Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
File: KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft (raw, json)
Hash identifier: t+HRIDLdqIEC0fDvFS8LBM/1eNv1tNPLTB/m4TsIS44=
Subject key identifier: 30:75:4B:3D:75:E9:61:49:0D:AB:EF:1A:66:4F:6B:2B:E4:AC:55:BD
Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
Certificate issuer: /CN=283648aff886185ffce3626f090f119a3e4ede35
Certificate serial: 0197B632E61FD55416DB977C787DDA6384C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 11:01:18 +0000
Manifest this update: Sat 28 Jun 2025 11:01:18 +0000
Manifest next update: Sun 29 Jun 2025 11:01:18 +0000
Files and hashes: 1: KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl (hash: lw/AHEBg32qpNnDtzlAYvGfPOQbGmJ0EmnsJHACkIhA=)
2: XhkT1eFNXwGFl9CWLS9N7T67Cu4.roa (hash: 48Vc4tJA9v+KllK28V53zCHphJsA0bfyopYkodUcdk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:e6:1f:d5:54:16:db:97:7c:78:7d:da:63:84:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35
Validity
Not Before: Jun 28 11:01:18 2025 GMT
Not After : Jun 29 11:01:18 2025 GMT
Subject: CN=30754b3d75e961490dabef1a664f6b2be4ac55bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:26:1e:3c:1c:a3:58:ee:17:9a:99:57:47:
de:fb:e5:95:b0:f9:60:82:5b:bb:c2:3a:cf:05:66:
27:81:0a:9a:68:de:ce:6b:61:09:fb:1d:2e:82:8f:
3b:52:f0:ae:c5:dc:05:a1:92:91:6b:dc:37:fb:07:
a5:67:2d:e1:a7:a6:73:bb:20:96:b3:5d:44:f2:b6:
90:99:8c:78:11:8d:b2:e5:a8:be:fb:ba:42:45:11:
c0:d2:08:8e:d5:1d:8c:14:8d:55:a7:3a:33:a8:9c:
b6:1b:12:4e:38:09:bf:31:f7:05:8b:f4:ca:cd:05:
15:0d:a2:bf:2e:65:6c:7d:9d:72:46:2a:63:b3:50:
a3:41:79:7d:27:74:20:22:4a:d0:15:35:f3:15:c2:
cc:45:d2:2c:41:6a:f1:f7:3c:83:72:e6:8b:6f:94:
e1:c6:b9:c8:ef:20:16:7c:51:b0:3f:45:8c:82:16:
e1:70:b4:e1:d8:11:f4:58:6c:f6:bf:8c:d2:67:a3:
d5:88:76:ee:cb:6f:5d:e4:f1:58:dc:a3:5b:f3:c3:
d2:00:22:a0:ed:f8:47:05:04:01:f5:8b:30:98:50:
34:67:8e:16:59:54:b2:7d:89:b5:0b:e6:1b:77:9b:
93:21:bd:79:69:9b:d4:96:9b:e6:03:73:59:8b:4f:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:75:4B:3D:75:E9:61:49:0D:AB:EF:1A:66:4F:6B:2B:E4:AC:55:BD
X509v3 Authority Key Identifier:
keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d1:64:66:96:c6:2f:4c:fb:18:5d:ee:b9:ef:d4:4f:d0:40:
9b:87:b2:88:6b:9a:69:b9:0c:ab:53:b0:54:59:2d:bd:c7:74:
0b:18:98:df:e9:95:b7:53:24:76:bf:8b:8c:dd:c2:58:07:cf:
7f:84:b7:08:24:25:76:08:e5:31:17:bf:9e:db:79:a6:e9:be:
b7:0a:f4:d5:5e:3b:5d:62:25:60:a7:3e:7f:f9:85:8d:45:cb:
74:08:0d:76:c0:83:7b:74:49:f7:ff:b1:fa:52:7c:f5:cb:e0:
b8:56:27:95:48:5a:3b:a2:e1:16:c0:06:56:d1:3e:f2:e6:da:
fa:38:6f:6b:b9:89:4e:c3:ef:db:1d:80:60:ee:5a:1d:0e:3d:
cb:15:8a:0c:0d:18:9c:af:fc:a6:8c:55:8c:f4:05:83:7a:6b:
08:af:8b:c3:04:07:3d:c0:2a:24:f6:02:b2:24:f1:17:c8:ea:
8a:81:6e:5e:f2:d8:83:3e:f8:c6:62:eb:9b:9f:8c:d7:5c:5f:
c3:f1:b0:9a:99:d1:b7:0e:12:cd:09:cb:63:0c:7b:3d:bf:db:
34:63:b0:21:c8:7e:a2:72:0b:db:4e:25:4e:56:56:3e:54:a6:
81:a7:92:4c:e6:be:09:60:e7:45:4f:e7:06:bd:a3:e9:9a:af:
5b:1e:4c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:21 2025 by rpki-client