Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: qqNcDPrHNMPX5UjNwO2/9rJT9I4xgBtAOkpBd7q7/yM=
Subject key identifier: 39:15:84:7E:72:DB:FD:A0:C8:06:3A:3E:13:B7:1F:85:23:39:82:CE
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 0197B58E377FAC90F729D34B88465BBBCAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 1307
Signing time: Sat 28 Jun 2025 08:01:25 +0000
Manifest this update: Sat 28 Jun 2025 08:01:25 +0000
Manifest next update: Sun 29 Jun 2025 08:01:25 +0000
Files and hashes: 1: 7heC61NtQoMcpuhj_ZjE2RH5xUk.roa (hash: 9n2osY0Zh0YOvne11Off7803igcpZJUc8/cMI8UdihQ=)
2: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: Cmn9hbhHj/DOPV6F7r8s6J1DFtR75Dkwzk8RgysR+Pk=)
3: qu7vMGQcvRYv7s2ySlulG6L93rk.roa (hash: MEMNuLUG6QK5Jryxt/02AqlLZl7VyqgmTmooG82bGe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8e:37:7f:ac:90:f7:29:d3:4b:88:46:5b:bb:ca:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Jun 28 08:01:25 2025 GMT
Not After : Jun 29 08:01:25 2025 GMT
Subject: CN=3915847e72dbfda0c8063a3e13b71f85233982ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:f5:bd:b6:ef:81:e9:9d:7f:e7:44:52:95:
a3:a6:16:87:1b:bd:1a:b3:e3:e2:f6:ff:80:2f:92:
50:d2:55:7a:b6:92:67:3a:59:8c:24:37:07:23:d0:
48:2b:34:da:fd:11:28:58:bd:f9:da:8f:8c:b4:b3:
3b:cd:cf:c2:92:bb:80:df:b4:e3:48:55:95:cb:60:
7c:5c:21:18:45:4a:21:d7:47:d7:ba:94:f6:c4:c4:
fe:b7:f5:49:f2:d6:66:4a:ee:cf:f5:e2:14:fa:99:
ac:96:0b:67:5a:f8:de:16:b4:5c:5b:99:ac:55:73:
d0:f9:dd:c2:90:7b:7e:46:f4:ee:f6:bf:41:16:9f:
43:ae:38:ae:af:c1:ce:b3:5d:51:3d:35:6c:c4:9f:
da:6c:ca:72:f7:7a:41:bf:1f:90:2b:29:90:64:46:
61:45:91:d0:54:fc:3d:fb:2b:8c:e9:47:32:c4:69:
b3:4d:59:d8:dc:2b:ea:b2:c4:92:d8:16:14:48:39:
4f:6e:da:08:7b:3a:ff:88:b8:35:5e:26:f7:cf:87:
72:17:c2:e6:d6:39:a0:bf:85:e4:7f:69:45:28:63:
c6:6e:9f:49:ac:d5:07:30:64:07:b4:83:42:a4:3d:
d3:4e:59:f2:5d:09:f4:f4:25:7d:d1:0c:7a:1b:ad:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:15:84:7E:72:DB:FD:A0:C8:06:3A:3E:13:B7:1F:85:23:39:82:CE
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:97:92:ae:b3:05:8a:6c:e1:c7:09:0c:b4:2f:11:1e:0d:e2:
ad:43:68:fc:8b:62:f3:70:a3:e9:26:7e:90:68:48:f0:63:4c:
31:24:22:43:f1:78:91:04:2a:01:9f:7c:c3:fd:cc:48:97:50:
7d:20:b1:e3:b2:e0:96:81:36:5e:ba:67:e2:68:ee:06:35:5e:
11:08:81:d1:7d:7e:42:78:a8:49:2a:84:1c:a2:e4:5e:7c:31:
2b:14:47:cb:0f:91:54:83:d2:c2:51:db:ef:1f:d8:24:9c:b7:
88:44:6f:39:cf:fc:1f:1e:dc:95:73:50:18:a9:85:13:e1:fb:
d0:00:48:4b:70:98:c1:76:ad:95:31:7f:70:86:5e:85:3c:fe:
12:1e:ab:20:83:91:1e:00:9a:62:2b:46:bb:51:d0:b8:84:3c:
43:56:d2:06:a2:e3:d6:07:d5:65:79:08:60:39:fe:75:c6:56:
ff:48:ca:3d:dc:b6:8d:81:c0:40:06:54:92:2d:62:ef:9a:2f:
e8:76:27:36:1a:e7:51:55:1b:f1:c9:5a:06:49:34:63:5c:56:
16:ef:90:05:6c:50:ff:15:db:7c:24:42:52:5d:7a:8e:6e:b6:
b6:4a:c4:02:15:13:63:4e:84:b7:55:82:7d:5f:1d:2a:a2:aa:
60:01:77:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:33 2025 by rpki-client