Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: o+Rjkci27eDM6/eeXWWIPrGs5z+OQhJQKLKOPnFv+aY=
Subject key identifier: 00:79:BB:FC:62:D1:51:88:66:B9:8F:18:AD:D5:9F:BB:49:C5:DC:0D
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 019A4DAB0C67C2F244099AD03C80F542128D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 129A
Signing time: Tue 04 Nov 2025 07:00:46 +0000
Manifest this update: Tue 04 Nov 2025 07:00:46 +0000
Manifest next update: Wed 05 Nov 2025 07:00:46 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: xFWUBgLkaiZtR9ttlOY+rFWcNKHk85eodsWsgjp/PLs=)
2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=)
3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:0c:67:c2:f2:44:09:9a:d0:3c:80:f5:42:12:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Nov 4 07:00:46 2025 GMT
Not After : Nov 5 07:00:46 2025 GMT
Subject: CN=0079bbfc62d1518866b98f18add59fbb49c5dc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:03:39:ca:5d:39:db:4b:c4:0c:9c:6a:76:a0:
1e:87:f7:b0:2c:06:2b:06:83:2f:04:dd:4f:6a:8f:
eb:d7:01:16:61:76:dd:50:7a:8e:70:c6:c6:e9:52:
8c:2a:ef:fd:55:e6:8b:58:5a:93:e8:f5:8b:11:ff:
5b:dc:97:7c:b6:b4:fa:94:b7:08:ff:d8:e2:02:1e:
9a:3d:52:5c:58:79:be:ba:0a:b1:7f:be:e0:f6:dc:
4a:a0:28:82:68:48:76:2a:c0:fa:b3:f8:cd:ff:0f:
b2:e6:09:38:a8:3c:75:23:ec:50:ce:54:d3:40:c2:
4a:1b:db:f0:a0:00:cb:18:96:c9:81:76:01:a3:ff:
ac:53:df:47:ee:1e:e8:09:51:2b:6d:97:22:9b:b4:
9c:72:12:c5:c9:7e:c2:0d:dc:ab:5c:e4:32:b6:3c:
2f:35:40:6f:5f:00:cb:2c:7a:84:29:f2:62:51:f8:
29:5c:9c:ec:bf:4e:08:a7:54:70:3f:d3:4b:8b:52:
21:94:f7:99:0a:58:6d:fc:24:dd:1e:c6:2f:71:28:
d9:95:3f:d2:bd:1d:e1:a4:e4:7a:a4:ac:07:cc:cd:
a4:33:6f:a8:57:89:77:83:16:15:36:0b:a9:95:47:
ec:f3:e9:09:67:29:98:41:33:66:c3:ff:5b:ba:0a:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:79:BB:FC:62:D1:51:88:66:B9:8F:18:AD:D5:9F:BB:49:C5:DC:0D
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:02:24:17:a0:05:f3:55:c1:ef:0a:f6:0f:3e:5e:00:83:df:
ff:03:18:39:9e:cf:e4:3b:9b:62:15:1d:f3:69:65:2b:95:93:
5f:b1:82:59:91:64:ff:e2:94:15:e3:a3:d3:b6:84:cd:2c:bb:
15:9e:0f:d0:e2:cb:8c:8e:ce:c5:fb:63:2c:2d:a6:c6:60:18:
0f:13:8b:ba:6f:2f:7d:9d:c9:2c:87:19:22:2d:30:11:b0:47:
03:12:a4:e0:b7:c6:66:08:7a:5c:ab:c5:d9:ab:84:d1:21:c3:
bc:12:2b:24:ea:df:db:1c:c3:0c:cf:bf:8a:9c:09:66:82:1b:
b1:22:f8:de:c0:93:65:6a:63:ec:45:e8:ad:9f:ff:3b:cd:a3:
a1:86:cd:18:6b:d3:07:5d:55:9f:c5:2b:ea:6f:17:5c:5b:1c:
9b:cd:3c:c2:04:da:9f:8b:9e:9b:b6:3a:01:37:50:5f:b5:e4:
b3:16:44:57:61:5b:14:3e:a0:20:07:84:e4:3f:f4:f5:54:d4:
7f:6f:4e:32:aa:b1:96:b2:a3:de:43:1c:6f:d5:91:65:24:28:
21:66:63:75:a2:72:a0:b3:da:d6:79:bd:af:97:92:68:b6:25:
09:d5:8d:63:1c:09:05:c0:c7:2c:a1:cf:d8:19:2e:b9:98:8d:
38:46:c3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:02 2025 by rpki-client