Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File: KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier: b7K0fv3ngqj++GWJK/FRnCBbK0U20qGo6tHcFg6aeqs=
Subject key identifier: A9:97:DB:2C:74:7C:9B:83:28:E3:96:6C:85:A1:E0:F5:1A:94:66:51
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 0199FB7CCCFFE3B13085B69F0AAC57CC2A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:24 +0000
Manifest this update: Sun 19 Oct 2025 08:01:24 +0000
Manifest next update: Mon 20 Oct 2025 08:01:24 +0000
Files and hashes: 1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: Fpv3nHWu0m6YdXmhCqyIvJUzOg5LRjPW955gyFUH1sc=)
2: LM876MaYaB8OnXBNDWvDIMOdaT0.roa (hash: dBnZE66nMAqtp/XETbnr6kLTMtvYsN54cnJkvnD4onk=)
3: SQmwwlkRfmzsbR8yXHtAP1cuD78.roa (hash: 70vEBGHpH3D42IAnxJUAJiHSfSkzd3seVU45VJv3ZjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:cc:ff:e3:b1:30:85:b6:9f:0a:ac:57:cc:2a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: Oct 19 08:01:24 2025 GMT
Not After : Oct 20 08:01:24 2025 GMT
Subject: CN=a997db2c747c9b8328e3966c85a1e0f51a946651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:93:03:73:f8:b6:42:68:2c:fa:90:3c:7d:00:
83:21:f2:e5:66:ee:b1:7c:f8:c1:7b:8d:51:c8:b5:
82:4c:f0:61:2a:6d:6a:eb:2b:b5:8e:4c:1b:62:d1:
b7:1b:c9:27:5f:98:72:c9:05:68:41:fa:94:17:90:
b8:02:c9:ba:02:99:7d:f0:63:df:28:4f:de:e5:f8:
99:7a:d5:18:d0:75:a5:fc:30:ca:1d:e9:8a:cf:ac:
01:79:fc:9c:9e:ad:28:a2:e4:b4:6a:3d:da:bf:66:
f4:85:d5:a4:aa:83:cb:37:15:3d:57:67:42:fc:fd:
58:6e:6c:9b:87:08:db:10:47:dc:ea:70:92:1b:c4:
a7:6a:f5:91:a6:8f:3d:32:4e:c6:11:38:fe:de:42:
2c:a4:b2:70:c4:41:72:d3:91:11:fb:c4:92:1f:99:
a1:eb:14:f2:fc:ef:8c:3d:5b:bc:cd:bb:4a:de:6e:
f7:b8:7c:c9:f5:d8:c3:05:2d:55:33:8e:7d:46:a4:
d2:ae:b2:90:2f:f2:73:07:2a:cb:c9:06:20:96:db:
a3:93:b0:2e:37:23:69:02:8b:11:62:3d:6b:4b:40:
3b:a1:14:cf:9e:51:41:b5:35:94:fa:46:28:21:93:
6e:1c:68:9d:78:fd:ea:53:8c:dd:c9:7b:48:98:e3:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:97:DB:2C:74:7C:9B:83:28:E3:96:6C:85:A1:E0:F5:1A:94:66:51
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ba:0e:d3:f0:bd:fe:f2:b9:6f:45:5c:54:a3:09:b6:93:14:
0f:34:ac:f9:dc:30:58:8e:78:a6:21:a9:fd:49:ae:43:e4:51:
29:f9:e3:40:3d:67:0b:4a:07:33:c8:c0:63:3d:41:18:d8:2d:
db:5b:5e:fc:c0:cd:1b:95:0f:db:01:6b:2c:52:8d:c0:ad:0f:
f5:7a:52:e8:c0:5d:7c:48:90:7e:b9:5b:c5:c8:3f:d8:d1:7f:
6e:42:4e:96:ce:bc:ac:a3:c7:bc:57:35:55:89:5d:a3:1d:2a:
2e:56:d9:09:32:79:d6:c7:76:f6:b8:79:aa:3c:e2:95:a3:73:
a0:53:64:17:8d:4a:f0:e0:b4:ad:7b:f0:7e:5e:ee:3f:12:d6:
aa:13:1e:c8:90:cb:ec:59:d9:87:28:22:17:20:e3:cd:09:f4:
4a:4d:e5:24:35:e4:7e:e2:6d:d7:e6:2e:ce:98:ed:b3:28:08:
c6:2c:93:56:6e:9a:62:56:25:cd:89:45:78:74:47:f7:2a:69:
40:54:6c:62:70:ea:b3:69:60:eb:b7:3c:4c:19:d0:64:64:2d:
cb:16:a4:a6:eb:94:c0:75:1e:b5:61:3e:f9:ca:32:9b:37:ba:
2e:c0:a7:95:32:64:f8:df:38:4c:ca:ea:17:57:ff:21:db:9e:
af:2f:55:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:11 2025 by rpki-client