Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: AkutRd1sOtsmR5qCzDpptAozoou9EuTxOcKa3ea9Un8=
Subject key identifier: 71:BB:D4:0D:17:FC:DC:32:B8:64:BF:7B:A7:09:61:B0:16:FE:CB:36
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 0198D54E93D7123D57D444614ADA1B4E6D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 139C
Signing time: Sat 23 Aug 2025 05:02:33 +0000
Manifest this update: Sat 23 Aug 2025 05:02:33 +0000
Manifest next update: Sun 24 Aug 2025 05:02:33 +0000
Files and hashes: 1: 7heC61NtQoMcpuhj_ZjE2RH5xUk.roa (hash: 9n2osY0Zh0YOvne11Off7803igcpZJUc8/cMI8UdihQ=)
2: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: NLgaO8J0IUfjk3x5XOr8UkxZXYu8jB20QCPsmD5OBJ0=)
3: qu7vMGQcvRYv7s2ySlulG6L93rk.roa (hash: MEMNuLUG6QK5Jryxt/02AqlLZl7VyqgmTmooG82bGe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:93:d7:12:3d:57:d4:44:61:4a:da:1b:4e:6d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Aug 23 05:02:33 2025 GMT
Not After : Aug 24 05:02:33 2025 GMT
Subject: CN=71bbd40d17fcdc32b864bf7ba70961b016fecb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:be:11:ed:07:46:b1:39:f3:89:d0:85:5c:b1:
b4:a8:d4:be:d3:fe:17:b7:e5:82:b0:37:1f:6b:f9:
21:56:12:9d:c6:9e:d4:7f:1d:bf:2d:9d:9b:62:80:
48:28:2e:13:38:6a:d6:25:21:a0:34:f2:ff:34:89:
3c:3a:10:b6:5f:3d:63:93:7e:d8:12:a2:05:3c:a8:
31:93:9e:5c:b7:52:f5:d6:79:47:c7:9b:3a:a9:bd:
b3:75:36:2e:bf:a8:14:cb:f0:98:dd:03:1e:ab:b9:
b3:96:35:b6:a1:12:8f:3e:0a:4b:a1:c6:42:02:0b:
34:55:ba:68:8c:77:ac:e2:d1:91:8d:90:06:6b:ef:
6b:13:91:c7:87:f7:f7:f5:b9:71:65:fc:e7:21:67:
dc:aa:66:3f:90:45:3f:de:b9:0b:c4:49:3d:6c:46:
8e:3e:56:1e:98:29:73:9a:d3:f6:79:31:e3:4b:30:
64:b2:c8:12:13:26:b1:dd:4b:d9:54:94:b0:b5:4a:
65:e5:39:1d:7a:48:98:6c:54:52:0f:a7:e9:e4:ca:
5f:a4:d7:3b:ee:96:cb:9b:c3:61:82:45:7b:1f:79:
c5:ff:93:a0:11:ce:f8:29:f8:de:5c:74:68:a0:f2:
2d:b8:2f:53:9e:33:bc:64:1f:02:aa:ad:d8:d1:5a:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BB:D4:0D:17:FC:DC:32:B8:64:BF:7B:A7:09:61:B0:16:FE:CB:36
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:07:93:5f:f7:50:5c:ba:de:ff:09:c0:b8:b0:68:d3:a6:5d:
1e:19:52:3c:38:c4:04:10:ee:1e:31:48:a1:a7:f7:60:ca:e4:
07:3b:5b:90:be:ae:09:5e:0b:65:70:9d:b2:dc:e1:55:c0:0b:
e7:75:0e:7d:5f:ad:32:4b:6d:a0:08:d7:64:82:6e:23:55:92:
55:2f:8c:c7:f2:5f:f4:96:38:fd:48:29:8d:d7:7b:b8:42:c2:
d5:6c:80:bb:61:20:a9:d1:88:38:a9:70:be:f8:a6:9c:df:dc:
44:0b:f5:e5:a0:47:e8:9c:d6:3a:91:7a:2e:78:5d:29:f5:40:
0e:a7:97:f7:fb:28:34:b8:8a:02:42:6d:24:39:27:1d:fa:ef:
01:6f:c7:bc:36:9e:aa:7f:02:07:eb:3a:5b:e6:da:c6:ef:08:
21:44:49:65:03:ce:43:c0:2a:9c:d3:66:ce:f7:28:42:a3:4c:
8b:e0:d6:bf:38:1a:e3:c2:b5:70:4a:7f:13:ea:d8:39:20:41:
84:bf:8d:be:3b:41:01:1a:96:82:8a:d0:bb:2c:94:9b:64:38:
7d:e7:74:3b:6c:bb:ba:3b:84:1a:b1:62:b8:8f:89:85:e0:20:
ad:61:c2:84:57:a0:a1:7c:c8:6e:27:88:3e:36:95:99:6d:83:
c3:6f:85:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:32 2025 by rpki-client