Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
File: KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft (raw, json)
Hash identifier: mgo0yoyZY5kb0fwCsG21lDQlSf816uwauTgwdiWJ+E8=
Subject key identifier: E9:83:95:AC:3B:5E:BA:82:EC:35:C2:A5:0A:36:BF:6F:B1:1C:F0:F0
Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
Certificate issuer: /CN=283648aff886185ffce3626f090f119a3e4ede35
Certificate serial: 019873741C198480EEB3244439C89F7F38F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 05:00:45 +0000
Manifest this update: Mon 04 Aug 2025 05:00:45 +0000
Manifest next update: Tue 05 Aug 2025 05:00:45 +0000
Files and hashes: 1: KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl (hash: 3FgX3pqkSV6RorHpn925OGD+oCuyXO0nG6c6H2tIKIo=)
2: XhkT1eFNXwGFl9CWLS9N7T67Cu4.roa (hash: 48Vc4tJA9v+KllK28V53zCHphJsA0bfyopYkodUcdk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:1c:19:84:80:ee:b3:24:44:39:c8:9f:7f:38:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35
Validity
Not Before: Aug 4 05:00:45 2025 GMT
Not After : Aug 5 05:00:45 2025 GMT
Subject: CN=e98395ac3b5eba82ec35c2a50a36bf6fb11cf0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:57:bb:d8:4b:94:69:d6:f1:70:68:c2:1b:
7d:38:9d:d7:68:dc:7a:2f:d6:d2:15:dd:a5:22:61:
b1:92:cd:f7:c9:eb:9b:9e:d9:f9:f7:41:28:7d:5c:
1f:7f:8e:e9:4d:d3:36:c6:6d:86:b3:54:b2:3b:cd:
62:75:76:ff:8f:a9:cf:e0:37:cf:4d:16:45:a5:2a:
2c:44:be:eb:17:83:08:c6:c7:a4:f1:c4:85:76:a6:
2d:1d:5a:d4:77:cf:75:b3:d6:82:d8:d8:86:ca:29:
dd:b7:8e:e2:1c:ba:69:a5:87:67:77:99:32:c1:66:
fa:ce:e6:25:03:13:52:a6:d9:bd:45:85:fb:9a:1d:
6d:85:bd:15:52:1c:f4:33:d5:78:5f:3c:41:90:59:
1c:98:4b:83:4e:c1:80:d7:c0:bc:7d:a4:45:b9:8f:
7a:ce:46:09:e8:dd:5d:35:78:a9:aa:ee:7e:48:92:
44:68:71:53:80:ea:0a:fc:32:58:8f:27:5a:c7:dd:
92:1c:9d:8e:0a:ce:2d:b6:c7:62:88:83:11:dc:8f:
4f:36:bd:45:59:a7:fd:76:7c:b3:f2:83:f1:d6:97:
c7:81:d2:cc:ae:6b:42:e1:7d:0b:dd:1e:dd:90:5b:
b3:e1:7e:a6:30:2f:a9:e9:11:44:65:a4:43:c9:b2:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:83:95:AC:3B:5E:BA:82:EC:35:C2:A5:0A:36:BF:6F:B1:1C:F0:F0
X509v3 Authority Key Identifier:
keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:39:09:bc:a0:f5:2d:06:d3:eb:66:6a:f8:0d:5b:d0:65:00:
64:9f:f3:dd:08:01:6d:51:55:06:80:f5:3b:88:31:b9:cb:ea:
0e:cc:99:46:eb:47:cd:4c:7e:8f:94:70:7e:cb:a4:ce:0c:28:
25:31:4f:d4:ae:1c:9e:d8:87:d0:50:56:9f:36:15:5d:03:09:
b9:38:d5:24:a4:d3:55:e5:41:33:1f:c1:89:f9:2d:eb:ed:d9:
e8:94:fe:c7:bb:cc:30:24:f1:99:96:8a:77:59:45:ef:61:bd:
2f:ab:1f:a9:9b:16:7b:75:f9:02:10:75:a8:a9:1f:ce:d5:f6:
2b:1f:06:d4:2b:2b:35:51:13:36:4e:09:9a:ad:26:da:ea:cc:
72:44:8f:1c:46:71:90:48:97:a9:87:af:93:df:b4:7b:60:ba:
41:97:16:a1:2e:95:7c:15:45:49:2e:46:4e:4a:83:d1:6a:78:
8a:39:bc:36:7a:8b:0a:c6:5f:64:26:57:6a:cf:8d:b5:4a:78:
d1:09:9c:02:59:4b:e3:f3:ee:c1:05:c6:bf:ad:70:7c:81:96:
34:a0:f8:35:2f:f4:f5:f9:c8:8f:ae:ac:0c:51:44:35:30:70:
42:04:8a:18:76:3e:04:32:68:c4:cb:cb:d0:fc:6d:b3:fa:09:
62:8c:be:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdBwZhIDusyREOciffzj3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MzY0OGFmZjg4NjE4NWZmY2UzNjI2ZjA5MGYxMTlhM2U0
ZWRlMzUwHhcNMjUwODA0MDUwMDQ1WhcNMjUwODA1MDUwMDQ1WjAzMTEwLwYDVQQD
EyhlOTgzOTVhYzNiNWViYTgyZWMzNWMyYTUwYTM2YmY2ZmIxMWNmMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm1Xu9hLlGnW8XBowht9OJ3XaNx6
L9bSFd2lImGxks33yeubntn590EofVwff47pTdM2xm2Gs1SyO81idXb/j6nP4DfP
TRZFpSosRL7rF4MIxsek8cSFdqYtHVrUd891s9aC2NiGyindt47iHLpppYdnd5ky
wWb6zuYlAxNSptm9RYX7mh1thb0VUhz0M9V4XzxBkFkcmEuDTsGA18C8faRFuY96
zkYJ6N1dNXipqu5+SJJEaHFTgOoK/DJYjydax92SHJ2OCs4ttsdiiIMR3I9PNr1F
Waf9dnyz8oPx1pfHgdLMrmtC4X0L3R7dkFuz4X6mMC+p6RFEZaRDybJlwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmDlaw7XrqC7DXCpQo2v2+xHPDwMB8GA1UdIwQY
MBaAFCg2SK/4hhhf/ONibwkPEZo+Tt41MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iOGJkM2ItMDAyNi00ZDU2LWJiMjUt
NmE1YzljMGQ5MWU5LzEvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9iOGJkM2ItMDAyNi00ZDU2LWJiMjUtNmE1YzljMGQ5MWU5
LzEvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0TkJvKD1
LQbT62Zq+A1b0GUAZJ/z3QgBbVFVBoD1O4gxucvqDsyZRutHzUx+j5Rwfsukzgwo
JTFP1K4cntiH0FBWnzYVXQMJuTjVJKTTVeVBMx/Bifkt6+3Z6JT+x7vMMCTxmZaK
d1lF72G9L6sfqZsWe3X5AhB1qKkfztX2Kx8G1CsrNVETNk4Jmq0m2urMckSPHEZx
kEiXqYevk9+0e2C6QZcWoS6VfBVFSS5GTkqD0Wp4ijm8NnqLCsZfZCZXas+NtUp4
0QmcAllL4/PuwQXGv61wfIGWNKD4NS/09fnIj66sDFFENTBwQgSKGHY+BDJoxMvL
0Pxts/oJYoy+Fg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:41 2025 by rpki-client