Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File: KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier: S70aozQpu9PJEVda+3zf2t8aU7yd5YEXl9oEIF09bfg=
Subject key identifier: DB:3C:6F:1A:DB:2F:30:99:57:B5:42:70:32:8A:6C:D0:30:46:9C:49
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 0198529F7652C1C54CD4A94428EE0067C33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 20:00:38 +0000
Manifest this update: Mon 28 Jul 2025 20:00:38 +0000
Manifest next update: Tue 29 Jul 2025 20:00:38 +0000
Files and hashes: 1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: Lm+eptHbt8hwoMvGbnB0D59zh9NTUZNPjwtSMeS7Y20=)
2: LM876MaYaB8OnXBNDWvDIMOdaT0.roa (hash: dBnZE66nMAqtp/XETbnr6kLTMtvYsN54cnJkvnD4onk=)
3: SQmwwlkRfmzsbR8yXHtAP1cuD78.roa (hash: 70vEBGHpH3D42IAnxJUAJiHSfSkzd3seVU45VJv3ZjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:76:52:c1:c5:4c:d4:a9:44:28:ee:00:67:c3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: Jul 28 20:00:38 2025 GMT
Not After : Jul 29 20:00:38 2025 GMT
Subject: CN=db3c6f1adb2f309957b54270328a6cd030469c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:28:d4:c2:fa:5f:0d:d3:7a:17:47:b2:6f:
8b:de:98:5e:7c:f1:c4:a6:35:25:6a:61:bc:cf:96:
8f:78:bd:0a:13:a0:77:a7:c5:62:db:a1:fa:de:85:
3a:82:b2:3e:6b:43:f0:47:be:95:1c:fd:02:0e:65:
72:d0:c0:4f:4c:88:e3:75:6b:b2:87:25:c2:44:68:
ef:4a:d0:86:5b:f8:20:cf:06:7d:32:c1:fc:70:77:
46:11:b6:2b:03:f7:5e:55:df:f9:87:86:ce:83:7b:
e6:d9:3e:21:f7:bf:b0:4a:c5:9e:39:3d:06:b0:69:
75:3e:ef:21:e5:20:6d:bd:c0:56:dc:6a:86:33:61:
46:44:a2:47:59:26:95:eb:04:ff:cd:7e:d6:88:52:
3a:e6:3b:46:a9:7e:85:48:a8:67:fb:47:f7:85:5d:
f9:c8:6c:e2:cf:11:ec:a0:05:cf:c4:71:30:b7:c8:
82:70:e1:26:10:35:e8:73:1e:8c:6b:85:15:45:4c:
06:e8:f3:07:18:d9:66:1f:6a:fd:fe:f3:22:8e:e3:
73:e8:9e:07:f4:f6:43:06:0f:46:b9:1f:06:c1:b7:
64:b9:22:cf:47:a2:ac:a1:41:3d:d7:72:79:b5:be:
ad:e2:bb:d2:5d:7d:60:0a:78:87:8a:02:a5:57:44:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3C:6F:1A:DB:2F:30:99:57:B5:42:70:32:8A:6C:D0:30:46:9C:49
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:38:ad:1d:da:0e:17:43:99:19:f2:49:b9:fa:19:be:2c:96:
3c:22:3d:21:10:65:fd:a3:70:e1:d4:1f:86:14:33:d0:5b:21:
72:b9:9b:2d:98:36:7c:df:5c:e7:81:cd:1c:96:9f:f3:38:2c:
9a:47:6f:3d:81:a3:69:e8:ee:68:55:ae:5d:af:9e:a0:32:4c:
68:dc:f1:14:51:85:b8:37:9a:48:b2:b1:9a:2c:40:13:9a:9c:
40:73:8d:ac:a2:1c:be:91:04:a8:11:75:10:fa:15:42:1b:0c:
8f:8b:ec:73:63:7e:f5:70:75:30:09:8d:45:e5:4c:47:36:88:
0e:b4:1a:a0:1f:74:8c:d8:ff:67:8f:01:51:3b:a9:d3:75:3a:
47:80:74:5e:e8:ac:b4:bd:d5:fb:a2:ee:88:16:0f:49:2c:3a:
3d:b2:3d:97:c2:93:4c:9d:2f:fd:ce:74:fb:92:bd:23:06:a1:
f1:6d:83:08:2f:7e:34:a7:ff:bc:42:53:78:94:89:26:e5:5d:
66:85:51:07:10:ca:1f:b3:54:8f:ae:1a:49:fb:63:f1:84:39:
04:3f:43:aa:f2:70:78:bf:39:1e:2b:0e:68:15:c3:4d:79:d4:
03:3c:61:31:06:cd:c5:8d:29:90:63:e4:26:89:fa:eb:16:76:
5e:03:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:34:30 2025 by rpki-client