Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
File: KiZGBSRa8gGcKTw3KPal4lXYnyU.mft (raw, json)
Hash identifier: gk8dzuYUb6tbH5gkTYleCgXM1vfT5fd886E9k/5LxKo=
Subject key identifier: 2E:BF:D2:17:19:D5:79:33:39:47:AD:5F:4F:D7:91:70:4B:65:D4:5A
Authority key identifier: 2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25
Certificate issuer: /CN=2a264605245af2019c293c3728f6a5e255d89f25
Certificate serial: 01984A09D5C3B42033439C2E456C6C0109C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 04:00:15 +0000
Manifest this update: Sun 27 Jul 2025 04:00:15 +0000
Manifest next update: Mon 28 Jul 2025 04:00:15 +0000
Files and hashes: 1: 3KSN_k3KfyRIpkOpKsbbz9Bqq5E.roa (hash: iHgOduhUsida+9pHg8iFsStpH/s/1dREHiJkoJW0aww=)
2: KiZGBSRa8gGcKTw3KPal4lXYnyU.crl (hash: HxD8oA0S17mDZ9xxil51O5nMwFPuoubWk1SCSa0JEeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d5:c3:b4:20:33:43:9c:2e:45:6c:6c:01:09:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a264605245af2019c293c3728f6a5e255d89f25
Validity
Not Before: Jul 27 04:00:15 2025 GMT
Not After : Jul 28 04:00:15 2025 GMT
Subject: CN=2ebfd21719d579333947ad5f4fd791704b65d45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:f3:aa:13:a2:b4:96:bc:7d:03:9c:06:18:
7a:49:04:25:99:89:82:8b:8a:ab:56:e1:e5:6d:f7:
85:71:d0:e8:d2:6c:42:47:fe:73:fa:6c:3b:01:25:
8e:bb:c7:35:ea:6b:3a:14:f1:b3:ef:84:2a:a2:13:
c7:8a:62:3f:08:a9:c4:2a:4a:59:d1:06:a8:43:9c:
bc:23:2c:a3:31:df:8c:25:5d:79:f7:4d:27:03:86:
1c:79:2e:6e:60:b1:49:25:e0:c7:00:c9:3d:27:00:
26:52:de:fe:0b:52:85:e5:42:43:8b:6b:5f:d3:2d:
c3:46:b4:36:aa:31:05:45:1d:96:ac:5f:17:f3:6b:
d8:c1:49:da:fa:81:6d:01:39:56:0d:2c:ac:de:e1:
df:e4:2f:87:27:f9:29:ce:d7:15:67:5f:ff:e9:60:
55:ff:a7:a5:ad:a6:b3:88:61:96:59:75:da:f3:a7:
f5:9c:ad:bb:1a:d8:c7:b0:72:e8:d9:23:81:1b:65:
3f:aa:3c:b4:2a:a9:1c:36:cc:fb:05:34:ae:01:b8:
dc:8f:54:b3:e8:c9:e4:34:b0:81:d0:ec:0c:1b:32:
a7:0a:02:fb:68:65:ec:5f:ae:74:0d:94:e1:b4:cd:
88:ca:19:0c:14:1c:2d:a3:13:bd:fd:5e:e2:27:fb:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BF:D2:17:19:D5:79:33:39:47:AD:5F:4F:D7:91:70:4B:65:D4:5A
X509v3 Authority Key Identifier:
keyid:2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ec:e6:14:7e:7e:9f:f4:23:53:1a:bf:41:c8:0f:95:35:5a:
b7:0f:93:7a:6c:be:7a:e9:42:ab:57:86:ba:01:6d:6d:35:88:
c4:d1:46:4f:61:06:f3:dd:37:e0:d2:3d:a5:8a:88:e6:d7:ee:
44:2a:05:79:e1:f1:38:9f:27:8e:34:23:60:7a:f0:0f:9e:4f:
aa:18:6a:5d:53:1d:45:09:0d:89:4a:e9:fd:3d:47:a1:7f:a6:
9e:64:26:d4:99:54:67:05:8e:01:fd:49:05:07:36:c8:27:69:
04:a6:15:b7:81:73:85:f5:0e:36:c4:57:85:d3:68:b6:78:33:
ba:75:7f:c1:f8:f8:45:f4:fb:1b:d8:91:4b:51:f2:f5:28:41:
e0:fc:fc:77:3d:82:b8:40:23:87:44:22:56:f2:76:29:c7:c8:
b7:a3:17:09:7f:88:1d:f8:37:20:0e:62:ac:87:08:23:93:15:
e7:e3:86:78:25:3b:50:cf:4a:af:ae:2a:eb:e2:4b:09:c2:f7:
35:a2:c4:b0:c2:f5:38:fd:37:d9:c8:d7:ee:53:33:ee:d2:cd:
8f:b0:a6:50:b9:9c:ae:51:c8:2f:99:fd:ca:32:5c:66:56:89:
3a:24:79:89:cd:46:4d:14:7a:4e:37:bb:c4:05:f8:40:ab:ff:
e5:2e:3b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:12 2025 by rpki-client