Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: k2LL9aSBeHCYO52qs2n2/FdNUIs861QaNqC9ooXyzgY=
Subject key identifier: 32:01:51:6C:3E:30:D7:6D:AD:75:17:33:F6:45:3D:2D:B7:DD:F5:53
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 01991AD33F2317D49F9F185C0E68A5EC35AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 13C0
Signing time: Fri 05 Sep 2025 17:01:15 +0000
Manifest this update: Fri 05 Sep 2025 17:01:15 +0000
Manifest next update: Sat 06 Sep 2025 17:01:15 +0000
Files and hashes: 1: 7heC61NtQoMcpuhj_ZjE2RH5xUk.roa (hash: 9n2osY0Zh0YOvne11Off7803igcpZJUc8/cMI8UdihQ=)
2: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: 9XI3lVbJ64ZQNBHP8YpWmX9BYNC3FC8dmyjpo1FFSG0=)
3: qu7vMGQcvRYv7s2ySlulG6L93rk.roa (hash: MEMNuLUG6QK5Jryxt/02AqlLZl7VyqgmTmooG82bGe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:d3:3f:23:17:d4:9f:9f:18:5c:0e:68:a5:ec:35:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Sep 5 17:01:15 2025 GMT
Not After : Sep 6 17:01:15 2025 GMT
Subject: CN=3201516c3e30d76dad751733f6453d2db7ddf553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:f1:60:1b:d3:ae:1d:76:df:1d:7c:53:29:
44:8f:6b:dd:b4:75:bc:f4:71:99:3e:55:33:df:51:
65:90:db:16:f3:8b:79:17:a5:47:00:5e:2b:db:d8:
ce:4d:83:10:bb:61:c5:76:28:cb:32:c8:21:37:94:
29:0d:aa:93:ae:d6:a7:8b:a3:ac:de:85:7c:e3:91:
60:db:c3:1e:29:90:e3:0e:98:39:14:64:a1:9c:95:
0b:d9:c2:46:3e:87:39:bf:ca:70:7d:ca:7a:24:8a:
8d:63:4a:02:f6:7a:2a:9b:50:b5:3e:ee:13:4c:42:
f9:f6:ff:eb:91:1d:f5:36:69:dd:ba:e7:ac:ce:aa:
75:62:69:e3:d5:1c:41:e2:8b:4a:73:31:d7:e7:82:
1c:a8:25:77:fb:f3:4d:18:aa:d9:3c:c5:5b:fe:e1:
70:dc:ec:27:a4:89:21:39:8f:87:41:c9:a3:7d:92:
91:92:75:72:ed:e9:29:3b:86:28:d6:f0:89:c8:8b:
6a:1f:a3:3f:2a:df:3d:53:0d:99:22:9c:0c:2f:21:
f3:d8:14:79:21:6e:77:6e:99:69:0b:0e:19:f3:78:
28:20:48:7e:6d:e3:7c:5d:a7:db:20:02:c4:aa:1a:
e6:1a:20:14:73:8e:3c:42:c9:52:b7:97:c3:f1:5c:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:01:51:6C:3E:30:D7:6D:AD:75:17:33:F6:45:3D:2D:B7:DD:F5:53
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cc:a9:8c:fa:2f:5e:80:dc:aa:a0:f0:fb:b8:6d:04:32:fa:
0c:a8:8a:aa:b3:33:fd:29:7b:94:93:f6:9d:70:0a:be:1b:2a:
cf:20:1a:b9:f4:8b:76:45:6f:a3:05:b8:41:7e:4f:9c:6d:96:
51:96:90:aa:bd:4d:e1:43:2a:44:bc:e3:74:43:26:49:29:76:
15:f6:f7:4d:1b:36:e4:94:c4:1b:a6:ec:2d:f0:6e:ef:73:2b:
c6:d0:33:1f:8b:69:bd:13:d5:85:a7:37:04:0a:e3:84:c9:9f:
0f:89:7d:a3:8e:0d:4b:c1:73:94:72:da:5d:b1:92:96:06:8f:
0d:e4:c0:41:a1:96:f2:80:2f:07:cf:37:9d:75:23:f2:d2:cd:
7c:5e:9d:95:8d:93:07:31:0c:6e:e9:9f:42:99:61:69:32:f3:
a9:ce:26:5d:9d:60:53:55:5c:5f:63:cc:e8:10:1f:be:1b:35:
c2:47:20:72:9f:66:e2:a1:e8:37:99:c3:3c:a1:1d:23:1e:d1:
b0:a3:2f:50:0c:13:a9:38:af:c0:93:f6:b3:29:ef:8e:7d:2d:
db:b2:fd:bd:ee:54:81:8a:da:03:d6:e3:9f:18:d1:f8:7e:a6:
39:96:cc:95:15:a3:60:46:44:da:b5:9e:de:d5:11:af:4b:89:
6c:71:fa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 01:57:18 2025 by rpki-client