Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: PkBRb+PPkdYdbQ6hEY0AEclMHbF79eFumDx6VXij2qE=
Subject key identifier: 21:7F:43:27:9C:38:87:27:60:0D:D0:E1:AF:21:EC:B3:46:59:89:EB
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 019A34C720205FB8DAA1F11E51DDC7D58472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 1452
Signing time: Thu 30 Oct 2025 11:00:56 +0000
Manifest this update: Thu 30 Oct 2025 11:00:56 +0000
Manifest next update: Fri 31 Oct 2025 11:00:56 +0000
Files and hashes: 1: 7heC61NtQoMcpuhj_ZjE2RH5xUk.roa (hash: 9n2osY0Zh0YOvne11Off7803igcpZJUc8/cMI8UdihQ=)
2: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: r1tDER2063OxNwoz0l+bDsS7WJk9MoZJ9YPQyxFQij4=)
3: qu7vMGQcvRYv7s2ySlulG6L93rk.roa (hash: MEMNuLUG6QK5Jryxt/02AqlLZl7VyqgmTmooG82bGe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:c7:20:20:5f:b8:da:a1:f1:1e:51:dd:c7:d5:84:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Oct 30 11:00:56 2025 GMT
Not After : Oct 31 11:00:56 2025 GMT
Subject: CN=217f43279c388727600dd0e1af21ecb3465989eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:f1:ec:8d:d3:ea:7a:59:c0:ab:98:3d:6d:
92:b1:44:9d:ab:15:5e:f5:fb:c0:ed:7a:f4:15:5f:
c9:cd:32:a1:b6:eb:40:a2:c4:0c:62:2e:d9:ed:af:
13:36:5d:9d:b2:55:c5:30:1e:b8:69:0a:29:ae:57:
86:51:51:51:5f:87:59:32:8f:41:77:e0:47:2e:c4:
22:3d:e3:f7:2a:9b:89:7e:8d:d3:cb:2f:56:a4:d4:
76:a1:54:bb:58:c4:5d:0e:89:95:3b:0d:8a:bc:34:
6b:a7:ca:5d:50:a8:8c:57:3e:0d:9d:46:36:9e:f8:
3d:f5:49:b8:65:cb:f9:80:89:24:02:c8:43:08:df:
f6:f0:ef:f4:12:0c:74:79:8b:a8:6c:75:68:5d:f5:
cb:ef:ea:b6:3b:e8:95:f7:33:08:e4:ce:0f:79:f7:
2a:47:b0:51:1c:f3:2b:2d:1c:74:19:55:c1:75:f4:
ea:02:4d:bf:30:ef:0d:7b:84:50:74:a5:fd:56:cd:
c4:59:5e:14:41:65:55:c0:65:60:d4:84:38:28:78:
79:eb:29:eb:50:1a:a4:5e:41:d5:28:9b:76:52:97:
45:6c:84:8f:ba:ea:8a:41:1f:9a:17:e6:58:62:d0:
98:a5:31:a3:33:42:de:40:fb:64:39:44:54:21:c1:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7F:43:27:9C:38:87:27:60:0D:D0:E1:AF:21:EC:B3:46:59:89:EB
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2b:28:58:81:63:9c:04:e2:b8:bd:b8:8e:38:1f:e1:bf:16:
8c:ac:fc:b4:f8:d1:ae:63:8d:cb:a1:02:91:6d:ab:35:11:57:
15:51:e1:98:66:7e:22:1e:a5:8f:f6:cb:fc:76:b8:78:2f:f9:
d7:91:8b:5c:21:5c:f2:56:ba:25:4d:d3:b7:f6:41:f5:79:86:
f8:9b:4d:c2:62:2a:26:0d:9c:2c:c7:79:f4:09:3f:53:90:e3:
ee:b1:38:c9:7b:d0:43:70:c1:f2:f8:c9:0e:99:19:b6:a0:c6:
df:91:83:f7:34:57:84:5d:d1:3e:6b:9c:7c:0f:de:0f:a2:38:
2a:e4:9f:50:4d:4f:3e:d1:3f:32:e5:18:82:e9:02:08:48:b2:
3a:03:41:30:88:c8:e0:6d:9a:3d:5c:a7:10:a1:d1:c7:d4:03:
f7:97:eb:e0:6a:61:dc:1a:e5:c4:2a:80:ac:2e:a6:c4:cb:99:
e3:26:37:c3:f1:c6:86:f9:23:93:74:d1:30:e2:c8:e4:d4:30:
f2:9b:40:72:e7:7f:51:7a:6e:fa:7c:57:99:e6:05:6e:cd:2a:
3e:a7:58:f7:20:eb:84:34:53:bd:c0:76:bc:0c:98:a5:8d:bb:
83:94:58:7e:0a:11:fe:47:1f:f6:3f:d1:b0:8a:95:f3:66:70:
af:2a:39:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 13:19:27 2025 by rpki-client