Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: T+G7rEkNy1HudtPlkfRcMAsJU5hE/TIBWZGruZBLPCQ=
Subject key identifier: 20:2C:9C:88:5C:CE:76:F7:A1:2D:D1:02:FB:26:23:A1:48:5F:2C:98
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 01976A05E4834F2B2895917D608E54CC651F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 111B
Signing time: Fri 13 Jun 2025 16:01:00 +0000
Manifest this update: Fri 13 Jun 2025 16:01:00 +0000
Manifest next update: Sat 14 Jun 2025 16:01:00 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: Bhrq7clCKH+2Qv/ke2pa8tWIynvIWpOZAhqY5T0b9CU=)
2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=)
3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:e4:83:4f:2b:28:95:91:7d:60:8e:54:cc:65:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Jun 13 16:01:00 2025 GMT
Not After : Jun 14 16:01:00 2025 GMT
Subject: CN=202c9c885cce76f7a12dd102fb2623a1485f2c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:21:99:f0:45:54:7a:37:02:42:49:0b:97:
5a:ca:3c:fa:10:bf:74:75:11:61:88:9b:be:b3:62:
4f:58:52:06:04:a5:57:99:dc:8d:81:ed:47:5f:76:
69:8c:cd:3f:44:87:f6:66:eb:84:50:dc:73:36:09:
53:52:bb:04:36:e4:e4:af:8e:57:38:5d:6c:a9:2a:
79:f6:8d:7d:1e:9b:43:c2:cc:d1:fd:3f:51:04:b3:
26:4c:a7:d5:35:69:33:7f:e8:6f:18:80:83:bb:29:
8b:c6:5f:9a:38:33:92:75:06:47:f7:ba:76:7f:3f:
6a:4a:9c:7c:c4:54:1b:3b:d6:f3:fe:34:cf:68:25:
2a:40:73:1f:97:de:8b:cf:ac:06:f4:17:ad:68:3c:
3b:68:6a:a6:3d:6b:51:85:a1:de:6a:c3:a8:45:8b:
c1:ad:93:f9:21:33:84:01:52:cc:7c:e7:8a:3f:16:
c6:01:82:34:41:0d:5e:f3:ec:cd:0e:80:36:e0:39:
d3:bd:6d:61:5c:b6:ac:95:f1:cd:17:be:fb:fd:08:
37:bd:88:8b:05:26:03:89:72:ab:0a:7c:68:db:39:
8e:6e:76:41:54:a5:45:fb:c6:a2:e8:9c:36:8a:47:
1a:0c:7d:78:16:c7:df:14:fc:32:dd:43:51:74:00:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2C:9C:88:5C:CE:76:F7:A1:2D:D1:02:FB:26:23:A1:48:5F:2C:98
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:39:2d:35:4c:e1:10:b3:16:e2:8c:ca:16:dc:25:40:a5:c8:
f6:44:73:3d:c7:3c:4d:73:bc:85:4c:3d:c6:2e:d0:a4:10:59:
92:80:20:34:b8:39:ab:de:81:c7:cb:c6:5e:57:76:65:47:a5:
b6:cf:aa:05:19:72:94:0c:f2:59:83:a9:00:94:79:67:f2:9e:
d4:6a:d7:22:14:29:86:60:73:20:83:fd:a8:98:4d:7c:9d:ba:
2c:2e:9b:4f:e7:4c:23:2d:dd:48:81:97:0f:6c:64:91:f0:bd:
61:94:26:b7:6f:e9:f5:50:9b:b0:7b:87:50:5f:ad:07:df:11:
b2:52:06:48:ad:a7:84:e3:2b:f2:08:94:c1:35:66:57:ec:02:
b4:26:a3:28:a8:9f:fb:6e:6b:61:6e:2d:93:6a:ec:3f:97:e9:
f1:cf:52:67:47:2d:82:05:43:40:55:47:fb:60:ba:9b:75:91:
fc:9d:cd:c4:d6:06:e0:4a:8e:a1:85:bf:8a:f0:1f:a6:b3:ba:
50:2d:b7:42:c8:75:d6:d1:73:c0:12:9a:4f:ee:7d:a4:d4:f5:
14:59:15:b3:dd:d8:38:56:86:f7:9b:37:0c:a2:8b:3f:cd:45:
fd:d0:2d:06:5a:c1:26:93:77:66:07:0e:13:f5:7f:a1:c0:52:
6e:e6:aa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:13 2025 by rpki-client