Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
File: KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json)
Hash identifier: JwSGETuke08w2HzIuJ+cZOHE654dADOt6yV3FF1PLzk=
Subject key identifier: 4B:B9:C3:0C:1B:43:D5:F3:76:13:2A:7B:2E:7C:FC:A1:6D:64:68:59
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 019A27419EAD16CC7E79B508291A751C918A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
Manifest number: 1646
Signing time: Mon 27 Oct 2025 20:00:03 +0000
Manifest this update: Mon 27 Oct 2025 20:00:03 +0000
Manifest next update: Tue 28 Oct 2025 20:00:03 +0000
Files and hashes: 1: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: cjg+xdB97fmBF+DVDWSpkPcxPUFQL4ByTJ2iLJQ1g+I=)
2: fXGb1AdmtKED61MI3C4rhXBHP4g.roa (hash: eR+whMFm4iqXvD16fqLVfHjrwLVKXZG15LaXEU0R7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:41:9e:ad:16:cc:7e:79:b5:08:29:1a:75:1c:91:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Oct 27 20:00:03 2025 GMT
Not After : Oct 28 20:00:03 2025 GMT
Subject: CN=4bb9c30c1b43d5f376132a7b2e7cfca16d646859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:98:e3:f4:fd:8b:ac:94:d6:7b:bb:a6:3f:
c3:17:cd:eb:4e:b5:2d:41:ac:bb:22:3d:f1:34:b3:
8e:42:d1:ed:89:22:ba:78:aa:d9:ad:a0:75:02:5b:
24:d3:48:b1:2d:7f:8b:8a:17:96:0d:a9:24:a8:11:
1b:8a:b1:62:06:93:3c:b8:6e:44:58:ca:97:5f:47:
7c:b2:2a:79:d3:2c:1b:a1:75:9f:d6:96:26:07:ef:
88:a8:9b:78:7b:96:44:e8:8b:ad:7b:fa:60:3e:b9:
3a:7c:dd:5d:39:dc:4e:3f:37:66:40:f2:5e:2b:12:
9e:03:2c:22:6b:b8:2b:63:81:97:93:8c:70:87:74:
6e:44:2d:93:b3:0d:27:ef:89:e8:cf:65:84:91:eb:
3d:03:f2:7a:58:60:fb:e0:43:4f:cf:69:09:02:48:
f4:cb:0a:2b:db:ad:2a:6c:f0:25:c9:27:b2:af:66:
4d:56:6a:3d:d6:d8:27:10:2c:be:9f:d9:bf:4c:05:
89:48:79:ad:d4:eb:23:6c:66:9d:e9:39:bd:9f:b1:
69:b0:c0:de:a0:76:dc:6f:38:e8:01:c5:38:d2:35:
2c:12:91:40:3d:bd:e4:70:ef:f5:30:38:0f:a5:f5:
26:34:c6:84:be:94:6b:a6:d3:da:f4:66:65:80:29:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B9:C3:0C:1B:43:D5:F3:76:13:2A:7B:2E:7C:FC:A1:6D:64:68:59
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:07:cc:94:ee:68:2b:81:7c:5a:56:7e:3f:c7:81:f3:78:6e:
23:20:d1:7d:d8:e3:a5:f3:04:c5:e0:b2:a1:af:58:fa:0d:28:
60:c5:e8:0c:3b:58:1c:71:05:da:6e:6c:fb:8c:40:de:e0:34:
19:40:5f:97:69:89:fa:4f:59:32:16:bc:d6:a6:8a:dd:2d:6d:
09:00:8f:ee:74:90:88:79:05:ef:00:42:48:06:1a:b5:83:b1:
e1:f5:cc:3d:f0:fa:90:61:df:39:d2:a7:c8:c3:fe:5e:e6:97:
ca:51:16:70:ec:cd:8f:54:f7:c9:d0:48:58:8a:db:50:c5:c4:
9d:06:ac:b0:7a:e4:0a:c9:a9:c2:4e:d7:86:59:9c:d0:a1:a3:
fb:72:78:b9:d4:54:64:12:41:75:c3:f1:3b:2c:c3:d4:ac:ca:
c5:6d:c7:ae:92:fb:7c:a7:4c:53:c1:d3:78:5b:38:ae:2c:67:
c4:2c:d5:3a:2c:06:ce:b6:0e:50:65:a8:18:18:e5:7a:ed:c2:
5c:2e:21:15:c0:f2:6f:a5:18:7a:40:84:af:95:42:7d:3d:e3:
95:3b:9d:a9:f4:10:32:72:c2:ef:98:8e:11:cc:06:65:05:9c:
b1:df:b8:7f:3a:ff:02:24:15:c3:87:79:a4:e0:d9:4a:7d:55:
d3:a9:4a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:34:53 2025 by rpki-client