Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File: kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier: /wQbbzUj9WRTauPDcAxwFckSzsVtm7HdOPIhKBOzV8A=
Subject key identifier: 26:F4:F8:CC:9D:98:1E:D9:A3:D3:B2:B1:B2:EB:A3:63:EB:27:36:F0
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 019827B5001B28537D1D859F22A04E088182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number: 15F3
Signing time: Sun 20 Jul 2025 12:00:30 +0000
Manifest this update: Sun 20 Jul 2025 12:00:30 +0000
Manifest next update: Mon 21 Jul 2025 12:00:30 +0000
Files and hashes: 1: 1YWYnMlB7bNjXZ-mR2gEvtLN3Bc.roa (hash: iv4yYaqxX9/BpncOJNi6FP4hgIeS1SbHKqiyIfxcth4=)
2: 4CDjeVRMh18gOoZFQB0kG87F3Ac.roa (hash: iS2zUZpr0OcJtSkJuXKr1ZglVEc7UdAcxQ+F6PuEqkI=)
3: CDG-7PWVVdm5Z7h-n4Ap6W6lHRg.roa (hash: 7yd+Jrhn2cJ3wJGfKqF6or4RqCKrwJRg13HNF9MQpQc=)
4: Kr-1FkX8isznu7LNjpkGbo9RXAQ.roa (hash: Nkup561eSF2a1lVSMy8ZbGKlbupLimNEQbbUAaz0DIc=)
5: Qxvf4dambUM4wGGmpG65pgeoc3M.roa (hash: dkmpKTZscpBI0IsTqLbisMD9yO7kEmJGfj1/YKPtkuc=)
6: RmzxPNQi61FBVP1fRDu5ucEzyaI.roa (hash: hjLdRcYfGc3ePa8Zdnij2feYL0ptV5CZuH2vbOXAvTw=)
7: SkASK4zN7bPehdagCz89JkwUfsA.roa (hash: d1RW1sYrndntlpLL9/PiKBPVX2QhXX5rJ7D+z0FCw9w=)
8: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: Tp4w3wwKWpna1ZYQvfWSzZJi1AFsuBtI2ujk7oJYjWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:00:1b:28:53:7d:1d:85:9f:22:a0:4e:08:81:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jul 20 12:00:30 2025 GMT
Not After : Jul 21 12:00:30 2025 GMT
Subject: CN=26f4f8cc9d981ed9a3d3b2b1b2eba363eb2736f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:5f:0c:10:10:cc:a3:0e:a7:48:5a:ea:fe:
0f:2d:5f:e7:40:20:fa:44:cb:ec:89:cf:9a:67:75:
33:11:45:8d:5b:e9:b7:4c:fc:61:f9:1a:76:67:05:
00:fb:26:c8:8f:66:4a:88:20:24:25:5a:7e:3e:e9:
c2:c2:86:ae:9e:94:3d:14:65:3e:c4:d9:5a:fe:ed:
87:e3:b4:23:5a:74:cc:9c:ce:2e:83:e8:f3:92:ea:
de:ca:b6:17:9f:f9:94:bb:16:76:81:f0:ea:a0:6f:
fc:22:de:bf:ae:dc:55:86:57:1e:0a:45:52:cf:97:
b3:af:36:7c:5c:07:3a:15:e5:e8:97:cb:d8:e6:81:
69:31:20:c8:c9:9c:cd:5b:93:01:ff:fc:1b:88:90:
6b:4a:2e:5d:57:9e:e2:9e:03:e0:b6:e1:e3:5c:2f:
43:19:f7:be:53:98:02:1f:2b:99:49:63:28:cd:f4:
7c:30:f9:8b:25:e7:fc:b5:46:45:8d:a4:80:55:d5:
79:bb:f5:c0:5b:a4:90:cc:54:b8:40:b6:fd:91:56:
72:c7:c3:45:9f:c9:04:cf:cb:88:72:a5:1e:ef:dd:
17:9e:03:b6:79:9f:c6:3c:64:b6:2b:28:dc:53:05:
60:65:ec:7b:41:00:02:94:3d:ac:cd:63:4f:c2:b8:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F4:F8:CC:9D:98:1E:D9:A3:D3:B2:B1:B2:EB:A3:63:EB:27:36:F0
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e6:8d:77:e4:b8:25:9d:3e:78:13:99:d5:e8:4b:9f:b7:1d:
38:2d:4e:f5:9a:f9:85:0c:4c:de:1c:01:2c:88:81:84:21:e2:
5c:ff:fb:f2:4a:9d:5a:ce:83:3b:e1:2a:f2:d7:62:00:85:95:
c7:b2:7f:ab:6d:35:49:04:1c:45:8b:a0:93:ce:3f:fe:f5:41:
12:4d:52:95:82:f4:fc:47:d0:ff:ce:e2:1c:a4:54:7e:cc:f4:
92:41:4c:7a:5b:05:38:8a:f1:06:e6:cf:49:57:4b:bd:2e:ff:
b3:f4:f7:1d:38:51:53:a1:5e:6f:9c:4f:2e:99:f4:fe:7a:f4:
0d:69:c6:96:8f:54:df:54:3e:5e:55:77:a0:81:00:11:7b:9e:
a7:47:06:4d:7a:ca:54:e1:b7:00:fd:c5:ff:8a:8c:71:61:07:
64:56:1f:49:fb:d6:a4:88:d0:33:76:35:7c:6e:41:71:3b:55:
f1:dd:cc:0c:d8:98:63:39:00:03:64:a5:c2:ae:38:6b:c6:a8:
77:90:f3:4f:16:c7:0a:a4:b9:30:87:e5:41:dc:70:eb:9b:63:
a9:5b:31:8f:9f:23:fc:57:a1:3e:35:ae:93:8f:54:1e:74:2a:
b2:76:7e:ba:c8:24:04:ac:13:3f:f7:6e:20:90:28:e4:c1:ba:
60:22:a9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:22 2025 by rpki-client