:d2:1c:96:56:26:29:da:58:34:68:bb:ca:00:a8:
8c:9e:e8:7e:f3:98:5e:0c:9d:91:c6:b0:87:a9:76:d2:16:62:
4c:8b:ce:d1:35:66:4e:78:75:2b:52:d8:68:0a:be:19:ce:fa:
34:b9:94:35:74:c4:7f:fc:7b:08:b7:d0:be:b9:d4:d9:5a:f1:
62:f8:44:76:67:c9:8c:fa:b5:d0:dd:bf:9d:53:f9:bf:2d:6f:
5b:b0:0f:fb:1f:d3:48:e0:92:d2:6d:ed:66:6d:cb:d0:b3:e8:
77:64:88:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:01 2025 by rpki-client