Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
File: kCGOgBpTJZXptxxkNoTqBflr9fM.mft (raw, json)
Hash identifier: c8+8ovblpo9M5jz4HLZsx7mLS/rlj/09L7nI4DAHTc8=
Subject key identifier: 96:68:F7:AF:E2:A1:F3:27:0D:4F:1E:FA:9F:A3:A6:0A:83:FB:B4:96
Authority key identifier: 90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
Certificate issuer: /CN=90218e801a532595e9b71c643684ea05f96bf5f3
Certificate serial: 019A5075244419BC83D3C44F1584268DAE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
Manifest number: 0472
Signing time: Tue 04 Nov 2025 20:00:45 +0000
Manifest this update: Tue 04 Nov 2025 20:00:45 +0000
Manifest next update: Wed 05 Nov 2025 20:00:45 +0000
Files and hashes: 1: kCGOgBpTJZXptxxkNoTqBflr9fM.crl (hash: NVMHcyHzmijRoR0Z3ivZv09CzMAcgNZd9Vmnzkjz7o4=)
2: wO4tKRWBwJAF_Ti9XP-8yjRZuUU.roa (hash: G7Rk/RipLXF/QPRugyDtoGfESmr50WO1Zig00oPYW14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:24:44:19:bc:83:d3:c4:4f:15:84:26:8d:ae:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90218e801a532595e9b71c643684ea05f96bf5f3
Validity
Not Before: Nov 4 20:00:45 2025 GMT
Not After : Nov 5 20:00:45 2025 GMT
Subject: CN=9668f7afe2a1f3270d4f1efa9fa3a60a83fbb496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:15:51:d7:96:86:a9:00:ce:b0:da:14:47:
60:86:34:37:b7:79:15:27:e9:5d:a8:c6:ad:aa:1e:
d7:82:cc:0d:df:b2:81:4e:44:75:f0:c4:ba:f9:43:
3a:d0:28:fe:39:dd:4a:36:20:a6:11:02:5f:8b:e1:
ac:fe:13:13:d9:c3:9c:5a:36:6d:04:4f:38:b1:20:
01:77:f0:1d:1d:28:5e:6f:03:c5:be:58:c4:c0:9c:
10:b3:96:46:b5:7d:4a:bd:99:60:5e:15:80:87:70:
49:da:e1:16:04:6f:d5:26:40:79:e6:5f:da:d4:df:
f8:5e:0d:e1:7d:a3:03:44:7d:67:e7:2d:10:e3:9e:
77:0c:97:e2:27:82:4e:80:a4:20:f0:4e:4e:c6:75:
55:86:3a:70:ad:7c:9d:05:fb:ca:6b:94:7c:87:91:
94:e2:1e:e1:97:b5:90:d8:b8:1e:f5:63:36:4c:31:
c9:d3:bc:36:77:77:ce:51:f4:25:d6:48:a6:09:64:
05:8c:1f:d8:e3:bd:a2:63:aa:c1:f7:d2:4f:c2:6f:
bf:da:3d:ca:4f:3b:e3:d6:13:a6:b0:a4:85:ac:28:
47:b6:86:da:03:c8:ed:a2:3f:1a:bd:f0:b3:04:7e:
a8:f0:2d:79:8c:3d:00:90:a8:20:14:bf:cf:08:b6:
19:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:68:F7:AF:E2:A1:F3:27:0D:4F:1E:FA:9F:A3:A6:0A:83:FB:B4:96
X509v3 Authority Key Identifier:
keyid:90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:59:d2:56:88:f8:7e:2c:81:8b:01:0d:61:28:14:ca:e2:e8:
5f:c6:d2:9a:16:1b:e5:cf:81:50:be:c5:9c:cf:4e:82:ad:aa:
b3:dd:2e:5b:cb:23:98:8b:e1:2a:4c:be:d2:4d:e4:85:c3:16:
c8:4d:e1:9d:b0:5c:47:d4:c2:70:75:26:8f:80:a9:08:1a:dc:
7a:a1:5d:c1:56:af:8c:d0:d7:d5:1b:e3:3f:c0:b7:ff:ce:9a:
55:6c:6e:16:3f:a4:a7:5a:80:56:10:3b:8f:1b:e1:bb:c1:85:
b9:0d:67:2e:c8:b7:29:7e:b7:19:bd:62:c8:40:76:8b:2b:8c:
f6:07:f1:2f:28:62:3b:51:d5:b5:e0:00:a0:f5:cf:32:d2:58:
98:08:dc:c8:3a:7f:7a:16:a5:0a:92:0d:8e:e8:8b:63:4b:8f:
c3:6c:c6:4c:d9:3c:22:41:67:ca:e0:66:ba:b3:35:78:2e:c7:
ae:45:36:3e:82:37:a7:3f:d0:e1:a4:af:5d:66:47:54:98:be:
e0:b4:52:40:41:a8:c7:40:a5:5f:91:74:be:ec:d9:4e:68:f8:
08:56:9a:a5:c4:1e:46:9f:60:f1:cb:28:bf:2e:60:9b:b7:f6:
92:2b:5e:72:53:7d:54:b1:af:c8:8a:9c:8f:40:07:67:8e:bf:
81:26:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:56:57 2025 by rpki-client