Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File: KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier: 7c436Wl5pyGmcQ6+iV0mztPHFLxI0Fm/NKd6b8/WdhE=
Subject key identifier: EC:88:14:C7:F3:33:5E:8F:C1:74:68:FC:16:FA:A3:59:E2:B3:FD:53
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 0197801FAB9F3AE0737CBBA35DED68FBAC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number: 1599
Signing time: Tue 17 Jun 2025 23:00:48 +0000
Manifest this update: Tue 17 Jun 2025 23:00:48 +0000
Manifest next update: Wed 18 Jun 2025 23:00:48 +0000
Files and hashes: 1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: CmJkMRt6p+Rxw7WBTBBhhCAkiPcTptnbREDauVpWLrA=)
2: LM876MaYaB8OnXBNDWvDIMOdaT0.roa (hash: dBnZE66nMAqtp/XETbnr6kLTMtvYsN54cnJkvnD4onk=)
3: SQmwwlkRfmzsbR8yXHtAP1cuD78.roa (hash: 70vEBGHpH3D42IAnxJUAJiHSfSkzd3seVU45VJv3ZjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:1f:ab:9f:3a:e0:73:7c:bb:a3:5d:ed:68:fb:ac:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: Jun 17 23:00:48 2025 GMT
Not After : Jun 18 23:00:48 2025 GMT
Subject: CN=ec8814c7f3335e8fc17468fc16faa359e2b3fd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:96:16:8e:f9:31:6f:65:f2:a6:5d:c8:c6:d7:
62:b6:e6:81:2c:72:7e:2b:fa:0c:2a:aa:85:ce:bd:
1e:7a:ce:af:88:95:58:9b:09:28:12:87:25:34:ea:
23:c9:9a:99:e2:10:e7:ca:60:93:4b:5d:ef:2b:df:
22:74:b2:e8:8a:c2:f9:9d:6b:c0:bb:c4:a4:02:c7:
b7:41:c9:9f:c0:2e:7c:d1:b4:56:53:06:09:03:79:
ab:b4:c9:5f:c4:74:2e:11:a7:78:ae:40:b6:8c:96:
a2:e8:7f:c4:bd:07:3e:91:1d:c5:13:ca:a2:e5:97:
11:7c:df:76:a6:aa:03:05:00:53:a5:cc:be:8f:04:
7a:de:50:3d:52:4b:1e:94:4f:59:08:6f:0f:c8:75:
95:a3:5b:5e:1b:35:be:41:5f:6f:19:40:e5:20:2e:
fc:8b:d9:42:60:3b:ae:87:e3:1d:93:7f:df:46:d7:
76:36:66:70:2b:b4:12:17:85:45:cd:ab:2a:4e:db:
3e:bc:9a:24:ce:59:97:44:51:a2:6e:c1:39:c5:3c:
24:27:3f:44:5e:e5:6b:63:b5:3d:0d:9a:61:c2:75:
71:55:23:e1:a3:7f:fe:74:64:e0:7f:db:11:d9:65:
90:b3:f8:c3:51:4c:a8:28:30:10:dd:6a:7d:5e:87:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:88:14:C7:F3:33:5E:8F:C1:74:68:FC:16:FA:A3:59:E2:B3:FD:53
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ea:e5:1f:18:9c:27:e4:0c:a8:5f:9d:d6:c6:b2:83:e5:70:
d3:65:c3:43:da:b7:54:b4:35:f0:6b:ce:39:37:7f:a7:b2:08:
a4:04:2b:6a:05:a7:ad:a1:b1:c8:3c:0c:eb:da:78:1a:95:45:
6b:6b:95:b1:ca:0f:de:3e:36:6c:a6:89:94:f8:90:28:75:ea:
63:f5:57:62:b4:01:0f:68:d1:66:9f:2c:41:95:bf:71:7e:81:
bf:fc:41:9c:3a:2d:1d:f0:43:b2:16:93:44:69:1c:84:65:c3:
15:6b:1b:60:0f:1b:62:d4:4c:87:84:4a:4e:d0:02:03:17:30:
94:3f:42:a1:ff:1a:16:dd:c1:14:2b:23:eb:87:e3:df:9d:44:
99:9f:e4:d5:97:e7:79:38:81:c5:28:d4:a6:10:71:c5:27:a7:
e4:7a:9f:5d:83:85:fe:e2:99:bb:a9:62:42:e5:5a:c8:3c:0a:
9f:fc:31:6b:e4:3e:3e:c2:d5:77:a0:c2:ae:aa:85:ab:9b:ca:
d2:41:91:1f:82:5a:a5:df:1c:62:dd:e0:5b:13:8d:ea:13:d8:
0f:b7:8f:4a:a0:48:2d:4b:1d:09:fe:1a:83:61:9b:b9:f3:ff:
86:e6:ef:22:7b:2f:94:4d:5a:41:9b:4f:3f:b8:a9:36:e5:3f:
b1:85:95:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAH6ufOuBzfLujXe1o+6yIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NjY4N2ZiNjRhNzdmMDEwMGJhZjIzZDRmMzQxZWNlNzc1
OTUwZTUwHhcNMjUwNjE3MjMwMDQ4WhcNMjUwNjE4MjMwMDQ4WjAzMTEwLwYDVQQD
EyhlYzg4MTRjN2YzMzM1ZThmYzE3NDY4ZmMxNmZhYTM1OWUyYjNmZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25YWjvkxb2Xypl3IxtdituaBLHJ+
K/oMKqqFzr0ees6viJVYmwkoEoclNOojyZqZ4hDnymCTS13vK98idLLoisL5nWvA
u8SkAse3QcmfwC580bRWUwYJA3mrtMlfxHQuEad4rkC2jJai6H/EvQc+kR3FE8qi
5ZcRfN92pqoDBQBTpcy+jwR63lA9UkselE9ZCG8PyHWVo1teGzW+QV9vGUDlIC78
i9lCYDuuh+Mdk3/fRtd2NmZwK7QSF4VFzasqTts+vJokzlmXRFGibsE5xTwkJz9E
XuVrY7U9DZphwnVxVSPho3/+dGTgf9sR2WWQs/jDUUyoKDAQ3Wp9Xoct/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyIFMfzM16PwXRo/Bb6o1nis/1TMB8GA1UdIwQY
MBaAFChmh/tkp38BALryPU80Hs53WVDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0dhSC0yU25md0VBdXZJOVR6UWV6bmRaVU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yMDUyYWQtM2Q0MS00NWRhLTg0NzQt
NjMzOWY2YjM2YmNiLzEvS0dhSC0yU25md0VBdXZJOVR6UWV6bmRaVU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yMDUyYWQtM2Q0MS00NWRhLTg0NzQtNjMzOWY2YjM2YmNi
LzEvS0dhSC0yU25md0VBdXZJOVR6UWV6bmRaVU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZerlHxic
J+QMqF+d1sayg+Vw02XDQ9q3VLQ18GvOOTd/p7IIpAQragWnraGxyDwM69p4GpVF
a2uVscoP3j42bKaJlPiQKHXqY/VXYrQBD2jRZp8sQZW/cX6Bv/xBnDotHfBDshaT
RGkchGXDFWsbYA8bYtRMh4RKTtACAxcwlD9Cof8aFt3BFCsj64fj351EmZ/k1Zfn
eTiBxSjUphBxxSen5HqfXYOF/uKZu6liQuVayDwKn/wxa+Q+PsLVd6DCrqqFq5vK
0kGRH4Japd8cYt3gWxON6hPYD7ePSqBILUsdCf4ag2GbufP/hubvInsvlE1aQZtP
P7ipNuU/sYWV2Q==
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:34:21 2025 by rpki-client