Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: OtOnyDUcwjyM/WboDA95qyoUMnFRxPDKxEuvZ6SJOY4=
Subject key identifier: A8:C6:37:68:78:71:FE:60:B2:A8:50:85:17:1B:3B:54:C8:D6:7E:9C
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 0199C48E2350CE593474D335243EA938A0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 1253
Signing time: Wed 08 Oct 2025 16:01:13 +0000
Manifest this update: Wed 08 Oct 2025 16:01:13 +0000
Manifest next update: Thu 09 Oct 2025 16:01:13 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: kILKFc1lkiy8vU4fDBtB+KRSUsiCXQdmq/eCYAZWY1g=)
2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=)
3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:8e:23:50:ce:59:34:74:d3:35:24:3e:a9:38:a0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Oct 8 16:01:13 2025 GMT
Not After : Oct 9 16:01:13 2025 GMT
Subject: CN=a8c637687871fe60b2a85085171b3b54c8d67e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:07:7a:d8:40:53:64:e2:73:cb:97:d8:45:
9f:84:d4:59:9a:2f:c8:18:d3:75:58:02:a1:3e:cb:
fe:46:9b:a1:cc:dd:fd:92:6a:ec:fb:bf:26:90:e9:
ce:32:66:e9:25:56:81:84:35:77:73:17:4a:ab:f8:
e3:30:bc:db:d1:70:6a:0f:b7:b6:06:9e:ea:02:9d:
7d:f6:f4:63:14:0f:86:ff:55:46:da:85:2d:7e:99:
e1:cb:fe:72:c5:07:00:c3:06:48:a4:8d:3c:f1:7e:
e0:06:9d:f7:83:e5:7d:87:21:34:d4:dc:c7:33:e7:
45:5a:9c:33:2d:60:ab:44:30:74:2e:82:23:ef:25:
52:fe:2e:80:b2:83:cb:2a:81:fe:22:64:70:67:be:
f9:c1:82:8a:2b:f2:1d:18:2f:0a:f9:18:ce:0c:68:
3f:b9:aa:a6:d7:b4:c3:a5:89:d4:5a:fb:6d:d1:37:
d8:f9:aa:0d:35:16:9f:10:6c:60:50:3a:b8:b8:06:
4b:69:41:81:2c:3d:23:a9:1a:cc:76:eb:76:a0:2e:
7f:96:22:4f:57:e2:b0:c2:8f:2f:43:b6:11:78:e6:
1d:c0:41:0a:4b:1e:42:67:46:45:b6:b4:3d:14:e3:
58:8d:3c:1c:a9:cf:01:22:83:50:c9:00:78:98:f1:
d0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C6:37:68:78:71:FE:60:B2:A8:50:85:17:1B:3B:54:C8:D6:7E:9C
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ab:48:3c:3f:a5:85:4a:fe:ed:72:c9:32:01:94:63:55:76:
df:2a:d0:28:e4:f0:b7:36:63:a4:af:53:bf:36:be:37:1a:62:
7a:4b:3d:01:35:76:76:71:13:67:f0:67:14:7f:a3:e2:00:0b:
04:f3:40:78:14:f5:e3:6c:00:bc:b3:7c:1f:f0:9b:0d:68:54:
ec:40:1f:c3:f5:fb:4e:a3:71:65:86:68:79:7a:11:a0:1b:ff:
06:fa:dc:16:b4:fa:78:ee:e0:d1:d6:9c:2a:46:32:10:61:a8:
f3:1f:3f:5b:d1:e5:34:f9:26:bd:d1:89:9b:66:c8:be:d2:70:
41:34:77:ad:a1:f0:b7:03:02:53:b8:8c:18:3d:5c:8b:af:a6:
05:57:1d:ee:92:95:51:78:30:9f:ac:61:55:9b:69:3a:6c:ac:
44:ed:9b:ea:97:79:62:96:75:5c:2a:47:18:ed:d5:1e:7b:3c:
38:92:7f:29:fb:15:8b:5d:7d:db:3c:b1:25:c1:bf:43:0a:54:
21:07:bc:85:7a:41:d4:8c:ad:c1:59:ed:51:b8:b7:58:57:8a:
ce:ea:bd:71:03:05:6c:9c:b0:d6:d5:63:fd:e6:74:42:bf:c0:
72:de:6d:d3:a2:1e:a9:0d:5d:ac:55:5b:0c:72:ac:ee:49:cd:
29:bf:03:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:21:58 2025 by rpki-client