Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File: KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier: QnS87AZCaqWIZ2Bez/me6+YILz53cZJNrOFIWvLMUt4=
Subject key identifier: 2E:44:4E:81:5D:4B:65:C3:8A:8E:D2:F0:79:9E:A3:0D:13:67:31:A4
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 0197B8210566002358B45C3694C9D656D6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:01:01 +0000
Manifest this update: Sat 28 Jun 2025 20:01:01 +0000
Manifest next update: Sun 29 Jun 2025 20:01:01 +0000
Files and hashes: 1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: yZkS3/qPE6F53JCKU80RKLzDoUIJpBuOt+XJZzkfJW4=)
2: LM876MaYaB8OnXBNDWvDIMOdaT0.roa (hash: dBnZE66nMAqtp/XETbnr6kLTMtvYsN54cnJkvnD4onk=)
3: SQmwwlkRfmzsbR8yXHtAP1cuD78.roa (hash: 70vEBGHpH3D42IAnxJUAJiHSfSkzd3seVU45VJv3ZjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:05:66:00:23:58:b4:5c:36:94:c9:d6:56:d6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: Jun 28 20:01:01 2025 GMT
Not After : Jun 29 20:01:01 2025 GMT
Subject: CN=2e444e815d4b65c38a8ed2f0799ea30d136731a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:c1:98:de:88:1b:55:2c:f4:11:bb:db:08:
04:4f:01:6f:e0:8a:bc:cc:e4:73:5c:22:b6:a8:da:
f4:22:d7:ca:7b:87:91:8d:2e:8b:d4:d6:09:b1:60:
45:80:48:ca:2c:e3:37:77:2e:7b:df:8f:24:5b:6a:
66:9a:ae:28:78:0e:11:93:61:74:b3:18:ae:c6:2e:
2a:5d:41:4d:63:25:70:37:ae:80:52:3f:4f:79:2f:
58:c2:f4:bd:01:ae:e5:07:48:58:bd:ce:4e:fc:4b:
4e:8b:32:b4:b9:77:98:6c:bb:7c:db:f6:0f:7d:0a:
6d:3f:37:31:96:80:96:1f:35:10:63:8d:49:15:79:
bc:fc:46:8d:85:46:2e:3e:c5:ad:c8:fa:6c:2a:9f:
0b:90:ec:dd:55:02:90:b3:d6:db:e6:30:67:8e:bb:
ad:8d:97:23:01:c8:1d:a5:f9:39:2d:99:a8:f3:da:
f8:a5:a9:f3:81:3c:8b:b8:d1:85:1a:39:78:ee:1d:
ab:bc:95:d6:12:8c:1e:23:ef:f6:ee:86:c4:9b:04:
b1:64:bb:f1:5a:d8:98:55:b8:3d:7c:51:d0:46:5d:
d1:01:f5:de:3a:76:51:9d:fb:b7:59:db:81:0a:9a:
85:32:ab:73:2a:4f:08:c6:9d:65:c4:99:7a:57:a7:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:44:4E:81:5D:4B:65:C3:8A:8E:D2:F0:79:9E:A3:0D:13:67:31:A4
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:85:c6:c2:3f:78:8e:dc:da:20:fb:f0:35:62:88:af:17:8f:
bd:d2:9d:c7:fc:b4:20:7b:8e:65:8b:9a:72:a4:99:3a:5b:d4:
36:33:76:ad:e8:bf:a7:87:19:95:6e:6b:c9:e2:28:a4:02:3b:
39:92:05:84:e2:e9:db:97:e8:14:09:cb:d6:50:4e:e6:17:5e:
55:c8:97:43:19:71:fd:af:33:0a:7d:e5:7e:d9:13:52:0e:74:
1d:19:75:72:cc:02:fa:b1:43:93:22:3e:85:b2:7c:a8:cb:fb:
5f:89:92:3a:09:c0:a0:d3:53:8a:7c:0e:cb:1a:ef:3e:e8:ab:
07:75:a7:fc:c8:65:f1:7d:a6:f9:2d:ac:3d:9b:d9:cb:60:00:
60:60:6c:1c:b2:43:f9:09:7d:f7:3e:63:35:08:5a:f3:37:5d:
e7:6f:61:f3:b0:cd:98:12:af:c8:56:f9:89:7b:c7:2f:ea:07:
bc:a4:6e:32:9c:d9:62:35:80:a4:73:49:6e:5e:e0:76:99:06:
d2:46:02:0f:92:a7:58:87:b6:94:36:ef:9d:23:ae:e1:56:51:
04:eb:47:bf:91:d2:9e:04:f2:7c:9c:94:45:2b:21:61:9a:84:
e6:48:a1:11:35:28:66:3a:0f:2d:af:92:71:06:9d:f9:74:a3:
6a:ee:78:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:09 2025 by rpki-client