Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
File: KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft (raw, json)
Hash identifier: Pq6PzbJl/r6p887vjBjyK32wCk8i7osSMvnzYLuprD4=
Subject key identifier: 70:25:34:CA:AB:E0:A8:2D:1D:74:90:F6:5A:D2:FA:17:7E:1A:8B:84
Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
Certificate issuer: /CN=283648aff886185ffce3626f090f119a3e4ede35
Certificate serial: 0198548D8DA5DDA9DF1AEEDE7C25D6716149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 05:00:19 +0000
Manifest this update: Tue 29 Jul 2025 05:00:19 +0000
Manifest next update: Wed 30 Jul 2025 05:00:19 +0000
Files and hashes: 1: KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl (hash: cWiiaXCNfeYCrBQR3CfxjXlTPfU5GA7IjHaJmJkWLRU=)
2: XhkT1eFNXwGFl9CWLS9N7T67Cu4.roa (hash: 48Vc4tJA9v+KllK28V53zCHphJsA0bfyopYkodUcdk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:8d:a5:dd:a9:df:1a:ee:de:7c:25:d6:71:61:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35
Validity
Not Before: Jul 29 05:00:19 2025 GMT
Not After : Jul 30 05:00:19 2025 GMT
Subject: CN=702534caabe0a82d1d7490f65ad2fa177e1a8b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:de:33:34:19:05:c4:88:aa:99:08:23:0e:
f6:32:b8:b4:10:f2:9f:21:37:cc:4e:22:b2:6a:cf:
de:56:22:51:37:97:b1:7f:51:1e:18:2b:bf:64:47:
08:6e:87:e0:c1:d8:55:f9:33:21:7e:66:ee:1d:bc:
ef:a4:f7:90:f9:dd:f7:81:c7:02:bc:e3:39:6c:94:
71:66:81:e6:45:dc:45:0a:18:41:4c:43:f9:0a:51:
29:f5:94:5a:0b:b4:a4:93:3f:da:b1:11:fc:ac:b3:
1f:f1:7a:1b:80:ae:ff:e0:b7:8b:e8:9d:3f:0a:89:
90:a2:16:44:8e:9b:13:be:5e:d7:f8:7e:46:33:1d:
f4:ab:93:0d:8d:40:10:7a:13:e7:f6:9b:19:e6:c4:
25:14:2b:16:00:6d:40:99:5c:b1:62:1f:7b:98:c7:
25:4f:c2:bc:6b:d0:d0:f3:7c:53:f7:4c:d5:10:5f:
fc:40:81:9a:8b:69:1f:c1:94:29:a5:fc:0a:d9:7d:
a6:de:df:7a:6e:1b:cb:39:7d:26:89:33:ca:87:22:
18:ff:2f:f5:16:e5:69:64:9a:69:93:cc:e4:c7:8d:
41:c4:ff:73:c0:ae:fa:54:0f:92:1c:6f:38:f6:86:
14:b9:27:8c:1b:cf:fa:2b:3b:0e:6e:2b:a8:60:5d:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:25:34:CA:AB:E0:A8:2D:1D:74:90:F6:5A:D2:FA:17:7E:1A:8B:84
X509v3 Authority Key Identifier:
keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:30:36:83:3a:88:ef:9c:a4:fc:63:81:d2:98:29:ea:9f:81:
52:d7:50:a0:07:da:73:10:20:74:4f:28:18:f0:43:2b:9a:c7:
77:a5:ac:94:17:42:cf:15:7e:7d:cc:cf:03:41:d0:1c:51:a0:
d5:fe:d0:89:ba:ca:18:b4:20:c6:f3:fa:1f:2c:3c:97:be:e1:
98:79:f3:de:c0:a0:3e:99:47:f3:3a:13:8b:54:cb:a0:c3:b6:
97:52:4e:e1:37:ab:19:24:18:38:04:fe:6e:10:42:5b:25:12:
cf:80:04:59:6c:28:45:63:37:d5:30:44:27:9c:48:ec:db:bd:
b8:eb:e3:6e:92:d8:8b:3e:c5:cf:72:14:f8:8d:9b:10:e5:e5:
f9:3b:8d:10:32:3e:55:99:d3:ad:13:bb:35:3e:16:a3:2b:0c:
8b:b8:48:5c:20:65:66:c3:60:31:89:c1:34:9f:6c:ce:4b:0a:
d5:a6:cc:14:93:c2:50:ea:10:8b:b1:ac:97:00:4e:91:86:41:
36:b7:0b:4d:3c:a8:41:bd:d1:11:61:06:a7:d8:7a:b5:10:ff:
15:7c:6d:29:4d:27:fa:17:cd:d8:78:6c:ee:be:b5:b0:9c:73:
b6:9f:5d:8b:bb:00:8d:c1:24:e8:e6:07:7e:85:c2:e0:84:b4:
f9:79:c1:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUjY2l3anfGu7efCXWcWFJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MzY0OGFmZjg4NjE4NWZmY2UzNjI2ZjA5MGYxMTlhM2U0
ZWRlMzUwHhcNMjUwNzI5MDUwMDE5WhcNMjUwNzMwMDUwMDE5WjAzMTEwLwYDVQQD
Eyg3MDI1MzRjYWFiZTBhODJkMWQ3NDkwZjY1YWQyZmExNzdlMWE4Yjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03zeMzQZBcSIqpkIIw72Mri0EPKf
ITfMTiKyas/eViJRN5exf1EeGCu/ZEcIbofgwdhV+TMhfmbuHbzvpPeQ+d33gccC
vOM5bJRxZoHmRdxFChhBTEP5ClEp9ZRaC7Skkz/asRH8rLMf8XobgK7/4LeL6J0/
ComQohZEjpsTvl7X+H5GMx30q5MNjUAQehPn9psZ5sQlFCsWAG1AmVyxYh97mMcl
T8K8a9DQ83xT90zVEF/8QIGai2kfwZQppfwK2X2m3t96bhvLOX0miTPKhyIY/y/1
FuVpZJppk8zkx41BxP9zwK76VA+SHG849oYUuSeMG8/6KzsObiuoYF1sIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAlNMqr4KgtHXSQ9lrS+hd+GouEMB8GA1UdIwQY
MBaAFCg2SK/4hhhf/ONibwkPEZo+Tt41MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iOGJkM2ItMDAyNi00ZDU2LWJiMjUt
NmE1YzljMGQ5MWU5LzEvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9iOGJkM2ItMDAyNi00ZDU2LWJiMjUtNmE1YzljMGQ5MWU5
LzEvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjA2gzqI
75yk/GOB0pgp6p+BUtdQoAfacxAgdE8oGPBDK5rHd6WslBdCzxV+fczPA0HQHFGg
1f7QibrKGLQgxvP6Hyw8l77hmHnz3sCgPplH8zoTi1TLoMO2l1JO4TerGSQYOAT+
bhBCWyUSz4AEWWwoRWM31TBEJ5xI7Nu9uOvjbpLYiz7Fz3IU+I2bEOXl+TuNEDI+
VZnTrRO7NT4WoysMi7hIXCBlZsNgMYnBNJ9szksK1abMFJPCUOoQi7GslwBOkYZB
NrcLTTyoQb3REWEGp9h6tRD/FXxtKU0n+hfN2Hhs7r61sJxztp9di7sAjcEk6OYH
foXC4IS0+XnBxw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:37:06 2025 by rpki-client