
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
File: KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft (raw, json)
Hash identifier: +yj36NqEerhY7zGWji8edlNkoXDGYTUmEpz5BFMW0M0=
Subject key identifier: 83:B1:D3:3A:4A:AA:3D:2F:48:1C:2F:F0:90:D2:71:FA:9D:19:F8:E5
Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
Certificate issuer: /CN=283648aff886185ffce3626f090f119a3e4ede35
Certificate serial: 0199FB7CA4601FB0A4D9009992FCB5E49208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 08:01:13 +0000
Manifest this update: Sun 19 Oct 2025 08:01:13 +0000
Manifest next update: Mon 20 Oct 2025 08:01:13 +0000
Files and hashes: 1: KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl (hash: RJnrb3ZRDsQsd5P3Ue1gD3V707AujXvdHxhN/zF4UHY=)
2: XhkT1eFNXwGFl9CWLS9N7T67Cu4.roa (hash: 48Vc4tJA9v+KllK28V53zCHphJsA0bfyopYkodUcdk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a4:60:1f:b0:a4:d9:00:99:92:fc:b5:e4:92:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35
Validity
Not Before: Oct 19 08:01:13 2025 GMT
Not After : Oct 20 08:01:13 2025 GMT
Subject: CN=83b1d33a4aaa3d2f481c2ff090d271fa9d19f8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:54:7c:5a:72:b8:8c:a9:d7:8f:4e:07:0e:ee:
46:a9:d6:9f:15:71:ee:b3:e2:6e:a2:67:14:ca:64:
6d:89:a3:f6:19:a2:27:8f:16:b7:91:17:21:4b:c9:
42:f6:24:89:b1:00:ca:e3:a5:b7:a1:58:55:03:13:
f4:ca:0b:3a:ba:95:ad:25:a7:46:69:20:43:f1:11:
67:5c:44:83:08:54:00:8d:80:65:77:29:5a:03:0f:
13:23:55:2e:a3:4b:67:3c:0f:b5:ca:e2:ec:ac:6c:
6d:ca:b3:27:79:b4:2a:3e:8d:c2:ca:db:f3:2b:75:
df:11:da:98:f0:d1:1b:fc:bd:67:90:34:d8:30:c0:
4a:c5:e1:49:0c:cd:0e:5e:91:1b:fa:a9:7d:fb:10:
d0:0c:28:84:42:23:5a:fa:f3:3e:66:26:6d:9e:51:
7d:df:a1:85:d6:51:a0:4c:d6:a2:36:5e:bf:df:97:
b7:c0:ba:ef:66:96:83:99:9a:0d:8d:d7:fa:c1:01:
19:46:0b:25:b7:28:1a:ee:f3:ff:3f:ba:eb:52:5f:
48:8c:16:5e:bb:c5:a7:21:50:f9:ed:27:23:3c:37:
d9:e3:93:2f:b3:da:b5:a8:fb:0c:bc:bd:f5:c1:55:
53:90:36:9c:02:82:7c:3d:1c:b3:09:0b:5c:d7:89:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B1:D3:3A:4A:AA:3D:2F:48:1C:2F:F0:90:D2:71:FA:9D:19:F8:E5
X509v3 Authority Key Identifier:
keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:cf:b0:db:a8:79:c3:33:66:c3:86:5e:7a:ac:b9:af:66:a1:
f2:74:f8:d1:91:2b:dc:a8:5c:d1:a7:dc:54:7a:88:40:e9:be:
d1:7f:3d:93:27:e1:cc:60:f3:e2:51:f8:70:5a:f0:65:d1:08:
a5:00:ce:10:81:25:fa:01:66:85:2d:57:66:db:eb:93:c8:87:
b8:1a:d9:c7:04:07:8c:3e:9a:70:c2:26:4a:8c:2b:83:fc:11:
62:54:26:70:30:c9:c6:8e:b6:23:79:3a:b0:36:a1:72:13:61:
ef:ea:e7:75:b9:a2:41:7f:f9:f9:e6:57:2e:6c:67:a3:0c:cd:
77:89:9e:fd:3a:a2:6f:06:4b:65:b5:89:65:f7:95:76:18:8e:
5b:ee:90:12:52:00:f9:09:51:24:02:e9:96:87:38:e2:b5:5c:
a1:4e:1b:5c:1f:2e:0f:10:b1:3a:e5:27:02:d1:86:e4:b4:49:
bf:f5:e9:9b:0c:f2:cd:4a:75:59:45:a7:21:b0:2a:cb:7a:a3:
6e:85:ce:5d:1e:69:f2:a1:d9:02:bf:e1:7b:99:e0:2a:0c:0b:
15:10:e6:eb:d5:58:ce:c7:11:c6:cf:65:16:1e:4f:52:bc:4c:
f2:cc:e0:94:ff:96:43:8d:a2:e9:ef:22:b8:89:03:77:0d:fd:
71:01:73:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:33 2025 by rpki-client