Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
File: Kksu12XR1HipbYLxJgEen7dS_Ic.mft (raw, json)
Hash identifier: vk7PZtYdGZenwkBpoxTISdOch1TBr7bS0rh+CKdR7JU=
Subject key identifier: CC:5F:3A:76:12:D0:D3:7C:8C:E8:4E:E5:7A:23:AD:6E:D8:9F:90:9C
Authority key identifier: 2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
Certificate issuer: /CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Certificate serial: 0198D73BE1F3B4A1EF18B15129EFEE327D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 14:01:22 +0000
Manifest this update: Sat 23 Aug 2025 14:01:22 +0000
Manifest next update: Sun 24 Aug 2025 14:01:22 +0000
Files and hashes: 1: Kksu12XR1HipbYLxJgEen7dS_Ic.crl (hash: csVDJs4Ze2LfOAzVRrTFPMRMYZO/ewqnd7oe/eTfJxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:e1:f3:b4:a1:ef:18:b1:51:29:ef:ee:32:7d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Validity
Not Before: Aug 23 14:01:22 2025 GMT
Not After : Aug 24 14:01:22 2025 GMT
Subject: CN=cc5f3a7612d0d37c8ce84ee57a23ad6ed89f909c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:f8:2b:94:86:dc:9e:be:d8:90:06:c3:f7:
b8:f7:7f:91:f0:46:f6:e1:da:82:c0:30:2b:85:56:
cc:ef:0a:90:ff:b3:83:a1:ce:5c:44:3b:b2:ac:99:
45:5c:37:50:ed:f8:19:8c:33:27:c6:ef:8e:f5:89:
49:a9:81:8e:63:e7:39:f5:99:42:9a:eb:63:0d:bc:
e6:28:da:86:bf:d3:30:e0:e2:fb:a2:9d:43:76:43:
29:cf:f0:d0:3f:16:7b:bd:66:bc:3d:24:58:be:55:
36:a5:05:5b:a3:21:06:58:d1:4f:75:28:42:bb:b1:
06:c0:ae:eb:ff:7e:95:09:1a:23:62:df:44:f0:74:
f4:0a:5b:5c:47:00:2f:d2:53:b7:fc:f8:f5:49:8e:
27:c2:1b:08:97:17:31:b7:8d:14:78:d0:f3:b1:7b:
8c:00:92:72:ce:29:db:f5:93:ba:57:ba:4a:4b:ac:
86:8c:df:a0:af:3b:0a:13:f6:d9:2e:dc:1b:72:5a:
8c:30:22:ec:97:cf:a6:f2:62:53:e4:67:01:d6:e4:
39:d8:65:1f:b3:c8:f7:3d:b4:65:fa:e2:bc:60:d2:
10:ac:70:fb:4a:38:8f:ec:8b:01:08:3d:54:34:90:
41:eb:77:e9:3d:01:1a:b5:a2:8d:dd:ef:87:0d:a0:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5F:3A:76:12:D0:D3:7C:8C:E8:4E:E5:7A:23:AD:6E:D8:9F:90:9C
X509v3 Authority Key Identifier:
keyid:2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:db:74:93:19:59:56:3c:6b:fc:4c:94:2e:df:ce:e7:51:52:
54:01:07:4b:a8:bd:ae:10:fe:a9:84:2d:f7:55:93:0a:74:ad:
cc:6a:05:30:9e:ed:b6:0e:c5:3e:1f:c4:13:51:7e:a5:a7:55:
4f:ec:18:05:81:67:aa:1c:20:85:50:7a:aa:0c:3b:03:27:31:
f6:db:26:03:6f:0a:00:e5:c8:98:ab:37:e6:8a:ab:ef:ee:47:
df:e7:f8:44:0f:ba:17:38:00:a8:7f:42:36:ee:2c:de:1d:2e:
71:dd:55:e6:97:c5:84:dd:54:02:cc:f2:2f:01:f3:88:27:81:
30:13:ce:d1:94:be:ec:e1:65:a5:04:a5:0e:38:78:55:4b:85:
bd:10:b3:90:28:fb:21:7a:e9:b6:f8:90:31:7f:fc:ea:97:db:
5e:b1:27:d4:27:f6:0c:7b:e6:95:21:81:7c:d0:68:c5:24:7f:
f7:e1:8e:a5:c6:e1:b4:c3:ff:b7:c1:13:6e:34:ed:b0:75:34:
68:10:c3:c4:e5:d6:1b:fa:6a:d0:ee:35:47:d6:70:46:b2:c4:
f3:67:c0:47:b1:66:d1:4b:1e:2f:7d:fa:e1:58:fe:8d:b3:fe:
64:81:1a:7c:d9:7f:cf:9c:f0:84:2e:d6:a9:fd:87:eb:c6:66:
5b:33:92:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:59:52 2025 by rpki-client