
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: Yei38GNk9Fla2mdN8yyjqmbiKl3U8835/ho3Bj0hozg=
Subject key identifier: 6D:9F:52:2F:14:AD:B6:FB:52:44:C0:9F:FA:1C:40:26:48:80:43:4F
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 0199FAA1405FD5AC053BB43AD87F7995AF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 126F
Signing time: Sun 19 Oct 2025 04:01:35 +0000
Manifest this update: Sun 19 Oct 2025 04:01:35 +0000
Manifest next update: Mon 20 Oct 2025 04:01:35 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: uCO9HToeCsvzHcDf6ksIdvU5YG/+lxbzQVgPyi8J8Lg=)
2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=)
3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:40:5f:d5:ac:05:3b:b4:3a:d8:7f:79:95:af:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Oct 19 04:01:35 2025 GMT
Not After : Oct 20 04:01:35 2025 GMT
Subject: CN=6d9f522f14adb6fb5244c09ffa1c40264880434f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:6e:da:ab:3b:47:e9:42:7d:d9:fa:e5:79:
da:d6:8e:aa:60:56:8d:48:1e:c7:95:c1:50:aa:db:
d5:06:e7:30:b8:e4:96:40:4b:ad:4f:bf:ac:db:16:
63:f5:01:be:63:84:7c:33:33:36:23:75:0a:7b:28:
1a:d7:82:13:d9:95:dc:90:fa:94:3a:74:0d:53:e2:
3a:46:b8:38:4b:db:df:80:f5:6e:6e:c1:b2:2c:11:
17:15:22:1b:ef:b4:95:aa:59:77:2e:73:91:a6:c8:
66:93:03:85:24:44:2b:60:af:46:de:00:b9:4b:66:
40:e5:ed:c3:f3:6f:85:54:7a:2c:86:d5:20:37:0a:
84:6c:28:bf:de:28:c7:a9:42:c9:79:06:2f:12:78:
36:54:5c:23:54:53:92:91:cd:8c:42:bd:09:0d:e1:
53:43:46:9c:cb:bd:0e:39:19:1e:5a:db:a4:fd:df:
d5:2c:e2:16:ab:92:59:12:12:3a:81:62:0f:27:8d:
d7:40:9d:82:0a:45:69:81:ae:46:b9:97:d3:ee:f1:
c8:16:f5:d3:df:ce:7c:cc:2c:76:cf:1c:2e:71:93:
72:ad:64:dc:06:f5:a1:63:70:8b:5d:20:c6:07:1f:
31:9d:69:93:f7:3d:6d:5f:13:ae:1f:6b:a9:b6:7e:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9F:52:2F:14:AD:B6:FB:52:44:C0:9F:FA:1C:40:26:48:80:43:4F
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c5:a6:69:e9:9c:ac:50:75:51:ae:b9:b1:93:e5:fd:1f:bc:
3b:ca:4b:05:9b:7d:de:87:ab:a0:5f:49:7f:d0:16:59:c4:c7:
62:25:2c:fc:5c:98:0c:c9:bb:49:fb:7a:0e:62:24:fe:a0:b9:
1f:28:7c:cf:d3:6a:bf:ba:69:42:f2:83:83:01:89:9f:09:0f:
ce:d6:77:81:3a:8c:22:62:66:dc:e5:7a:bb:ee:90:e5:cd:67:
02:a7:77:8f:6c:92:18:98:a0:48:bf:fb:8f:a6:d2:56:1b:8b:
2a:34:b3:ed:77:72:a3:64:99:23:fd:4f:67:19:4a:33:01:9b:
f7:95:aa:50:e4:76:f7:20:6b:bc:8b:d4:8b:8b:ec:cc:1a:27:
3f:e4:d7:60:47:e5:3f:08:17:14:94:58:1a:36:ca:33:32:b0:
4f:91:81:31:77:4e:f5:60:43:38:80:15:1b:77:46:87:4c:b1:
ed:de:8b:ec:3a:e8:09:48:5f:04:26:df:23:1d:58:ae:d2:d0:
5a:db:04:f1:3d:4b:a1:3b:bc:f2:a0:bc:33:ce:68:88:c3:80:
ee:9b:c2:34:e7:85:60:ee:fe:1b:2a:7a:52:0f:28:2f:50:5c:
9a:c9:9c:80:a4:be:9f:80:85:b3:23:47:f4:21:86:f2:a8:d2:
2f:11:79:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:46 2025 by rpki-client