Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: JSSidlmgG1j1xIlyBTncPjK+Yn8O1nVZd3T/8vxuoNk=
Subject key identifier: F2:E7:9B:36:F2:24:50:DB:7A:38:CC:5C:73:9B:B4:E1:1D:9C:9E:CD
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 01987298FD1A77A1239878D6E5C341C8DF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 11A4
Signing time: Mon 04 Aug 2025 01:01:25 +0000
Manifest this update: Mon 04 Aug 2025 01:01:25 +0000
Manifest next update: Tue 05 Aug 2025 01:01:25 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: gBk2DY3cB+aH2hCR7GrP9urc+5XH9cR6bLk0nk3T8Rs=)
2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=)
3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:fd:1a:77:a1:23:98:78:d6:e5:c3:41:c8:df:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Aug 4 01:01:25 2025 GMT
Not After : Aug 5 01:01:25 2025 GMT
Subject: CN=f2e79b36f22450db7a38cc5c739bb4e11d9c9ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:da:9e:cd:7e:0f:ff:d4:b6:a0:3d:22:88:
03:c8:11:f9:c7:73:a6:c1:40:25:3d:7a:d8:89:e8:
15:4a:aa:b1:f8:f0:b4:da:86:82:27:9b:a2:98:18:
73:c8:01:1a:2b:8b:8d:c9:56:41:7d:76:e5:7f:2e:
d5:0c:04:3d:61:28:e4:23:63:a7:cc:41:4a:b3:6d:
0c:43:d2:1a:63:6f:87:75:c6:b7:f5:09:cc:34:f4:
5e:8d:82:bd:ec:64:9e:c6:57:d8:1b:5b:b3:b6:79:
09:e4:e3:d8:fc:9b:2a:6c:8a:07:ab:5b:42:08:5c:
a6:1e:f2:1d:97:e5:e1:a5:c4:73:43:43:37:3d:ed:
3f:9b:c2:a5:ef:ad:dd:cd:5f:f7:b1:98:77:29:a7:
a6:6f:23:3d:6c:91:8a:52:c5:13:62:9b:7f:9e:2f:
d0:05:d1:44:68:0d:4c:2c:ce:6b:be:33:cb:dc:7f:
53:8d:76:7e:43:53:ed:a0:e8:4e:d3:7f:87:64:40:
9e:ae:96:d2:49:23:18:30:ea:d9:6b:f4:e0:13:9b:
b9:09:c3:68:ca:b8:9b:ba:1d:ac:2a:6d:66:94:b2:
b4:7c:0c:e4:9d:2f:2b:4c:f3:78:56:a2:56:d2:8d:
2e:cb:ab:64:09:e6:8d:1e:f4:b0:00:87:b5:2d:fa:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E7:9B:36:F2:24:50:DB:7A:38:CC:5C:73:9B:B4:E1:1D:9C:9E:CD
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:dc:8b:e9:24:8e:2c:c3:c2:e6:21:4b:01:47:67:71:1e:e3:
94:14:d3:b3:16:e9:e0:dd:2e:4f:df:8e:ad:1c:79:81:ef:84:
9f:0a:c6:22:b3:ad:6c:de:4f:59:c5:e5:15:c3:89:98:95:56:
fb:b4:1f:99:74:53:08:7e:22:77:a4:17:10:70:24:bc:cd:f7:
1b:17:f9:1f:97:4d:3e:16:2d:28:6c:fc:d0:54:f3:c5:ba:b6:
36:03:e3:37:f0:ab:c2:6b:a5:70:a1:1c:a0:9a:36:c8:6a:74:
ad:be:81:82:7c:f2:9a:9f:e8:9d:72:11:91:1d:1f:d3:60:19:
bd:c9:c2:2f:8f:4d:ab:ab:e3:9a:40:36:fe:e9:aa:23:27:8c:
fc:89:10:62:8c:33:f7:da:95:c7:26:a4:e7:80:e4:82:0f:f1:
ee:85:e9:5a:98:e8:9c:02:06:ad:87:bd:47:5a:da:2e:f1:f1:
db:81:7b:2c:29:b2:19:9d:3c:b8:95:71:7d:01:c8:da:58:da:
83:da:f8:8f:73:12:8d:c7:15:19:ce:25:a3:4d:35:10:84:48:
0c:6a:a0:5c:aa:ea:14:5e:04:2a:57:e2:00:44:8c:f2:e9:13:
9d:cd:44:87:32:0a:cd:cb:a0:07:01:f6:5f:0d:c4:1d:68:cc:
1c:9f:1b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:40 2025 by rpki-client