
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
File: KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json)
Hash identifier: LIR0qXUibv7jWTzMiXIUnJEtlp9+MEJr01In7+7jq1c=
Subject key identifier: B6:5B:A2:B4:67:14:B1:77:83:EC:5B:3D:B4:51:CE:BF:D4:68:68:B8
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial: 0199FBEB899A13F6022D3C5426486BB30EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
Manifest number: 067A
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: 9tIH/kRJiD3bqtIsaB9S908o4GQ29bbUjouU0ycABtM=)
2: SSf6jkDtZNnbxOBRunTsvPqgvfA.roa (hash: 5IZEhx43JWWVyUng521teCJJCgxsPSwTh1bUksl7+e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:89:9a:13:f6:02:2d:3c:54:26:48:6b:b3:0e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=b65ba2b46714b17783ec5b3db451cebfd46868b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b4:93:5c:0a:11:15:dc:10:56:91:79:c5:7a:
17:76:ae:bb:e0:46:56:0f:3f:d7:23:f9:1e:2d:bd:
c0:4a:c1:49:92:5d:c9:90:ce:29:18:8f:a5:e9:d3:
d3:d4:da:2f:71:1f:77:35:0d:bf:c3:b2:0a:df:ba:
39:9a:94:63:6a:f3:28:cc:82:2d:e5:7c:ed:42:21:
2c:c5:ec:c7:9a:e8:92:4a:06:96:3a:54:ae:9f:4e:
a3:0d:82:6e:ad:82:68:74:9a:d2:59:09:2a:2e:af:
f4:22:02:b5:3f:d2:d6:fa:15:05:f3:01:c3:2e:6b:
a8:53:08:22:50:dc:7b:ab:c4:0a:8e:29:66:cd:9d:
c7:a3:e1:fa:dd:ed:fb:fe:45:20:83:fb:14:9d:39:
fe:b2:54:fb:80:78:19:70:85:5d:d9:e9:a9:c1:0d:
8b:d3:ad:7a:df:fa:8c:fd:ae:57:ee:26:2f:dd:26:
bc:c9:b6:5c:ff:89:0a:c1:3d:54:be:8b:ac:d2:29:
7b:3d:1d:14:ce:c7:87:e1:a7:21:3d:e2:c5:3d:a1:
ea:ea:35:13:2b:92:2e:62:80:e9:71:5a:5e:26:8c:
b4:21:c5:8c:02:6f:30:ad:2f:a7:19:e6:8f:f7:1e:
d1:51:5b:7b:75:00:c3:df:bf:cd:56:17:ff:2e:ec:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5B:A2:B4:67:14:B1:77:83:EC:5B:3D:B4:51:CE:BF:D4:68:68:B8
X509v3 Authority Key Identifier:
keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3f:a2:d3:6c:dd:06:7a:de:50:17:72:4b:23:eb:20:d6:15:
2a:fd:1f:6a:cc:67:10:86:55:55:99:b1:81:86:4b:c3:3d:e4:
25:01:f2:3a:fb:a1:bc:6f:03:eb:b0:45:8c:8f:52:c8:d9:4d:
9f:0e:1a:c0:bc:d6:00:6d:39:b1:64:c9:ce:cf:8b:55:7f:51:
47:04:16:b8:d2:14:1a:9f:5c:10:2f:26:84:89:de:cd:e4:5e:
b3:bd:c1:64:41:c1:ff:96:e8:88:ca:10:c9:06:32:9c:4c:e6:
87:5a:b4:30:46:81:cc:e5:33:db:f9:89:1d:32:fc:7d:e0:97:
78:37:ab:c4:fb:78:50:55:c8:e8:2a:e5:b0:91:b5:cf:b8:e9:
57:05:30:9d:26:a6:70:d8:8b:5c:c0:fc:79:75:ed:34:74:f0:
6d:bf:44:7b:d3:53:69:7e:ff:c6:99:7a:9a:8e:c0:5f:43:2c:
52:a1:e6:15:18:52:c6:78:ae:7c:18:d0:a5:de:49:8f:e6:d7:
83:95:ad:78:0b:bb:e8:e4:d3:b1:6e:4c:d4:96:54:9b:5c:5d:
2f:16:e5:58:41:6d:59:5e:d5:97:13:92:a0:f0:46:85:be:7a:
a4:70:6d:60:47:87:e0:c9:69:ad:6e:97:4f:a8:57:94:cd:cb:
11:76:85:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:07 2025 by rpki-client