Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
File: kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft (raw, json)
Hash identifier: Uqx3C+PfbJ1q7WN8P1H7yldOVfVSVT3ggfdWogAcX1Q=
Subject key identifier: BB:3D:84:E9:C7:37:B0:42:88:6F:71:13:63:F3:29:9D:29:3F:DD:BB
Authority key identifier: 92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
Certificate issuer: /CN=9202036a43dad06b6c2cc64bde767870676f87b3
Certificate serial: 019849D3CAE681A70F8DCDBD43C0994D3F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
Manifest number: 0E9E
Signing time: Sun 27 Jul 2025 03:01:13 +0000
Manifest this update: Sun 27 Jul 2025 03:01:13 +0000
Manifest next update: Mon 28 Jul 2025 03:01:13 +0000
Files and hashes: 1: 9Bw4s7L1PZyJ0cmK8dHggvZkyc8.roa (hash: k8G5zSf+pp8Di/1i1Rk8bBBXkqYoG95ba1/+ZDXAe1E=)
2: kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl (hash: 0s4FvbHt9fd14N+nEKBLM3REmSeXgp2SxNGNz7LyFic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:ca:e6:81:a7:0f:8d:cd:bd:43:c0:99:4d:3f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9202036a43dad06b6c2cc64bde767870676f87b3
Validity
Not Before: Jul 27 03:01:13 2025 GMT
Not After : Jul 28 03:01:13 2025 GMT
Subject: CN=bb3d84e9c737b042886f711363f3299d293fddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:08:a3:81:de:f9:e2:fd:e3:5f:85:db:08:
d8:b4:96:12:72:b8:67:05:ae:ef:0d:5a:b2:79:d4:
ae:92:e2:9e:82:6b:77:d8:81:f7:28:4f:82:3a:1d:
25:03:5b:ee:9f:d4:52:cc:c5:86:44:43:fd:0d:46:
32:5a:17:70:8d:57:17:85:fa:e9:b3:f5:27:af:70:
88:04:84:90:56:93:47:06:5e:6e:f5:a1:02:5d:4a:
16:3e:65:5d:5d:1e:f4:14:f1:4a:a0:0f:bd:94:a2:
92:41:52:ab:82:51:07:5e:b0:3a:29:ca:00:24:b3:
bd:0a:31:39:fb:ee:42:9b:f0:39:f8:96:82:ae:9e:
d8:86:e9:1c:6d:39:42:73:a0:32:b8:ea:6f:19:a3:
e4:86:dc:94:62:48:14:75:3f:d8:9f:9e:fb:4d:5e:
26:67:f8:00:c7:84:03:26:e9:78:f1:9d:59:fc:3a:
9e:8c:8c:8d:3d:e8:d2:b2:33:1a:c5:21:1a:7c:59:
f2:93:af:fd:36:18:9b:9b:95:aa:72:95:bc:10:94:
fc:66:b5:eb:ec:17:42:ab:cd:24:c5:f0:2f:49:7d:
b3:a5:28:cd:0d:53:9f:d7:b8:4a:1e:2b:fa:d1:07:
bd:db:b4:38:cf:c0:dc:60:24:f5:95:19:37:28:3a:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3D:84:E9:C7:37:B0:42:88:6F:71:13:63:F3:29:9D:29:3F:DD:BB
X509v3 Authority Key Identifier:
keyid:92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:da:92:aa:a2:f5:84:72:dd:11:3c:71:4b:ae:dc:36:69:61:
bb:64:1a:9c:56:ce:20:5d:c2:7b:5f:79:e2:05:f4:65:49:87:
0e:e4:fb:b5:bb:e1:f5:e0:ce:03:43:90:f9:e9:25:a3:34:2c:
94:05:ac:ca:4f:f8:2c:b7:c8:f1:8c:50:75:70:45:cf:bd:2e:
b2:84:bb:6a:45:7f:ee:1d:38:7d:f9:91:c7:9c:98:db:4e:ab:
89:11:26:6a:19:e2:ac:cf:73:3e:3a:6e:a3:c3:23:40:82:5a:
cd:9e:a4:5e:3a:33:c7:ee:e8:63:d4:db:68:e6:fc:ab:e6:2c:
c5:51:de:80:58:50:ae:a0:59:2c:49:22:8e:4b:c0:b5:ea:d0:
e0:98:ef:6d:f1:29:ac:1d:e3:c6:a8:4d:ca:25:fb:57:bc:1c:
86:e7:71:61:68:ec:f6:98:38:08:77:d3:5b:6c:74:e9:34:38:
f9:85:c4:7c:4c:a4:65:9d:eb:cd:24:e9:10:fa:d1:96:b8:f9:
b8:b7:b4:dc:22:82:43:5d:1b:ca:6d:25:3b:df:c4:b8:8c:61:
be:21:07:ad:7f:15:d3:bb:45:a0:91:a7:64:f7:27:aa:a2:23:
23:c0:85:4f:bb:26:96:83:99:00:7e:1e:d6:c0:5c:34:b6:e7:
f6:6a:81:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ08rmgacPjc29Q8CZTT+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMDIwMzZhNDNkYWQwNmI2YzJjYzY0YmRlNzY3ODcwNjc2
Zjg3YjMwHhcNMjUwNzI3MDMwMTEzWhcNMjUwNzI4MDMwMTEzWjAzMTEwLwYDVQQD
EyhiYjNkODRlOWM3MzdiMDQyODg2ZjcxMTM2M2YzMjk5ZDI5M2ZkZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBsIo4He+eL941+F2wjYtJYScrhn
Ba7vDVqyedSukuKegmt32IH3KE+COh0lA1vun9RSzMWGREP9DUYyWhdwjVcXhfrp
s/Unr3CIBISQVpNHBl5u9aECXUoWPmVdXR70FPFKoA+9lKKSQVKrglEHXrA6KcoA
JLO9CjE5++5Cm/A5+JaCrp7YhukcbTlCc6AyuOpvGaPkhtyUYkgUdT/Yn577TV4m
Z/gAx4QDJul48Z1Z/DqejIyNPejSsjMaxSEafFnyk6/9Nhibm5WqcpW8EJT8ZrXr
7BdCq80kxfAvSX2zpSjNDVOf17hKHiv60Qe927Q4z8DcYCT1lRk3KDq5zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLs9hOnHN7BCiG9xE2PzKZ0pP927MB8GA1UdIwQY
MBaAFJICA2pD2tBrbCzGS952eHBnb4ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2dJRGFrUGEwR3RzTE1aTDNuWjRjR2R2aDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wMjc2ODgtZDM5Yy00ODRhLWE0NTAt
NzNkY2VkMzk3MDdmLzEva2dJRGFrUGEwR3RzTE1aTDNuWjRjR2R2aDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wMjc2ODgtZDM5Yy00ODRhLWE0NTAtNzNkY2VkMzk3MDdm
LzEva2dJRGFrUGEwR3RzTE1aTDNuWjRjR2R2aDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdqSqqL1
hHLdETxxS67cNmlhu2QanFbOIF3Ce1954gX0ZUmHDuT7tbvh9eDOA0OQ+eklozQs
lAWsyk/4LLfI8YxQdXBFz70usoS7akV/7h04ffmRx5yY206riREmahnirM9zPjpu
o8MjQIJazZ6kXjozx+7oY9TbaOb8q+YsxVHegFhQrqBZLEkijkvAterQ4JjvbfEp
rB3jxqhNyiX7V7wchudxYWjs9pg4CHfTW2x06TQ4+YXEfEykZZ3rzSTpEPrRlrj5
uLe03CKCQ10bym0lO9/EuIxhviEHrX8V07tFoJGnZPcnqqIjI8CFT7smloOZAH4e
1sBcNLbn9mqB4Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:11:35 2025 by rpki-client