Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
File: KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft (raw, json)
Hash identifier: nx66uzG8u1zW0u3WqmE0Pjx+ldCrNt9OQwpiBAmKrrQ=
Subject key identifier: 25:8E:82:66:2D:83:33:11:9A:08:3F:43:8A:BA:3C:16:EC:50:78:FC
Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
Certificate issuer: /CN=283648aff886185ffce3626f090f119a3e4ede35
Certificate serial: 01976CCF8AD95D3D18B041EFFBBC557FE336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 05:00:30 +0000
Manifest this update: Sat 14 Jun 2025 05:00:30 +0000
Manifest next update: Sun 15 Jun 2025 05:00:30 +0000
Files and hashes: 1: KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl (hash: fn6+8FSUAcItNTqpqtfP72vNoy9WuDb1R4+j8pruKWU=)
2: XhkT1eFNXwGFl9CWLS9N7T67Cu4.roa (hash: 48Vc4tJA9v+KllK28V53zCHphJsA0bfyopYkodUcdk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:8a:d9:5d:3d:18:b0:41:ef:fb:bc:55:7f:e3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35
Validity
Not Before: Jun 14 05:00:30 2025 GMT
Not After : Jun 15 05:00:30 2025 GMT
Subject: CN=258e82662d8333119a083f438aba3c16ec5078fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:02:51:0f:43:1e:d2:39:a0:3d:21:46:86:
cd:a0:e8:cc:97:2f:e9:ba:93:7f:f4:83:ee:d0:98:
a6:51:e5:92:51:f4:7f:03:e8:9d:75:ca:5d:ae:21:
06:38:ff:2b:40:19:eb:54:98:c7:14:8d:27:a1:40:
73:b5:20:3c:c0:09:3e:66:69:3b:c4:c2:0b:cf:43:
5f:51:12:82:be:35:13:cf:a9:49:eb:96:63:c1:5e:
3a:06:5e:6f:41:12:0f:de:23:c1:91:87:e6:ad:fb:
31:ab:3b:9e:95:a4:5c:fb:d7:bb:8b:1f:22:66:d6:
b6:c9:0b:04:51:ee:4d:04:de:30:81:80:22:b3:75:
5b:6b:f4:5e:c3:00:0d:7d:06:e6:96:0a:3c:4f:0f:
e1:7e:87:60:41:42:37:83:de:dd:7c:48:22:d7:42:
d6:01:37:2a:ab:c2:4e:61:b9:f1:8a:a1:e7:f0:d7:
6a:2a:89:13:d9:0e:7f:6f:17:d8:7a:4f:c0:8e:50:
72:df:07:1a:b0:4a:e6:55:9e:33:dd:71:b1:9b:b5:
ec:4c:48:63:75:51:9e:28:98:4e:21:68:46:c4:9c:
61:46:6e:fa:ac:c5:1e:82:24:6d:fd:04:c5:fa:52:
8e:f5:47:16:45:0e:f7:1c:1a:fd:2f:5c:89:8e:a1:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8E:82:66:2D:83:33:11:9A:08:3F:43:8A:BA:3C:16:EC:50:78:FC
X509v3 Authority Key Identifier:
keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:0e:6e:fb:9b:34:2a:e7:e8:37:3c:67:92:b5:40:96:12:36:
58:40:bf:e7:3c:38:ab:67:e3:f9:94:9e:34:a4:d2:63:47:e6:
dd:8d:33:d1:1e:ce:93:8f:a6:42:da:60:49:64:73:76:6e:23:
7e:08:02:8b:34:59:67:a8:05:9a:7d:d5:8f:eb:cf:2e:70:2a:
3d:64:25:b3:33:ea:3c:0e:11:cc:1f:97:f8:40:ff:3d:60:b8:
19:a4:3b:fc:80:2a:ae:41:8d:88:d2:6b:69:76:38:10:68:50:
c4:13:ef:be:b3:ad:c3:3f:f5:48:a5:c4:79:5e:d7:66:2c:c7:
08:fd:f2:30:fc:60:89:c1:76:d4:7b:c5:78:ed:8b:e7:9d:48:
be:36:df:a2:42:79:fc:58:f3:44:0c:a8:a3:f7:b9:a2:e9:c3:
13:8d:3a:4a:90:14:cc:2e:78:63:03:8e:b3:8c:c8:74:d7:7c:
c0:aa:16:ce:60:9c:05:54:ab:89:d8:58:d9:9c:1a:15:94:f8:
a0:65:29:e2:8d:75:a2:d8:8e:cd:0b:2f:fd:79:60:c9:32:aa:
4c:b7:08:bc:6c:dd:1b:e2:41:65:3b:b0:56:e4:9d:1e:fc:73:
d0:29:28:cf:10:d4:b2:40:98:db:15:e2:38:b2:1e:12:af:13:
d9:7a:24:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:30:44 2025 by rpki-client