Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
File: kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json)
Hash identifier: eAuvxxjDer+lHt2zN8YkOpjHJwXGdd4Nble6740T2+Y=
Subject key identifier: 05:CE:93:15:CF:30:84:94:11:3E:2E:4E:81:C1:89:FB:E9:84:47:D3
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 019A7226634CCBDF50A8770ED7EC07B30357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
Manifest number: 111E
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: 1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa (hash: Dpj5AMuFNg0086YuEbRvx4oDSlmmrMJ7GujnIQgUfaA=)
2: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: M1E8F1Gp0FLh1YaptqVWKrIVSJuWL1fMKiF72T3o70s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:63:4c:cb:df:50:a8:77:0e:d7:ec:07:b3:03:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=05ce9315cf308494113e2e4e81c189fbe98447d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:5d:2d:33:d0:1a:54:f6:c0:c8:df:65:21:
d6:10:c0:ca:f4:60:e5:13:74:2c:63:7e:aa:f4:73:
5b:3a:21:37:87:2d:b4:d1:cd:b5:18:86:96:75:84:
b7:c2:e7:8f:bc:1b:46:f6:ee:5f:cf:a9:f0:95:f0:
31:06:8c:f2:1c:63:e5:df:e1:68:55:1c:22:0c:4c:
02:32:a6:49:36:fd:f1:e5:a4:8d:3e:b5:91:69:2e:
2d:fb:6f:dd:38:7c:76:29:9a:f2:08:98:7c:58:de:
b9:c4:2b:b0:89:da:75:9e:f4:96:0c:3c:e0:38:f0:
fb:77:34:75:92:ca:2c:52:33:4e:66:7f:0c:27:89:
5f:1c:ec:f8:65:32:ed:03:c3:a5:56:7a:51:6f:b6:
df:cb:01:c4:0a:41:df:e0:5a:53:52:47:b9:58:1f:
e5:55:00:ed:c8:2e:14:0d:8a:d8:f3:87:6a:0b:3a:
30:2e:78:ff:47:05:56:79:41:cb:86:7d:3f:64:4b:
10:fd:e2:6a:a4:50:37:52:ff:3c:5b:db:5a:87:60:
d3:59:7c:de:2e:49:54:ab:9a:71:da:48:9e:97:87:
bb:30:c7:b9:03:4d:ba:57:72:fe:93:80:72:bf:ed:
16:5b:15:c1:1c:20:fc:64:00:b8:42:e9:72:98:21:
92:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CE:93:15:CF:30:84:94:11:3E:2E:4E:81:C1:89:FB:E9:84:47:D3
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9a:79:bf:0a:aa:22:ba:1f:b5:2d:c8:f5:72:cc:4a:93:8c:
51:46:f9:4f:ab:5f:a6:2d:ec:6a:aa:1e:31:86:de:d8:15:4d:
48:6f:4e:28:50:85:bc:60:ab:05:22:99:40:cc:d8:e4:40:17:
4d:68:e6:8e:4d:d8:48:4e:59:7c:ef:2a:2b:dc:9d:8b:b2:88:
12:90:5d:ca:01:c9:7b:d4:51:11:56:47:11:43:0d:88:2f:ae:
81:0c:dc:b9:93:60:7f:b2:f3:1c:88:f0:57:a0:06:f9:d8:03:
87:27:f3:2f:88:f6:47:da:7f:64:df:62:51:01:1b:2f:5b:21:
fe:e9:5d:aa:b2:cb:73:fb:64:89:c2:2d:5d:e5:3a:22:32:d6:
2e:7f:31:4e:d5:6e:85:75:d1:8b:22:b2:c9:bb:bf:5a:48:c3:
0d:a7:6b:f8:4a:67:13:1f:75:e3:21:e3:68:d7:df:ba:55:23:
ac:e2:99:5d:fd:34:c0:40:69:a0:fe:87:93:b4:7e:ae:e2:dd:
1b:f1:3e:c8:5d:cf:25:a4:da:43:90:3c:da:22:c9:ce:84:e1:
ed:eb:9b:fb:d7:b9:b5:66:ea:d3:fd:2d:0e:14:e2:d3:aa:90:
53:52:56:92:5d:ae:46:c5:a9:d2:63:d6:42:ee:d8:a9:11:98:
97:ed:58:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:03 2025 by rpki-client