Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: R7e5Egc/pXNAlvFYfwvscL3ChfwNHZOBZIKnZ57MoGA=
Subject key identifier: 5D:05:17:BD:32:FF:DD:75:92:6C:3A:DF:19:8B:E6:A7:06:30:58:E6
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 0198D5160043A9629FFEAB8C97E6A7BBA56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 11D7
Signing time: Sat 23 Aug 2025 04:00:45 +0000
Manifest this update: Sat 23 Aug 2025 04:00:45 +0000
Manifest next update: Sun 24 Aug 2025 04:00:45 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: 3kLVs2vVCkamYn3zkizZtpb3am4e4ae/VElRH6JGsYc=)
2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=)
3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:00:43:a9:62:9f:fe:ab:8c:97:e6:a7:bb:a5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Aug 23 04:00:45 2025 GMT
Not After : Aug 24 04:00:45 2025 GMT
Subject: CN=5d0517bd32ffdd75926c3adf198be6a7063058e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:43:d2:e1:fd:a1:15:9c:5c:1f:c2:3c:91:eb:
98:fb:b4:8a:eb:6d:f1:08:54:dc:01:31:bf:8c:db:
78:c7:a5:af:a9:18:f7:4b:c5:3c:b6:83:7e:41:09:
f7:f7:f8:54:60:c2:9e:e4:1b:48:90:ce:71:78:2d:
85:ac:23:ea:c6:5b:4c:09:5f:2e:f9:c5:a7:98:d3:
3a:e8:2c:54:a0:08:11:b1:2c:20:d6:a9:00:9a:40:
cd:2b:c3:2f:3d:2f:e3:19:f8:7d:ff:08:20:ad:66:
59:2e:9b:75:a3:c8:9e:d2:43:ac:05:21:d4:bd:97:
06:36:7a:1d:86:14:0e:d1:e6:fc:6d:51:39:41:63:
9d:63:64:f7:7b:35:66:7b:1a:88:3c:38:ac:a1:db:
cb:f7:61:4e:34:0e:34:cf:e2:4b:31:96:de:32:ff:
27:fe:62:9b:fa:c8:a8:65:bc:a4:87:db:3b:90:44:
32:cf:08:75:f6:4c:13:8c:43:7a:ef:e8:15:11:d3:
99:cb:31:4b:17:68:e8:fd:b4:41:ac:e3:b6:6d:14:
3b:82:f9:0f:e5:14:03:bb:15:7f:09:52:a4:e5:8c:
27:a2:cd:d1:ff:44:ec:aa:8a:b6:1a:6d:4f:d8:0b:
51:40:9c:d4:4c:45:24:8a:a9:ee:9b:61:b5:d6:e2:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:05:17:BD:32:FF:DD:75:92:6C:3A:DF:19:8B:E6:A7:06:30:58:E6
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a8:f5:86:4a:1f:4a:23:8f:30:c0:50:e7:9d:7d:af:c3:74:
60:9a:c1:16:e5:1d:80:e1:87:6a:b1:20:de:0d:37:53:f5:a1:
71:78:d3:4b:9c:12:52:4d:b5:62:0f:ec:43:0c:59:11:ec:3d:
c6:88:96:85:e5:8c:dc:0c:4b:ec:71:06:99:89:32:6e:2b:e3:
bb:3b:dd:95:d5:df:6c:18:12:9c:fc:6f:e5:ac:59:07:28:44:
1c:52:aa:8f:b2:eb:76:81:5f:84:a6:26:cd:a5:a9:c3:c7:2f:
3b:fd:43:3c:87:c0:34:7a:67:9a:02:b6:f9:89:19:a9:3e:ff:
a1:b3:cc:68:49:12:bb:9f:25:2b:0a:06:d0:ab:33:50:d7:a5:
46:b7:3c:db:a1:58:18:4a:05:76:01:55:73:4c:28:b5:0a:91:
8e:bd:2b:8c:6e:ac:c0:17:3c:38:da:68:8a:1a:34:c8:af:72:
fe:68:b4:c6:07:c1:3f:7f:c5:37:92:b4:dd:59:25:43:a8:6d:
fc:9f:84:dc:09:1c:59:87:27:b5:f4:15:5d:55:c7:dc:09:d7:
ed:59:dc:0f:2b:fe:56:21:34:8a:b1:6c:79:64:26:b4:35:1c:
84:56:56:c5:b7:6d:9b:8d:c3:c2:18:49:e5:79:23:8f:4f:74:
c2:ea:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:37 2025 by rpki-client