Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
File: KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft (raw, json)
Hash identifier: jbxMjQQxNOeEMPs3hzkpa3L397EHijlwmB2e8dNoiV8=
Subject key identifier: E3:43:50:72:5A:A3:78:8A:0D:42:D8:37:17:C5:1E:A7:FC:FD:43:D4
Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
Certificate issuer: /CN=283648aff886185ffce3626f090f119a3e4ede35
Certificate serial: 01974A0CC03694DBD8B8029C36E75E23D09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 11:00:39 +0000
Manifest this update: Sat 07 Jun 2025 11:00:39 +0000
Manifest next update: Sun 08 Jun 2025 11:00:39 +0000
Files and hashes: 1: KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl (hash: 6D4hFJTyLW5EsksnNFt4OWOz0O0u+sk9iSLou0rItos=)
2: XhkT1eFNXwGFl9CWLS9N7T67Cu4.roa (hash: 48Vc4tJA9v+KllK28V53zCHphJsA0bfyopYkodUcdk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:c0:36:94:db:d8:b8:02:9c:36:e7:5e:23:d0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35
Validity
Not Before: Jun 7 11:00:39 2025 GMT
Not After : Jun 8 11:00:39 2025 GMT
Subject: CN=e34350725aa3788a0d42d83717c51ea7fcfd43d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:18:2b:00:3c:aa:6a:16:75:44:19:f8:0b:2c:
fb:16:bc:5c:dd:57:ca:dd:be:a4:7e:dd:61:3d:38:
c8:30:f7:44:dc:ca:b3:e6:91:f5:f3:b4:ce:67:b3:
20:e0:ba:2a:da:23:b7:49:5c:f1:27:95:c9:6b:f4:
3c:5e:d4:3a:7a:cd:71:8a:1d:01:0a:56:6c:6e:50:
14:c7:34:e7:96:dc:83:dd:f6:65:25:36:78:75:7e:
56:09:61:27:04:21:e4:71:ba:67:5a:84:0c:f9:19:
4d:41:40:66:01:a2:cd:d1:22:ce:68:e2:ab:ad:ff:
a8:d8:f1:17:2d:35:72:ce:ea:9b:9a:07:4b:f1:8d:
40:10:b8:74:85:17:99:45:da:8f:21:71:ed:42:dd:
0f:e1:ef:84:ea:14:ed:a3:b3:8f:b0:26:70:6c:f7:
b8:35:3b:f6:61:26:6f:28:22:d3:f9:7e:02:50:de:
1d:5c:cb:e4:16:49:a6:d9:8f:b8:75:8a:73:3f:17:
d9:6a:b3:f6:a5:24:4c:b0:d2:e1:86:4b:b9:f9:43:
19:a3:2e:0b:8d:8c:be:43:5a:be:94:33:17:08:7d:
b6:37:bf:2b:6c:bb:42:39:10:11:a7:cb:f3:ae:02:
0c:1d:20:4d:f8:d2:4c:e3:9b:ab:b7:6b:d1:b4:0e:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:43:50:72:5A:A3:78:8A:0D:42:D8:37:17:C5:1E:A7:FC:FD:43:D4
X509v3 Authority Key Identifier:
keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9e:04:3b:37:50:bf:62:18:fc:96:ca:81:9e:da:45:a1:8d:
7a:14:62:78:4e:7c:7e:bc:3a:92:35:e2:06:12:cc:bd:2f:3c:
ac:3b:03:eb:61:67:94:ae:a9:c8:bc:38:f5:4f:fd:80:8e:51:
9b:37:20:bf:4e:7c:a2:81:de:8b:57:7b:60:4d:8a:f7:07:18:
b3:83:43:5a:ba:e8:91:4e:b9:b6:35:7c:09:27:9a:e5:1c:7f:
1a:2f:b9:b2:f8:47:91:16:00:17:fa:2c:da:ee:d1:f0:7c:23:
8d:2d:40:78:13:54:71:fe:e3:03:e7:89:59:bc:65:b2:2a:a4:
b7:7e:7f:ce:d2:7c:44:2e:0e:a5:bf:2f:11:1e:93:6d:bd:48:
15:ef:a4:1b:76:13:99:b3:b1:c8:fc:d7:c9:aa:17:e1:65:76:
b1:02:1e:ae:07:23:a2:d0:b6:9a:10:66:7e:c8:39:da:0c:88:
40:d7:69:a8:5c:a9:b2:cc:f8:81:d1:cb:ea:9a:22:03:9d:2e:
e9:ec:d4:b2:10:a4:4d:59:d0:36:a8:c5:1e:c1:6d:15:ac:13:
8e:3c:4f:f2:7d:57:4f:ac:13:58:43:87:f0:ee:03:f8:d8:47:
8a:69:bb:12:e2:b5:40:6d:be:eb:e7:91:77:a8:e6:a7:1d:23:
39:a5:91:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDMA2lNvYuAKcNudeI9CeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MzY0OGFmZjg4NjE4NWZmY2UzNjI2ZjA5MGYxMTlhM2U0
ZWRlMzUwHhcNMjUwNjA3MTEwMDM5WhcNMjUwNjA4MTEwMDM5WjAzMTEwLwYDVQQD
EyhlMzQzNTA3MjVhYTM3ODhhMGQ0MmQ4MzcxN2M1MWVhN2ZjZmQ0M2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hgrADyqahZ1RBn4Cyz7Frxc3VfK
3b6kft1hPTjIMPdE3Mqz5pH187TOZ7Mg4Loq2iO3SVzxJ5XJa/Q8XtQ6es1xih0B
ClZsblAUxzTnltyD3fZlJTZ4dX5WCWEnBCHkcbpnWoQM+RlNQUBmAaLN0SLOaOKr
rf+o2PEXLTVyzuqbmgdL8Y1AELh0hReZRdqPIXHtQt0P4e+E6hTto7OPsCZwbPe4
NTv2YSZvKCLT+X4CUN4dXMvkFkmm2Y+4dYpzPxfZarP2pSRMsNLhhku5+UMZoy4L
jYy+Q1q+lDMXCH22N78rbLtCORARp8vzrgIMHSBN+NJM45urt2vRtA5nbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONDUHJao3iKDULYNxfFHqf8/UPUMB8GA1UdIwQY
MBaAFCg2SK/4hhhf/ONibwkPEZo+Tt41MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iOGJkM2ItMDAyNi00ZDU2LWJiMjUt
NmE1YzljMGQ5MWU5LzEvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9iOGJkM2ItMDAyNi00ZDU2LWJiMjUtNmE1YzljMGQ5MWU5
LzEvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZ4EOzdQ
v2IY/JbKgZ7aRaGNehRieE58frw6kjXiBhLMvS88rDsD62FnlK6pyLw49U/9gI5R
mzcgv058ooHei1d7YE2K9wcYs4NDWrrokU65tjV8CSea5Rx/Gi+5svhHkRYAF/os
2u7R8HwjjS1AeBNUcf7jA+eJWbxlsiqkt35/ztJ8RC4Opb8vER6Tbb1IFe+kG3YT
mbOxyPzXyaoX4WV2sQIergcjotC2mhBmfsg52gyIQNdpqFypssz4gdHL6poiA50u
6ezUshCkTVnQNqjFHsFtFawTjjxP8n1XT6wTWEOH8O4D+NhHimm7EuK1QG2+6+eR
d6jmpx0jOaWR5g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:30 2025 by rpki-client