Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json)
Hash identifier: KmSi4WNVDbfbwm+WeDdtqR/IwsSdnuogZ6RLBV0wFBw=
Subject key identifier: 21:86:5D:89:3E:97:11:1A:00:9D:3B:01:A6:7B:C5:F7:09:0E:E5:8A
Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Certificate serial: 0199221F63931C4B875937769B9A30BBAD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
Manifest number: 0FB3
Signing time: Sun 07 Sep 2025 03:01:46 +0000
Manifest this update: Sun 07 Sep 2025 03:01:46 +0000
Manifest next update: Mon 08 Sep 2025 03:01:46 +0000
Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: MP4IEBde+ECbIji5u8Cv6BzBg9PSxSThgTfpYnR/h6c=)
2: VH29zUdUoDMFkb4I3pkZNKsYstE.roa (hash: 1yNsQGwt5wFqKyahcKf4KUa3JWkLXkh+qcfoDSK2Rlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:63:93:1c:4b:87:59:37:76:9b:9a:30:bb:ad:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Validity
Not Before: Sep 7 03:01:46 2025 GMT
Not After : Sep 8 03:01:46 2025 GMT
Subject: CN=21865d893e97111a009d3b01a67bc5f7090ee58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:38:30:e7:5d:bf:15:7d:db:a7:dc:82:48:
45:2c:11:00:79:d8:40:7b:39:44:d7:26:d5:9d:91:
0e:7a:72:34:67:28:8c:99:f5:09:c5:7f:97:15:2b:
7c:15:d4:aa:e8:0d:df:e2:9f:7b:0a:6b:f8:bd:44:
5e:97:16:18:57:85:da:2d:fb:3f:bb:bf:97:18:b6:
2f:44:28:8c:ae:21:0e:a4:80:21:f9:0b:61:2e:7b:
df:f4:b3:a6:10:8e:c0:0c:45:ce:55:39:1f:f2:60:
4a:56:0d:7f:8c:e2:42:39:25:c0:2f:33:fc:77:de:
01:2a:cb:01:3a:40:d1:83:08:c2:78:af:b5:92:d7:
44:2f:0a:46:9b:d4:b5:20:a5:28:4f:d7:fc:2c:21:
69:eb:ba:1a:1d:ad:25:80:0d:f0:70:43:10:73:62:
93:b9:01:0d:f9:5d:d9:57:9f:d4:c7:a5:34:3f:77:
e3:20:d1:1b:e7:49:aa:e0:4d:69:5c:9d:04:8a:97:
4e:3a:02:ea:61:52:f1:59:94:e8:d2:3c:a5:27:ce:
93:26:6d:3e:93:43:41:b4:ef:90:7f:da:22:3b:76:
81:bd:a8:05:ee:61:62:4f:f8:de:58:cd:28:93:94:
d3:5e:50:3b:e7:2c:f7:1f:d7:4a:c3:56:f9:ca:4e:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:86:5D:89:3E:97:11:1A:00:9D:3B:01:A6:7B:C5:F7:09:0E:E5:8A
X509v3 Authority Key Identifier:
keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8a:86:f7:27:c5:2c:f4:b8:28:4f:53:fd:fb:72:7d:2e:84:
f5:c4:e8:79:8c:90:b9:57:9f:88:a4:ff:9d:6c:01:96:20:61:
a8:0b:bf:64:48:91:34:59:69:bf:2b:ca:2e:f5:41:f1:3c:49:
43:d6:5b:23:ce:da:ef:8f:d2:01:b7:66:8a:a9:43:f3:4e:9f:
04:aa:59:0e:35:9a:c5:d2:9a:ff:88:52:5f:49:51:33:e5:92:
a1:2c:97:33:c5:67:09:f7:88:a2:f1:79:c2:d3:2e:35:5c:49:
de:af:f0:77:8b:9a:9e:7a:d1:6c:e3:1e:09:4c:10:96:64:3e:
82:2d:ba:4f:92:74:d9:b9:60:4b:db:b2:dd:c5:d9:24:b9:90:
77:cd:b7:5d:2e:82:4d:4e:fc:cb:e5:0c:b4:b8:35:58:c9:a0:
fa:09:f4:4e:1e:e6:a4:d5:99:dd:d6:7a:da:1f:df:42:0b:df:
9f:07:b3:4d:1b:bc:e4:a6:9f:51:91:21:fc:67:35:d1:34:fd:
3c:ed:d0:52:1b:18:94:41:30:46:15:a2:04:4f:14:55:b0:0f:
20:41:1a:6d:d0:b8:9f:19:3c:6d:76:07:6f:a7:91:b5:d4:ae:
a8:16:9a:65:32:b7:43:f2:bf:4a:71:33:87:ee:59:b8:03:0c:
74:a1:c1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:40 2025 by rpki-client