Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File: KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier: K99xFk8+ZQbKet/YAQ1Ap3JCw/ZFL2aW4j6scHZetxg=
Subject key identifier: 6F:F4:34:5E:64:16:0A:C6:1F:CA:D4:BC:AB:6C:8F:47:EA:18:21:7F
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 0198D5F15CAE0D943AADDAA5F33ABDEE6860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:21 +0000
Manifest this update: Sat 23 Aug 2025 08:00:21 +0000
Manifest next update: Sun 24 Aug 2025 08:00:21 +0000
Files and hashes: 1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: lQXeYT3APA6WMOjKmmi60Yf/ZpcriuLK3PTB0mQ8wsE=)
2: LM876MaYaB8OnXBNDWvDIMOdaT0.roa (hash: dBnZE66nMAqtp/XETbnr6kLTMtvYsN54cnJkvnD4onk=)
3: SQmwwlkRfmzsbR8yXHtAP1cuD78.roa (hash: 70vEBGHpH3D42IAnxJUAJiHSfSkzd3seVU45VJv3ZjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:5c:ae:0d:94:3a:ad:da:a5:f3:3a:bd:ee:68:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: Aug 23 08:00:21 2025 GMT
Not After : Aug 24 08:00:21 2025 GMT
Subject: CN=6ff4345e64160ac61fcad4bcab6c8f47ea18217f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b3:ed:61:aa:22:c7:0a:15:8f:eb:11:72:5e:
28:f7:08:e8:ab:9a:e7:b0:93:da:43:36:61:79:33:
6a:31:21:88:1e:97:dd:79:9c:11:50:09:9b:64:fb:
73:35:21:77:e0:14:4d:db:26:e9:c8:2c:fb:d8:e3:
84:4d:bd:54:ff:f0:fd:59:cf:f6:c7:8c:ab:f9:f9:
34:5c:40:ae:e2:b7:cc:cc:29:9b:19:8b:39:d1:64:
b2:b9:23:4e:37:f8:90:e8:cd:2d:c0:c7:a0:9d:33:
51:6f:69:2f:c3:03:d2:60:56:6d:a9:b2:7b:ed:7d:
ba:b1:b3:94:7e:18:84:ca:b6:d9:7d:bc:be:e2:bd:
ed:65:c6:08:89:3c:64:bd:b4:ba:ba:f4:6f:dc:ce:
cf:f8:4c:d5:63:d7:e4:27:fd:99:0d:a4:79:f6:94:
0a:54:e4:93:9e:6e:6c:d1:f0:9c:6e:94:28:7b:9f:
8e:10:81:40:d9:60:18:4f:a9:73:20:aa:ce:59:53:
37:2e:9e:c1:a6:06:44:86:d6:bd:06:40:f6:4e:46:
9a:6d:3a:0f:9c:1f:39:c6:af:fe:de:3b:3f:20:57:
0c:77:bb:89:1e:5e:52:93:71:43:99:63:82:40:7d:
52:c8:89:3b:6c:b8:b2:74:6e:f9:91:60:2f:dc:55:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F4:34:5E:64:16:0A:C6:1F:CA:D4:BC:AB:6C:8F:47:EA:18:21:7F
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cc:2d:4e:b6:ec:95:e4:3d:00:c9:2f:50:2e:27:80:5f:59:
df:38:92:4a:c9:bc:7a:84:d7:1d:19:24:af:20:b4:19:70:f6:
ac:f0:9d:ef:73:73:8e:50:fa:64:9a:d3:54:5c:d1:b7:ee:fb:
a1:0d:16:c1:4f:b9:a5:e6:1a:aa:05:e3:35:e2:85:2f:41:32:
d6:a0:87:d8:58:26:72:c1:ee:44:cc:0c:d8:8f:35:7c:ce:f7:
55:ce:66:ed:4a:af:74:4a:4c:14:c2:eb:68:69:45:1c:3e:f0:
61:52:5d:64:9d:c4:8b:c4:c3:42:78:77:de:fa:28:eb:85:0d:
d7:ab:52:58:ad:9f:2d:1f:c7:6a:89:3b:ee:37:91:87:0c:51:
57:9a:0c:ae:50:c2:f1:c9:3c:81:66:dc:a4:68:90:d8:b7:de:
7a:b3:fe:ab:07:9a:0e:c2:57:34:5f:db:d9:23:49:26:2b:38:
f5:d8:fc:55:86:9c:1a:9c:49:f2:e7:c9:12:03:bf:41:a2:78:
70:cc:36:1f:2f:b2:75:df:ab:31:cf:0b:93:29:94:03:14:fb:
9d:5f:c6:4d:2c:af:bd:4a:0d:56:bd:15:c4:ad:be:53:88:16:
83:59:81:78:3d:57:77:76:5e:87:2f:85:bd:a8:0d:0c:b4:38:
b0:d9:b7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:37 2025 by rpki-client