Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File: KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier: nKRirI2hOiblnYXZiBFC60y7/Zj5jXP8iDpqnziNRpY=
Subject key identifier: FA:57:FA:CF:66:5B:E7:76:A4:65:09:53:FB:F3:A4:6B:A4:D3:14:2E
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 019751C6692C3F554F9D12508F34D0BCE889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 23:00:46 +0000
Manifest this update: Sun 08 Jun 2025 23:00:46 +0000
Manifest next update: Mon 09 Jun 2025 23:00:46 +0000
Files and hashes: 1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: gEzLKDhfI3nL7HxKX+7XJbly9cab3OVbE5Ga5Z214Y0=)
2: LM876MaYaB8OnXBNDWvDIMOdaT0.roa (hash: dBnZE66nMAqtp/XETbnr6kLTMtvYsN54cnJkvnD4onk=)
3: SQmwwlkRfmzsbR8yXHtAP1cuD78.roa (hash: 70vEBGHpH3D42IAnxJUAJiHSfSkzd3seVU45VJv3ZjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:69:2c:3f:55:4f:9d:12:50:8f:34:d0:bc:e8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: Jun 8 23:00:46 2025 GMT
Not After : Jun 9 23:00:46 2025 GMT
Subject: CN=fa57facf665be776a4650953fbf3a46ba4d3142e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:f8:f6:ad:39:68:f3:6b:38:53:83:1e:0c:
6e:46:21:f2:c8:b1:d2:a2:9f:83:ba:a8:4d:1a:29:
25:b9:a5:c1:3b:e3:8d:dd:4e:54:30:3a:19:b3:f4:
17:30:71:b9:f5:61:7f:84:e3:93:d5:01:01:73:7d:
a2:57:65:3f:f7:71:77:ac:5c:6f:3c:d5:35:ae:f4:
7d:ad:d0:2e:14:6f:78:3a:a6:70:97:57:c1:54:01:
0d:9e:a5:d8:33:82:63:b5:44:02:55:c0:9d:bd:2b:
20:9d:f6:08:c5:53:4c:d0:c3:e4:e5:91:cd:b0:87:
6c:65:e9:b3:4f:23:41:17:91:1d:37:cf:ea:34:56:
5c:0b:4b:c9:d7:a1:65:80:06:51:95:42:ac:62:d2:
0c:43:75:65:38:1e:4c:01:1e:42:7e:cd:2c:23:07:
56:08:fb:d5:77:62:15:c3:b9:00:5b:de:90:38:cb:
b2:a4:a0:55:e2:6a:e4:b8:b5:19:c5:c5:ee:9a:c0:
4c:20:54:38:dc:cc:b5:7b:b6:fd:5c:ff:58:69:47:
70:86:c7:a4:38:ce:48:2a:07:7a:73:55:08:9e:e8:
c7:3e:11:a6:38:6a:e0:5a:bd:e7:a5:bd:31:87:f5:
30:86:0d:4e:30:42:03:19:e3:ac:40:00:8d:1a:be:
48:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:57:FA:CF:66:5B:E7:76:A4:65:09:53:FB:F3:A4:6B:A4:D3:14:2E
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f2:e0:18:62:b1:e5:9d:05:1e:c2:6e:89:d5:5f:80:67:5b:
02:11:73:56:cf:87:c2:0b:61:a3:a1:f5:1b:57:ad:f5:52:e0:
99:f1:58:7e:ef:bd:cd:e4:14:12:77:62:2d:b2:2e:aa:cc:2b:
7e:25:f7:13:65:a7:f2:4b:16:99:f9:ab:7a:cd:d0:50:ad:e4:
44:34:32:01:1c:52:16:27:f6:cb:2a:06:07:f2:f3:8d:e7:45:
27:6f:7c:90:6c:75:d2:51:a1:fd:5d:ff:45:95:fb:b9:d0:98:
8f:16:91:7f:81:b3:09:83:f1:6d:0c:bd:6c:c3:56:f4:00:00:
e4:ef:8e:29:8d:8d:f1:b4:b5:1a:c9:1d:0a:b3:af:b2:ce:56:
6c:6a:2c:ed:c3:55:d3:83:44:1b:fd:21:6a:16:c8:2b:f5:dc:
a1:b8:d6:cc:20:d6:09:61:e5:0a:61:00:3e:00:28:8b:a1:d4:
d5:08:78:06:5f:79:e4:2a:cb:9d:75:98:89:00:9f:83:c6:80:
2d:30:9a:fa:30:5e:15:fe:e2:42:d7:42:31:88:c7:26:7e:3a:
36:f1:01:dc:2c:6e:57:e8:0b:28:93:1d:c4:ab:e7:68:b1:d5:
a1:56:89:d6:44:42:09:e5:7e:5a:08:31:c6:b0:09:c5:52:d2:
71:e1:bc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:31:25 2025 by rpki-client