Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
File: kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json)
Hash identifier: m0ItGVh1nE/zsFkaD7EcXE57W8m1nex1LVu9oVZtGAg=
Subject key identifier: F9:DE:D3:3B:56:47:6B:C9:80:73:DA:92:9F:8A:7B:A6:E6:15:C5:86
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 0198537B5FDD8DD54FB6F67D1A8E9C069E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
Manifest number: 1005
Signing time: Tue 29 Jul 2025 00:00:50 +0000
Manifest this update: Tue 29 Jul 2025 00:00:50 +0000
Manifest next update: Wed 30 Jul 2025 00:00:50 +0000
Files and hashes: 1: 1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa (hash: Dpj5AMuFNg0086YuEbRvx4oDSlmmrMJ7GujnIQgUfaA=)
2: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: C5T7iGlc3R9ik3L3l5NQ3M2SSGtLFkVJvfxQAs8TayQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:5f:dd:8d:d5:4f:b6:f6:7d:1a:8e:9c:06:9e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Jul 29 00:00:50 2025 GMT
Not After : Jul 30 00:00:50 2025 GMT
Subject: CN=f9ded33b56476bc98073da929f8a7ba6e615c586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:02:97:43:b0:dc:7e:80:5a:0e:b4:cf:fc:
d7:69:d9:8d:27:2e:b8:6a:3b:4f:ad:3c:75:f8:67:
43:28:cd:ec:70:70:88:21:3d:43:cb:98:34:79:1f:
b3:41:d4:75:ea:31:0f:27:7b:64:09:59:75:5a:83:
87:61:18:41:08:fa:25:64:04:5e:12:5e:f4:f3:2f:
65:89:1d:27:7f:57:a8:36:eb:7d:49:c3:59:86:41:
f4:56:1b:08:11:7b:1d:c0:e6:78:67:fd:b8:61:d9:
88:85:40:5a:49:dd:1c:e4:bd:2e:dd:71:27:07:e7:
1e:f3:58:f7:30:cd:2b:d8:c9:e1:96:bd:04:3a:5c:
a8:1a:08:c4:17:e3:41:8b:3a:d0:a0:05:d4:3c:08:
25:ed:e2:c4:a6:08:64:fe:c1:cb:59:81:47:79:62:
d2:ad:82:5b:2f:de:d5:ad:d8:da:f5:57:fa:e6:8a:
75:60:a5:2d:a9:fd:22:de:71:16:f0:99:ae:c4:b6:
c1:a9:da:40:74:b7:36:7a:8a:c2:12:24:e8:fc:0d:
a1:20:61:d1:0e:7d:4d:6d:ee:ac:ed:13:15:85:b7:
4b:f5:a3:31:44:03:d4:82:5b:c3:29:55:02:cf:71:
c0:d1:6f:e8:39:da:e9:36:73:4d:65:75:a6:66:b3:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DE:D3:3B:56:47:6B:C9:80:73:DA:92:9F:8A:7B:A6:E6:15:C5:86
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:62:8b:05:8f:f6:e0:c5:2b:7d:58:d1:43:3d:59:9f:5d:a6:
91:b1:91:6b:d4:ba:ae:d8:34:4c:3c:d9:0d:a9:6c:f5:da:1c:
54:77:58:ba:76:a9:3e:57:49:7d:1a:00:a7:8b:1c:21:be:9b:
bf:63:11:f6:85:0f:b8:59:88:ef:4d:48:0f:f8:31:b9:6f:e1:
f9:18:26:d0:5b:82:65:6b:26:6b:b5:04:02:75:55:c3:b4:25:
e5:16:56:87:f3:fb:b5:e5:22:d2:1e:92:01:9c:3e:e1:46:b0:
a7:fd:32:fe:0b:78:47:b8:3c:83:d7:61:a8:1d:8f:db:91:76:
48:77:48:a2:6b:05:52:6b:52:a5:ca:c3:d3:84:4f:fb:8f:9f:
c0:62:1c:8a:d3:ba:93:45:97:85:b0:e4:00:51:c7:3d:5b:bc:
72:bf:0d:92:8d:a4:8e:4f:44:5c:df:80:b8:b0:5e:d9:19:9d:
54:e1:18:4a:5e:be:f7:e3:ae:b4:9a:f1:40:a9:6a:7a:aa:40:
a9:a1:f1:2e:bd:70:a0:eb:4d:da:39:f7:d5:ea:61:fd:61:69:
5a:02:38:17:80:55:db:ae:a4:23:39:0a:a5:de:3e:b6:df:13:
d4:10:80:ff:0f:63:08:74:5b:92:2c:36:36:22:22:08:cb:cb:
db:87:51:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTe1/djdVPtvZ9Go6cBp6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjBjNmYwMWRmODVkNGEwMzNmMTI1NjUzZTEzMTdiNmY0
Mjg2NGUwHhcNMjUwNzI5MDAwMDUwWhcNMjUwNzMwMDAwMDUwWjAzMTEwLwYDVQQD
EyhmOWRlZDMzYjU2NDc2YmM5ODA3M2RhOTI5ZjhhN2JhNmU2MTVjNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT4Cl0Ow3H6AWg60z/zXadmNJy64
ajtPrTx1+GdDKM3scHCIIT1Dy5g0eR+zQdR16jEPJ3tkCVl1WoOHYRhBCPolZARe
El708y9liR0nf1eoNut9ScNZhkH0VhsIEXsdwOZ4Z/24YdmIhUBaSd0c5L0u3XEn
B+ce81j3MM0r2Mnhlr0EOlyoGgjEF+NBizrQoAXUPAgl7eLEpghk/sHLWYFHeWLS
rYJbL97Vrdja9Vf65op1YKUtqf0i3nEW8JmuxLbBqdpAdLc2eorCEiTo/A2hIGHR
Dn1Nbe6s7RMVhbdL9aMxRAPUglvDKVUCz3HA0W/oOdrpNnNNZXWmZrMtJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPne0ztWR2vJgHPakp+Ke6bmFcWGMB8GA1UdIwQY
MBaAFJBgxvAd+F1KAz8SVlPhMXtvQoZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82N2QwN2MtYTU2MS00NTdmLWEwNDQt
Y2UwYjhhNTFhNDUxLzEva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82N2QwN2MtYTU2MS00NTdmLWEwNDQtY2UwYjhhNTFhNDUx
LzEva0dERzhCMzRYVW9EUHhKV1UtRXhlMjlDaGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2KLBY/2
4MUrfVjRQz1Zn12mkbGRa9S6rtg0TDzZDals9docVHdYunapPldJfRoAp4scIb6b
v2MR9oUPuFmI701ID/gxuW/h+Rgm0FuCZWsma7UEAnVVw7Ql5RZWh/P7teUi0h6S
AZw+4Uawp/0y/gt4R7g8g9dhqB2P25F2SHdIomsFUmtSpcrD04RP+4+fwGIcitO6
k0WXhbDkAFHHPVu8cr8Nko2kjk9EXN+AuLBe2RmdVOEYSl6+9+OutJrxQKlqeqpA
qaHxLr1woOtN2jn31eph/WFpWgI4F4BV266kIzkKpd4+tt8T1BCA/w9jCHRbkiw2
NiIiCMvL24dR7g==
-----END CERTIFICATE-----
Generated at Tue Jul 29 06:58:11 2025 by rpki-client