Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json)
Hash identifier: QGsDGv0HQ0VeQk850J2+KsS2BxGZmqABhiik8m9ZN7w=
Subject key identifier: 97:65:46:49:64:B6:03:FF:74:B1:F4:33:8E:12:12:24:83:46:AE:A6
Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Certificate serial: 0198D4E0C44935A099627222E9BBE73913FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
Manifest number: 0F8B
Signing time: Sat 23 Aug 2025 03:02:36 +0000
Manifest this update: Sat 23 Aug 2025 03:02:36 +0000
Manifest next update: Sun 24 Aug 2025 03:02:36 +0000
Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: ecj3HRQlumi/SoWlkPlQZP7yKfy1uRt4qaGos9wRPjg=)
2: VH29zUdUoDMFkb4I3pkZNKsYstE.roa (hash: 1yNsQGwt5wFqKyahcKf4KUa3JWkLXkh+qcfoDSK2Rlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c4:49:35:a0:99:62:72:22:e9:bb:e7:39:13:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Validity
Not Before: Aug 23 03:02:36 2025 GMT
Not After : Aug 24 03:02:36 2025 GMT
Subject: CN=9765464964b603ff74b1f4338e1212248346aea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:04:67:f9:c9:37:72:7f:4d:02:4e:62:4c:13:
c4:34:ed:88:ec:33:e6:87:e9:7f:f0:4c:f3:29:a6:
c6:ab:2a:48:c3:73:83:8b:e0:ba:b0:ab:18:ae:19:
5b:02:f7:91:78:db:77:0a:dd:ac:89:1f:4f:ca:da:
0f:71:b1:49:52:c5:7f:2d:f4:c4:cb:1a:d8:4b:d7:
0a:db:32:f6:9b:cb:bf:91:3b:f9:5e:6a:db:6e:28:
0e:77:10:23:9c:db:1e:1a:24:e1:20:57:cf:f4:93:
43:63:f0:5a:ae:f4:64:79:2f:f4:17:97:dc:7e:74:
75:55:61:dc:ed:9f:0c:d2:0b:60:53:85:5c:ac:3a:
cf:56:df:fa:5d:7d:59:19:69:29:0b:e6:a8:d4:ec:
87:9d:fb:25:15:8d:e1:42:6f:c6:ef:3a:74:f6:6f:
c7:9f:78:d0:33:ad:13:25:bb:2a:79:7e:5d:6a:c4:
f8:cd:ba:db:3b:3a:48:10:79:93:b1:2d:c3:3f:fd:
45:f3:97:5a:c9:0d:3c:a5:aa:cd:2f:dd:6c:46:9a:
21:fb:d3:41:6f:10:18:4f:8e:29:b6:6d:90:ef:87:
5b:9e:91:ca:80:c8:f3:51:06:d6:eb:aa:2c:6b:c2:
20:d1:3f:55:e3:1b:09:6d:b8:bc:02:58:95:53:0f:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:65:46:49:64:B6:03:FF:74:B1:F4:33:8E:12:12:24:83:46:AE:A6
X509v3 Authority Key Identifier:
keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:30:c1:ea:51:1e:25:62:9f:fd:ad:ae:0b:b3:bc:f7:44:95:
79:28:74:31:24:20:76:e8:74:b9:22:d1:e9:ef:4b:dc:30:3b:
f7:2c:9b:81:91:b3:60:2b:81:46:53:06:b3:11:9d:06:58:ab:
3a:e3:2d:03:bc:a5:60:61:46:af:89:86:df:05:a9:8d:8d:ee:
74:d4:24:6e:d2:80:16:fe:69:b9:2a:c6:1b:f7:26:b1:7b:1f:
a7:6f:42:4a:59:58:59:ce:04:63:59:ff:76:77:cf:fc:a6:38:
92:4d:6e:ef:d2:8e:46:7f:8a:13:ae:1d:4d:7b:1f:f3:f3:54:
fd:ec:09:5e:da:bf:dd:95:c3:b4:e6:cb:bd:ee:a3:61:59:7f:
99:b3:6a:3f:9a:cd:19:44:01:66:f2:a5:56:de:11:f7:d9:3b:
45:7c:1c:81:03:c2:aa:ff:75:b9:b9:6d:12:d6:95:48:d7:82:
2c:2c:9a:f1:08:b3:76:34:39:9b:02:1f:ea:7d:69:07:e5:88:
61:94:94:90:36:ca:48:1a:82:a8:e5:e3:77:2b:d5:6d:8f:8a:
3b:57:37:e7:04:24:9c:75:3b:67:d9:ff:31:34:b2:4d:3c:60:
13:23:22:68:77:67:e8:2c:68:57:0a:05:f5:64:d3:0d:6d:4e:
95:b8:4a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:28 2025 by rpki-client