Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
File: kCGOgBpTJZXptxxkNoTqBflr9fM.mft (raw, json)
Hash identifier: vqPhznRTQEbOUCe96S2WmuBPq59kEPZGVG8CV644wx8=
Subject key identifier: DB:3E:41:6C:80:EB:20:1D:88:F4:C5:9D:2B:EF:84:CC:D3:62:02:AE
Authority key identifier: 90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
Certificate issuer: /CN=90218e801a532595e9b71c643684ea05f96bf5f3
Certificate serial: 019964D9F7D7961C442AF226409454107D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
Manifest number: 03F8
Signing time: Sat 20 Sep 2025 02:00:30 +0000
Manifest this update: Sat 20 Sep 2025 02:00:30 +0000
Manifest next update: Sun 21 Sep 2025 02:00:30 +0000
Files and hashes: 1: kCGOgBpTJZXptxxkNoTqBflr9fM.crl (hash: j43eUEaVzuB3O3+/pe2pFs3PPJ0kFR9O63xp0loGmTU=)
2: wO4tKRWBwJAF_Ti9XP-8yjRZuUU.roa (hash: G7Rk/RipLXF/QPRugyDtoGfESmr50WO1Zig00oPYW14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 00:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:64:d9:f7:d7:96:1c:44:2a:f2:26:40:94:54:10:7d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90218e801a532595e9b71c643684ea05f96bf5f3
Validity
Not Before: Sep 20 02:00:30 2025 GMT
Not After : Sep 21 02:00:30 2025 GMT
Subject: CN=db3e416c80eb201d88f4c59d2bef84ccd36202ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:07:c2:e7:57:2f:60:e3:c6:df:e5:96:83:25:
ff:aa:2b:9c:a5:4e:91:19:c8:2c:61:e5:d0:d7:9e:
ee:8d:35:f4:12:48:a2:b9:9a:82:b4:f9:9a:11:50:
3e:ad:75:7f:94:16:6a:77:c1:b1:7b:23:07:4a:75:
7b:12:18:21:2d:92:94:83:56:b0:ea:33:df:40:94:
d9:43:92:da:66:b7:58:b7:07:e2:4e:3b:a7:a8:58:
9f:95:2e:47:32:36:cb:e4:de:53:2f:60:d1:24:18:
74:13:72:14:5a:f3:fb:51:6d:d2:73:06:0e:d3:45:
3d:5a:72:70:c8:b3:45:58:ec:92:87:4a:71:ba:d9:
05:cf:1f:38:b4:3a:76:9d:89:79:1a:87:b3:ab:62:
07:21:31:c4:3e:24:c4:2e:1b:77:e3:28:1e:0a:ed:
95:3f:0e:dc:6c:dc:5f:f3:a6:9b:12:4c:50:bc:54:
23:ad:d0:4b:ea:51:3a:d7:c0:4c:14:9d:1e:76:c7:
3b:e4:de:e4:d6:fd:bc:64:0b:dc:22:17:2f:b3:78:
a8:24:8f:e4:6e:c5:f2:f4:e0:33:9c:9a:4c:76:8e:
f7:ec:e5:ff:df:8f:db:82:2f:14:e1:4f:6a:38:5b:
1f:da:7a:22:43:5c:56:1d:01:7a:f7:95:f6:4e:e8:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3E:41:6C:80:EB:20:1D:88:F4:C5:9D:2B:EF:84:CC:D3:62:02:AE
X509v3 Authority Key Identifier:
keyid:90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2d:53:ea:b5:ec:d8:97:66:63:06:c3:36:d3:94:60:41:7d:
7f:e3:77:ba:6d:05:61:b0:f4:25:2e:8b:e4:b1:2e:2b:be:92:
29:66:f6:c7:c3:80:e3:7b:7d:77:e3:27:7c:08:fa:97:b9:3a:
ac:87:d4:8a:04:ce:f2:9e:83:2e:fc:b8:09:49:82:05:cd:6a:
17:f2:91:5c:26:9d:8f:8e:01:a9:3c:3f:ae:eb:6e:54:07:6d:
1e:d0:aa:02:39:0d:e8:43:9e:e5:42:1d:57:80:45:ac:64:33:
4f:d6:d8:4d:65:ca:ad:78:87:c9:8f:0e:fb:f1:3e:56:02:62:
87:d0:c4:28:ba:19:ab:ec:f5:72:13:aa:52:f3:64:40:82:90:
1b:27:18:9d:63:51:0b:c6:76:d8:90:dd:c7:ba:cc:80:2a:fd:
9c:6d:9e:e4:c7:a5:61:ee:6d:51:46:71:83:bf:bb:9c:9f:ea:
d9:64:7e:89:48:42:0e:a8:ef:dd:c8:de:ff:6b:bc:1b:1b:2b:
9e:da:75:41:e4:4a:2f:2a:05:fe:d3:b8:10:0a:69:a5:35:d1:
a6:2c:9b:b3:82:2d:bc:dc:99:16:16:65:fd:dc:e6:4e:6a:06:
9e:33:9b:a0:6c:a0:a5:c9:9e:09:b9:54:d4:19:d8:9e:ab:f0:
17:06:51:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 05:21:43 2025 by rpki-client