Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
File: KiZGBSRa8gGcKTw3KPal4lXYnyU.mft (raw, json)
Hash identifier: CoPGN0exTpFRhaAgzZjCcVQM6vVU4t1RA9oaX5mNX7U=
Subject key identifier: A8:A4:66:A2:59:41:95:E3:88:7C:B9:B2:FD:F2:CD:52:FA:63:0F:D6
Authority key identifier: 2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25
Certificate issuer: /CN=2a264605245af2019c293c3728f6a5e255d89f25
Certificate serial: 0198D515623FAD0EF5509CDC44F43F3DF0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:05 +0000
Manifest this update: Sat 23 Aug 2025 04:00:05 +0000
Manifest next update: Sun 24 Aug 2025 04:00:05 +0000
Files and hashes: 1: 3KSN_k3KfyRIpkOpKsbbz9Bqq5E.roa (hash: iHgOduhUsida+9pHg8iFsStpH/s/1dREHiJkoJW0aww=)
2: KiZGBSRa8gGcKTw3KPal4lXYnyU.crl (hash: v85lTIZbcAdDpFl2G/PRA9JbDjgXYrmy7pyVFC4AtO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:62:3f:ad:0e:f5:50:9c:dc:44:f4:3f:3d:f0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a264605245af2019c293c3728f6a5e255d89f25
Validity
Not Before: Aug 23 04:00:05 2025 GMT
Not After : Aug 24 04:00:05 2025 GMT
Subject: CN=a8a466a2594195e3887cb9b2fdf2cd52fa630fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7b:25:be:4a:87:83:15:5d:03:5b:31:7c:08:
da:16:d6:d3:67:30:49:0c:04:2b:5e:80:40:18:44:
c7:64:b8:04:76:54:8c:9a:95:b0:07:9e:9c:e1:a7:
95:ee:5f:94:ef:db:80:a1:3d:60:3b:02:58:64:01:
0e:bf:cf:bd:db:18:69:0f:d2:17:33:70:b6:7e:64:
c1:b2:5f:bf:94:4b:f6:88:09:01:8b:27:c4:75:ce:
2b:ab:40:24:bc:fa:9c:25:4f:cd:62:99:85:cc:98:
cf:f6:01:98:1e:9a:a5:5d:e4:cb:6c:be:c5:8b:08:
d6:4a:b8:8e:0d:ec:3b:19:3b:f9:f3:d1:8a:2c:97:
70:11:cd:3a:2a:20:70:03:b0:9a:dd:07:09:d7:c9:
ae:d6:65:dd:68:9c:f8:c6:ba:49:02:29:97:41:03:
3c:70:9e:be:f4:81:d9:84:6b:ef:cd:1b:5d:09:15:
95:91:37:f1:47:bc:83:5c:81:f2:73:47:8d:a3:14:
f2:ca:be:22:be:d6:ed:70:a6:6a:c4:27:08:a9:3f:
b6:ed:1d:41:d6:28:f1:d3:7e:65:da:94:80:e9:bb:
5b:ef:6c:b2:0f:a4:28:75:3a:9c:cd:33:ef:1f:48:
74:2d:50:e7:c0:83:7f:77:02:b5:53:bc:35:60:32:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A4:66:A2:59:41:95:E3:88:7C:B9:B2:FD:F2:CD:52:FA:63:0F:D6
X509v3 Authority Key Identifier:
keyid:2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ad:04:02:e9:96:9b:a0:38:54:3f:89:8f:0b:be:f3:11:90:
7a:8d:95:2e:98:78:48:87:c5:67:ad:43:6a:f9:a7:b3:5c:0b:
cf:b5:03:c0:fd:16:7d:7a:33:eb:ad:c8:c4:e0:8e:cf:3a:33:
af:47:21:8f:8c:40:fd:59:a1:11:ae:19:3d:b2:ab:6e:4c:56:
70:cc:71:42:da:c9:4d:18:03:15:b4:39:5a:06:a8:94:68:04:
4b:59:c1:4c:3c:d7:4a:13:c5:1a:7e:19:4e:3f:15:bd:9c:38:
6c:84:b5:a8:aa:2f:8d:9e:3b:36:57:9e:2c:9d:9b:7a:60:df:
37:b4:a3:2d:5e:fb:d3:6d:0f:f5:3b:dc:8d:36:39:67:83:c1:
6f:01:03:33:6d:00:63:74:78:8e:1b:4d:7f:38:44:da:70:b2:
c9:e2:de:f0:19:a7:a8:cb:aa:ed:97:cc:06:f0:c8:e3:d9:2c:
93:ab:b5:30:08:6e:f2:2c:41:e4:5b:ef:86:3d:7c:84:cb:be:
26:2b:20:d1:ec:93:d9:6f:d7:ac:5a:1e:ef:69:4c:14:9c:84:
17:50:4a:74:e8:47:01:e8:6d:4c:6e:82:6d:a1:ab:82:54:e0:
0f:f3:e0:6e:65:a0:e6:e3:ca:19:a2:db:e3:d1:f2:f3:28:79:
ae:92:d6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:22 2025 by rpki-client