Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
File: KiZGBSRa8gGcKTw3KPal4lXYnyU.mft (raw, json)
Hash identifier: 7QEKtXAsdw68ueEkOcbEM4VjoSyEkgYaZiMPAJQv1H4=
Subject key identifier: 6D:3C:09:17:A0:4D:BA:34:81:B4:83:29:55:3C:E9:33:58:A6:9B:E3
Authority key identifier: 2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25
Certificate issuer: /CN=2a264605245af2019c293c3728f6a5e255d89f25
Certificate serial: 0197B7454C33BF491BAE767F8A650E18BBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:01:01 +0000
Manifest this update: Sat 28 Jun 2025 16:01:01 +0000
Manifest next update: Sun 29 Jun 2025 16:01:01 +0000
Files and hashes: 1: 3KSN_k3KfyRIpkOpKsbbz9Bqq5E.roa (hash: iHgOduhUsida+9pHg8iFsStpH/s/1dREHiJkoJW0aww=)
2: KiZGBSRa8gGcKTw3KPal4lXYnyU.crl (hash: W+n0hVKyPzYRBr0TnLcEjCZEwLMtoF53oYSir/oNMoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4c:33:bf:49:1b:ae:76:7f:8a:65:0e:18:bb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a264605245af2019c293c3728f6a5e255d89f25
Validity
Not Before: Jun 28 16:01:01 2025 GMT
Not After : Jun 29 16:01:01 2025 GMT
Subject: CN=6d3c0917a04dba3481b48329553ce93358a69be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:09:1b:e6:ad:fc:93:08:b9:f2:f2:1f:bb:
cd:a0:0c:71:17:ee:d0:43:a1:e1:7d:45:7d:c6:6a:
6a:05:ac:c4:65:f9:f4:7b:6b:ab:20:75:51:e6:50:
a0:71:c9:2b:93:10:24:cb:65:1d:c5:6a:80:f3:c3:
d8:9d:90:1e:95:c7:1f:b7:7e:eb:07:64:d9:0a:38:
59:76:43:18:95:81:30:fa:46:8f:fa:77:68:f4:51:
d2:df:66:04:60:73:bf:f5:e8:61:47:06:8a:80:e9:
0a:33:72:48:ba:8c:09:da:91:8c:53:0d:e0:8f:3d:
f8:a8:b7:64:10:89:1f:1d:46:29:ef:7b:d5:65:2f:
1a:57:30:d5:9f:55:5f:c9:61:43:a3:0d:fe:e1:c9:
8f:ec:c1:50:51:0d:cb:3e:ab:03:1a:8c:31:81:83:
6d:8f:74:a8:fd:32:e9:ce:5c:59:cb:4d:27:24:bc:
b8:56:b7:09:04:74:36:8e:80:ed:ac:8f:4d:0c:f0:
c2:65:77:13:42:b1:e3:7c:12:ea:a0:c1:a9:f9:5c:
30:ca:26:ed:a1:f0:3c:01:b3:08:b0:42:20:da:c9:
1d:f6:0b:68:4b:47:93:eb:7b:40:27:b9:08:7f:4b:
a0:f7:63:5b:ee:0b:af:bb:99:ed:66:6d:0e:2f:3c:
43:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3C:09:17:A0:4D:BA:34:81:B4:83:29:55:3C:E9:33:58:A6:9B:E3
X509v3 Authority Key Identifier:
keyid:2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8a:5a:6a:46:3a:df:76:74:11:77:13:a2:47:39:04:20:a1:
b4:56:57:53:b5:6e:21:1b:52:76:7b:15:81:ae:36:b0:90:66:
2a:89:1a:b0:45:ef:19:53:e8:79:17:c2:46:f3:4e:8f:59:b7:
76:f0:23:04:24:8a:81:13:f8:88:ea:74:ff:e5:85:7e:be:e2:
2d:3a:68:f5:29:a4:c8:69:36:89:d7:12:40:e0:31:05:42:6f:
c5:51:a7:64:06:d4:37:39:8a:cf:ef:ce:17:60:4e:51:ef:35:
2e:4b:57:1b:27:9a:72:20:ae:84:64:44:65:f6:c2:74:f8:36:
b1:44:00:2b:9e:12:cb:3a:d1:dd:ff:41:d8:eb:1b:48:c6:63:
e9:6c:ee:e4:ad:fb:fc:0f:56:09:09:a5:cb:86:45:da:93:ee:
79:c8:14:98:f5:6e:4f:b4:d7:34:ad:09:3e:7f:15:ee:52:08:
b1:ed:a3:e3:39:4d:b2:37:33:14:94:44:f2:3c:8a:0d:6e:79:
d6:7d:5a:9b:48:e5:b6:7c:9e:31:36:c1:62:68:2d:21:dd:ac:
19:c8:ed:ec:eb:44:fd:1c:17:a5:27:ed:8c:b4:08:2b:b2:4c:
d6:77:1e:09:d3:17:75:3d:bb:6b:71:19:a1:b4:46:ba:6f:1f:
ae:a4:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:05 2025 by rpki-client