Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ed0654-724c-4e90-81ff-99f5cb7a3ca5/1/KiGxq-eH4lRkOR-tYdAOPzdrmM8.mft
File: KiGxq-eH4lRkOR-tYdAOPzdrmM8.mft (raw, json)
Hash identifier: qtA+886D/P+UQlVeHbX5Qt/ZCKAGWtS4zUVY4SwIL0Y=
Subject key identifier: 15:0D:34:74:68:A9:5C:22:88:79:3F:7F:B2:69:22:12:DA:2A:A7:48
Authority key identifier: 2A:21:B1:AB:E7:87:E2:54:64:39:1F:AD:61:D0:0E:3F:37:6B:98:CF
Certificate issuer: /CN=2a21b1abe787e25464391fad61d00e3f376b98cf
Certificate serial: 01984965F5D86107ACF0BEEAB90E52425D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KiGxq-eH4lRkOR-tYdAOPzdrmM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ed0654-724c-4e90-81ff-99f5cb7a3ca5/1/KiGxq-eH4lRkOR-tYdAOPzdrmM8.mft
Manifest number: 0B1C
Signing time: Sun 27 Jul 2025 01:01:15 +0000
Manifest this update: Sun 27 Jul 2025 01:01:15 +0000
Manifest next update: Mon 28 Jul 2025 01:01:15 +0000
Files and hashes: 1: HDOhzz0jBa_Gp9AJUMy27D9Cjlg.roa (hash: lm71x5ibbc8ZUL32IG9cJWwnD/vjqa8xr80jq2AaleE=)
2: KiGxq-eH4lRkOR-tYdAOPzdrmM8.crl (hash: csiO1R+ZEgc5d5kCqBjKnjdqUgEZR/fPvkS7jpAcp70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ed0654-724c-4e90-81ff-99f5cb7a3ca5/1/KiGxq-eH4lRkOR-tYdAOPzdrmM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ed0654-724c-4e90-81ff-99f5cb7a3ca5/1/KiGxq-eH4lRkOR-tYdAOPzdrmM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KiGxq-eH4lRkOR-tYdAOPzdrmM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:f5:d8:61:07:ac:f0:be:ea:b9:0e:52:42:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a21b1abe787e25464391fad61d00e3f376b98cf
Validity
Not Before: Jul 27 01:01:15 2025 GMT
Not After : Jul 28 01:01:15 2025 GMT
Subject: CN=150d347468a95c2288793f7fb2692212da2aa748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:b7:42:86:66:7d:0b:2c:02:94:1a:e0:1e:
42:8e:1a:a9:45:2e:5d:b4:af:74:f3:2c:93:87:80:
a5:9b:1b:87:b1:99:21:cf:ac:69:03:a2:5d:e9:d2:
e7:5b:ea:cf:6c:87:29:f3:5e:c9:10:78:e1:d1:6d:
99:80:56:85:e8:57:b8:ab:c5:a8:21:71:f7:c7:1b:
0f:61:80:91:db:96:60:71:c5:39:27:02:ee:f1:87:
1a:76:00:e6:0b:a1:b1:71:d9:90:9c:bc:b1:24:cb:
86:b9:ee:50:9c:95:5e:34:a8:0f:72:1a:5f:a8:f1:
76:c3:1c:e4:aa:0c:a2:4c:19:a5:29:78:0a:ba:33:
f8:d4:21:28:a5:92:cb:58:04:13:95:69:0c:2d:eb:
54:86:6a:c6:86:54:3e:9b:34:b2:a9:02:7a:fc:5b:
f9:dc:3a:ca:21:c9:2d:8f:32:ea:eb:49:44:8c:57:
6a:59:3b:95:ba:ae:1d:c2:1c:27:37:00:95:61:17:
4d:ef:19:eb:58:bc:e1:cf:38:b3:c0:f1:cc:1f:7d:
b5:1c:1a:2f:11:9f:c9:63:83:3e:60:d1:5d:b1:62:
bf:98:42:64:cc:54:c5:40:e3:38:92:9a:7f:cb:f9:
08:06:7e:3d:57:78:d7:61:1a:85:7c:a5:16:18:6e:
56:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0D:34:74:68:A9:5C:22:88:79:3F:7F:B2:69:22:12:DA:2A:A7:48
X509v3 Authority Key Identifier:
keyid:2A:21:B1:AB:E7:87:E2:54:64:39:1F:AD:61:D0:0E:3F:37:6B:98:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KiGxq-eH4lRkOR-tYdAOPzdrmM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ed0654-724c-4e90-81ff-99f5cb7a3ca5/1/KiGxq-eH4lRkOR-tYdAOPzdrmM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ed0654-724c-4e90-81ff-99f5cb7a3ca5/1/KiGxq-eH4lRkOR-tYdAOPzdrmM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6a:ba:f4:5f:56:df:72:5d:1f:95:f9:c3:b1:53:ed:17:e7:
97:67:e1:3a:58:fb:00:67:6a:fd:b0:f2:77:eb:0a:d1:77:e2:
73:59:a6:5f:24:a0:c8:2a:32:2b:8c:7b:d4:18:46:e5:96:fd:
0f:57:5f:1b:50:23:de:f1:8d:5e:c2:14:93:57:4c:5d:5c:b7:
c8:cc:d7:c1:ba:c1:dd:da:32:1f:e9:35:22:4a:78:6c:c1:e9:
63:98:bd:ed:a3:66:b2:5c:75:15:61:46:44:c7:13:40:65:ce:
c2:5e:56:92:2b:29:91:a8:6d:df:d3:84:c5:70:71:23:36:c4:
17:21:e2:15:9c:ca:5e:21:37:0b:6d:5d:f2:a1:64:46:68:4b:
97:aa:02:64:50:e5:19:b6:5f:7b:cd:d9:d5:a7:fb:87:7b:1a:
20:ad:f0:09:d4:75:65:74:50:f9:86:ec:90:9a:b1:50:ff:e5:
2a:10:af:9d:9b:7e:26:5b:3a:8a:b6:91:b2:24:95:52:cf:04:
c3:b8:68:8b:8b:81:fa:ef:b2:f7:9b:f2:fd:6b:e7:c2:7a:9f:
af:12:a3:b4:7f:8d:69:7f:1c:93:26:1a:13:31:a6:74:35:68:
0c:44:a8:39:19:80:e3:47:87:08:ec:94:17:57:eb:09:14:ec:
9f:5c:8b:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZfXYYQes8L7quQ5SQl0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMjFiMWFiZTc4N2UyNTQ2NDM5MWZhZDYxZDAwZTNmMzc2
Yjk4Y2YwHhcNMjUwNzI3MDEwMTE1WhcNMjUwNzI4MDEwMTE1WjAzMTEwLwYDVQQD
EygxNTBkMzQ3NDY4YTk1YzIyODg3OTNmN2ZiMjY5MjIxMmRhMmFhNzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqe3QoZmfQssApQa4B5CjhqpRS5d
tK908yyTh4ClmxuHsZkhz6xpA6Jd6dLnW+rPbIcp817JEHjh0W2ZgFaF6Fe4q8Wo
IXH3xxsPYYCR25ZgccU5JwLu8YcadgDmC6GxcdmQnLyxJMuGue5QnJVeNKgPchpf
qPF2wxzkqgyiTBmlKXgKujP41CEopZLLWAQTlWkMLetUhmrGhlQ+mzSyqQJ6/Fv5
3DrKIcktjzLq60lEjFdqWTuVuq4dwhwnNwCVYRdN7xnrWLzhzzizwPHMH321HBov
EZ/JY4M+YNFdsWK/mEJkzFTFQOM4kpp/y/kIBn49V3jXYRqFfKUWGG5W2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUNNHRoqVwiiHk/f7JpIhLaKqdIMB8GA1UdIwQY
MBaAFCohsavnh+JUZDkfrWHQDj83a5jPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2lHeHEtZUg0bFJrT1ItdFlkQU9QemRybU04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZDA2NTQtNzI0Yy00ZTkwLTgxZmYt
OTlmNWNiN2EzY2E1LzEvS2lHeHEtZUg0bFJrT1ItdFlkQU9QemRybU04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lZDA2NTQtNzI0Yy00ZTkwLTgxZmYtOTlmNWNiN2EzY2E1
LzEvS2lHeHEtZUg0bFJrT1ItdFlkQU9QemRybU04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmq69F9W
33JdH5X5w7FT7Rfnl2fhOlj7AGdq/bDyd+sK0Xfic1mmXySgyCoyK4x71BhG5Zb9
D1dfG1Aj3vGNXsIUk1dMXVy3yMzXwbrB3doyH+k1Ikp4bMHpY5i97aNmslx1FWFG
RMcTQGXOwl5Wkispkaht39OExXBxIzbEFyHiFZzKXiE3C21d8qFkRmhLl6oCZFDl
GbZfe83Z1af7h3saIK3wCdR1ZXRQ+YbskJqxUP/lKhCvnZt+Jls6iraRsiSVUs8E
w7hoi4uB+u+y95vy/WvnwnqfrxKjtH+NaX8ckyYaEzGmdDVoDESoORmA40eHCOyU
F1frCRTsn1yLlA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:07:23 2025 by rpki-client