Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File: KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier: SINNnaEmul8euVBNEvhGSAVH46j7mxihMP2da0HMl0o=
Subject key identifier: 6C:F8:25:AF:17:CA:8D:84:42:B4:63:C0:67:34:54:65:7E:AE:E2:64
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 01988C8F28229DDE0F4E86060D51B2E071DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 02:00:48 +0000
Manifest this update: Sat 09 Aug 2025 02:00:48 +0000
Manifest next update: Sun 10 Aug 2025 02:00:48 +0000
Files and hashes: 1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: W3aGjR/sOrR2Yw5/Ki4oKLgoG4y0qw5RAT+OhnAl77c=)
2: LM876MaYaB8OnXBNDWvDIMOdaT0.roa (hash: dBnZE66nMAqtp/XETbnr6kLTMtvYsN54cnJkvnD4onk=)
3: SQmwwlkRfmzsbR8yXHtAP1cuD78.roa (hash: 70vEBGHpH3D42IAnxJUAJiHSfSkzd3seVU45VJv3ZjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:28:22:9d:de:0f:4e:86:06:0d:51:b2:e0:71:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: Aug 9 02:00:48 2025 GMT
Not After : Aug 10 02:00:48 2025 GMT
Subject: CN=6cf825af17ca8d8442b463c0673454657eaee264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:11:9e:08:1d:12:06:8e:9f:8d:48:ae:1c:
a6:8d:0f:e9:ee:c5:8f:c5:a8:58:4a:1b:68:18:85:
72:51:96:54:63:9a:5b:53:82:2f:c9:1d:c3:55:d2:
a5:e3:1b:1e:9f:3d:88:7a:ff:63:bd:05:db:66:b3:
b8:8a:b9:b1:07:d1:44:42:7e:06:d1:df:61:5e:61:
d5:18:e2:17:e3:93:5c:6d:73:75:75:92:fa:f6:f2:
61:3c:af:a9:85:cf:69:0f:04:60:e6:7c:d2:c1:c7:
9a:d4:fe:12:af:f6:08:a6:70:fe:e3:0b:b6:73:05:
85:5e:cd:b3:8e:8c:b6:ae:89:a4:b3:b6:fd:c7:75:
52:9d:38:93:b6:b8:b4:d2:33:04:0f:2e:1f:a0:c2:
ca:40:60:0e:cb:5f:87:08:3e:ed:85:15:39:c0:1c:
27:0e:18:bd:c8:b0:76:e1:58:02:85:88:7f:ad:b2:
51:57:c7:fe:85:ce:74:2e:db:1b:32:f7:21:eb:f8:
ad:3c:49:22:69:41:db:40:a5:e8:98:04:06:3a:c6:
0e:8a:d4:e2:6a:87:9e:08:6d:f4:af:97:2b:46:dd:
11:53:d8:82:14:9d:ef:40:a6:e3:52:56:fe:21:0f:
a3:b1:bb:a7:e9:ed:cb:0e:34:90:0e:8f:3e:b5:15:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F8:25:AF:17:CA:8D:84:42:B4:63:C0:67:34:54:65:7E:AE:E2:64
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:19:0d:78:29:54:6d:b4:4a:51:43:9e:87:78:05:a5:b5:20:
37:2b:36:7c:7e:4d:48:8d:66:61:fb:3c:5b:4c:09:d9:4b:d8:
90:9b:45:09:71:7a:07:5f:43:8b:4d:cb:1b:79:ea:ed:6b:9e:
b8:93:ec:82:ab:f5:b8:4a:c0:29:be:30:86:e3:ac:16:5d:8c:
79:4e:7f:14:6b:dc:2d:49:76:ec:75:78:0a:69:cb:a8:fd:56:
9d:65:4d:4e:b5:45:b5:15:dc:94:c1:96:10:73:fb:0c:f7:e9:
4e:84:58:1d:ab:7b:10:1a:43:9d:77:f7:4f:1e:5e:6e:58:4d:
a3:04:02:e4:a1:96:3e:ba:7e:05:b3:76:ae:3a:2f:8d:9b:bd:
62:19:3d:8b:95:d0:c3:e9:8f:fa:4c:8b:a0:44:c5:8a:25:27:
48:06:53:d6:e2:7a:ac:fa:40:da:52:e9:0d:ac:e3:b7:b5:8b:
59:31:a0:94:35:90:87:a9:2b:40:cc:db:99:f1:68:73:ac:0d:
f6:ca:2f:73:d5:ac:f8:78:ae:15:7b:83:89:57:01:cc:6f:a1:
34:61:61:58:ea:f5:5c:65:a1:97:31:e4:1e:9a:90:22:e6:04:
98:5a:02:5f:9b:b9:29:1b:df:08:e0:5b:fc:6a:d7:a1:e4:be:
55:9f:62:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:46:11 2025 by rpki-client