Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: fqNneF0lJv2BiNSROAkSmGLWR+qlRVgz1TQd8zLv9IM=
Subject key identifier: BD:50:A8:C6:EC:7F:31:B9:74:8D:38:1A:D9:5B:26:55:26:55:FA:48
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 0198C5A2E9B77DFD09C185EE6D7367D78137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 11CF
Signing time: Wed 20 Aug 2025 04:00:44 +0000
Manifest this update: Wed 20 Aug 2025 04:00:44 +0000
Manifest next update: Thu 21 Aug 2025 04:00:44 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: OFemnTx7O5T1jfHi9eSxYLZH+mC8+K/W86gO9CFPdyU=)
2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=)
3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:a2:e9:b7:7d:fd:09:c1:85:ee:6d:73:67:d7:81:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Aug 20 04:00:44 2025 GMT
Not After : Aug 21 04:00:44 2025 GMT
Subject: CN=bd50a8c6ec7f31b9748d381ad95b26552655fa48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:47:4e:cb:e4:2d:7f:e6:a7:e7:59:3e:6e:
8c:e6:f1:51:3c:51:68:d6:15:2a:7f:d4:b1:79:ac:
1b:84:fb:dc:25:7a:78:b6:a9:af:42:e0:3a:6b:da:
af:0a:4f:11:62:b0:4c:d9:cc:ee:d5:dd:6d:6f:7c:
aa:0a:5c:6e:04:c7:f9:d8:b4:7b:0f:4c:6e:b3:f8:
9c:5b:67:ef:04:ef:75:00:c2:27:75:3b:f8:60:a9:
bb:19:2e:ee:d4:f9:7b:0a:ab:24:28:51:1b:c7:bf:
8e:83:59:d5:1c:92:18:41:19:33:1c:92:18:f8:cf:
7b:00:d2:81:3f:f1:c2:29:d5:3b:c0:53:84:30:66:
69:34:df:7b:41:5e:ed:21:f6:af:f2:54:3f:68:94:
cb:4f:3e:e4:7f:7d:cc:d1:7b:6d:90:8e:13:6e:94:
2c:48:91:fd:0f:2c:be:2f:73:2a:51:e9:bf:d1:c5:
44:78:f5:11:8e:e7:41:58:d7:c8:ab:57:32:7a:12:
ec:97:db:e7:72:23:ef:69:b5:07:11:70:c2:85:5d:
c4:57:94:f0:ec:48:79:b9:21:c7:72:09:11:5a:39:
6d:aa:8b:0e:7a:1a:20:7f:35:78:80:ef:67:d6:b8:
be:ce:f6:af:f6:c7:3c:69:94:52:b2:e2:e2:09:30:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:50:A8:C6:EC:7F:31:B9:74:8D:38:1A:D9:5B:26:55:26:55:FA:48
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a4:ad:b9:59:94:85:82:50:80:cd:16:57:18:5f:2e:ee:9d:
7b:f9:12:d7:02:7a:9b:d2:39:a6:cc:7e:ea:22:ff:25:b2:af:
94:b9:76:e4:ab:6d:51:9e:9c:72:79:5c:36:2c:55:b3:e6:d0:
43:af:d8:7f:2d:48:42:33:ec:bd:02:a8:15:80:b9:80:6a:f4:
d9:64:22:c6:dc:08:33:62:91:c8:02:e5:61:1c:4b:65:bd:bb:
d0:75:7a:ca:76:fc:ef:29:94:68:85:be:ec:8f:74:64:7d:56:
da:20:81:60:0e:ba:02:bd:26:21:d7:ed:52:52:b8:cc:53:77:
9d:c2:ba:fa:aa:13:19:30:28:b2:31:0b:27:a1:60:73:d1:e0:
84:60:cd:04:61:ee:08:45:e5:8b:51:51:57:de:85:e3:85:4d:
82:e5:8e:77:ea:f2:b2:08:63:8d:da:9f:21:7e:b3:b6:df:a6:
50:bb:f1:a5:98:05:a3:08:c1:5a:d4:1d:92:50:58:d1:c3:cb:
0c:5e:65:5a:0b:dd:f9:2e:e3:59:32:47:92:2b:3e:82:86:3d:
32:b0:e0:9b:47:0e:15:4d:76:0c:f6:06:47:fb:da:55:ad:b7:
79:ce:69:40:b4:bb:b0:72:cb:f7:8f:c5:59:5a:eb:f8:cc:21:
c4:8c:91:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:11:02 2025 by rpki-client