Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: bqKif0obd/p1//9+hNLAnTIxGzc4yLHT1GhTZtmkD1c=
Subject key identifier: 18:C7:11:AF:4B:A2:A2:35:81:FC:9E:D7:C4:BB:3C:75:8D:F7:B6:3A
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 019A00A3475EE0196045D2CE5AC280EE24CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 1437
Signing time: Mon 20 Oct 2025 08:01:31 +0000
Manifest this update: Mon 20 Oct 2025 08:01:31 +0000
Manifest next update: Tue 21 Oct 2025 08:01:31 +0000
Files and hashes: 1: 7heC61NtQoMcpuhj_ZjE2RH5xUk.roa (hash: 9n2osY0Zh0YOvne11Off7803igcpZJUc8/cMI8UdihQ=)
2: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: p4bOS+WTV5dpOTUNhf30UWoR9QNt8g+SjtHgPdUesTs=)
3: qu7vMGQcvRYv7s2ySlulG6L93rk.roa (hash: MEMNuLUG6QK5Jryxt/02AqlLZl7VyqgmTmooG82bGe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:47:5e:e0:19:60:45:d2:ce:5a:c2:80:ee:24:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Oct 20 08:01:31 2025 GMT
Not After : Oct 21 08:01:31 2025 GMT
Subject: CN=18c711af4ba2a23581fc9ed7c4bb3c758df7b63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:37:68:65:cf:04:8c:6c:75:3f:41:2a:57:
f4:48:8c:20:b6:01:5a:e1:9a:92:8a:95:23:b1:48:
c7:77:be:ca:8f:d9:45:d6:75:69:6e:b7:97:c2:af:
c2:51:8b:57:7d:da:6f:dc:93:38:10:9e:5a:d7:f4:
c3:c3:60:16:76:57:79:7b:d5:89:d6:53:7d:2b:df:
d2:42:ad:9e:97:1b:b2:50:eb:bf:19:eb:3e:ef:7f:
b0:8e:a2:c5:b3:1d:e7:d3:a0:66:b8:ea:84:67:6b:
21:7a:cd:10:60:3a:60:0d:45:ac:0e:df:7c:cf:cd:
7c:6e:29:bf:ac:41:41:58:f6:94:0b:59:a3:39:72:
81:fc:88:fc:8e:cf:59:d1:ff:ba:5c:22:cf:21:f8:
4f:1f:1b:73:88:b6:84:0a:9f:83:48:a9:51:99:17:
ef:37:f6:62:84:81:c5:98:20:ce:8d:17:1b:ee:43:
b5:e1:10:a6:d4:d5:7a:2e:67:7d:65:20:70:0a:a9:
45:1e:ec:95:a8:e7:1a:74:e2:17:c9:b8:7b:23:57:
8a:31:17:4c:02:7a:6d:85:38:c8:4d:69:ce:4b:da:
c2:f1:65:b6:59:36:28:94:db:64:1d:49:c3:54:dd:
f0:36:fd:a9:e2:e4:4d:db:96:b3:67:1c:20:c7:0b:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C7:11:AF:4B:A2:A2:35:81:FC:9E:D7:C4:BB:3C:75:8D:F7:B6:3A
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b9:09:56:16:6e:76:04:df:7e:54:a8:f4:81:7c:84:2a:bf:
79:7b:8a:67:7b:95:36:6f:da:51:1f:63:48:e1:ab:c0:40:0d:
da:6c:bf:fe:4a:17:b8:8f:e8:ee:7f:99:89:90:e3:1b:da:97:
3b:5f:84:b9:21:dd:8a:e5:6c:bb:fc:59:94:9d:a9:3e:90:b3:
8d:9d:b6:c2:d8:58:2c:7f:fb:02:da:58:fd:4f:47:a4:b1:ef:
91:42:cb:78:99:d6:99:4e:a2:7a:25:e5:07:f7:20:4b:6a:89:
6d:09:d8:db:8d:78:6a:70:95:67:85:60:ef:dd:99:cf:a9:82:
98:b7:8f:65:3a:05:9e:b5:a8:99:24:e6:60:83:5a:11:e8:44:
b4:48:73:95:43:15:b2:30:c1:29:62:b8:c8:76:a8:18:a8:f3:
e4:96:a7:06:36:f1:31:21:f5:0b:82:20:57:37:f2:d3:50:23:
49:d3:b3:80:bb:b1:18:0a:54:92:58:de:c0:24:23:9b:f8:32:
ce:e8:1f:b8:5c:02:e1:19:f9:a7:52:30:65:72:64:9f:04:83:
28:52:76:2f:07:ab:f1:7a:28:91:a4:ad:42:ea:17:9d:e4:d5:
41:31:2b:68:44:d6:b1:96:aa:04:7e:06:c3:df:1d:14:da:4c:
59:d7:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:26:34 2025 by rpki-client