Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: uwvuQl5tSyqDT1HZJu5ADWLkZeU8OAaS30eoXhl4Tk4=
Subject key identifier: C2:CA:2B:E5:7D:E4:A8:43:C4:D5:2F:AD:5D:0B:F3:FC:FD:6C:DC:4A
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 0197684E46795EFF9AE573FFF3BE502F9B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 12DF
Signing time: Fri 13 Jun 2025 08:00:49 +0000
Manifest this update: Fri 13 Jun 2025 08:00:49 +0000
Manifest next update: Sat 14 Jun 2025 08:00:49 +0000
Files and hashes: 1: 7heC61NtQoMcpuhj_ZjE2RH5xUk.roa (hash: 9n2osY0Zh0YOvne11Off7803igcpZJUc8/cMI8UdihQ=)
2: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: 6qN7WglEs0+gBHaZl0q1p78dG76RKBzfbN1x895+AnI=)
3: qu7vMGQcvRYv7s2ySlulG6L93rk.roa (hash: MEMNuLUG6QK5Jryxt/02AqlLZl7VyqgmTmooG82bGe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:46:79:5e:ff:9a:e5:73:ff:f3:be:50:2f:9b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Jun 13 08:00:49 2025 GMT
Not After : Jun 14 08:00:49 2025 GMT
Subject: CN=c2ca2be57de4a843c4d52fad5d0bf3fcfd6cdc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:cc:07:c2:3d:1b:5b:ab:2b:95:43:82:1c:
8e:34:e3:c6:7d:9b:ec:08:bb:55:4f:d8:e0:b4:2e:
e6:91:a8:73:06:7b:38:3c:59:39:4c:2b:66:e0:ac:
21:6b:47:dd:bd:28:89:8e:41:18:52:d7:7e:ac:7c:
45:be:4c:d6:13:8f:8e:45:bd:63:0c:88:40:57:58:
9e:02:94:98:14:56:0f:0d:b2:70:1e:ff:13:09:08:
a9:9e:90:d5:de:2e:64:d9:10:29:c5:83:2d:2f:54:
3a:63:48:45:94:42:17:5b:45:cd:43:af:b7:66:0f:
57:67:b5:13:a7:f5:cc:e0:d4:ae:1e:85:9e:07:5a:
8f:75:14:f9:2b:15:a0:01:8c:ff:2d:94:a6:0a:f8:
36:6b:05:ed:7c:5e:7a:fc:c6:c4:39:b0:8c:eb:d0:
7c:b5:cd:80:3e:21:d6:d5:ea:87:2f:a7:d7:25:b1:
21:1d:f1:33:65:c2:6a:a5:af:61:60:de:f6:3c:ea:
68:c4:4e:7e:1e:8b:53:cc:63:61:b9:13:5c:0c:d0:
e8:fb:fe:e7:d3:7a:4b:8f:3c:e4:c4:62:a8:57:08:
4a:b3:5e:ff:31:bc:ec:8e:18:08:e4:73:9a:a0:d1:
9f:b2:fe:a0:f5:9a:a9:6c:6b:0a:88:ec:ed:8d:c1:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CA:2B:E5:7D:E4:A8:43:C4:D5:2F:AD:5D:0B:F3:FC:FD:6C:DC:4A
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c6:c0:00:0b:44:98:19:3b:72:46:7b:d7:57:3e:fd:23:f5:
6a:32:87:09:58:41:33:7f:5e:3d:72:7d:02:ef:e3:7d:c2:7a:
db:f9:b2:82:97:ff:27:4d:ce:20:72:d9:ff:53:fe:bf:34:43:
f3:a2:87:21:d8:ad:75:fe:2f:43:61:b3:68:af:92:04:3e:eb:
c8:15:3d:9f:67:58:ce:59:c9:0c:ff:c5:f5:71:ef:88:17:2a:
ff:d9:38:5d:a1:1f:f5:1b:18:6e:d2:80:9c:fa:a6:b0:b3:70:
18:55:8a:a9:e1:8c:5b:29:90:da:77:72:84:76:54:f2:37:1c:
33:9f:72:3e:fe:01:0c:95:23:78:14:43:1d:d8:fa:d1:cd:10:
fd:29:89:b8:0f:06:5d:59:ce:bf:04:9e:f8:b7:32:21:43:2f:
63:a8:55:a4:25:76:9e:f0:45:3d:64:52:46:7f:53:ac:ee:15:
53:fd:82:45:77:4b:36:e0:c3:7d:d5:b2:f2:e9:c6:b2:35:2b:
12:7e:1e:13:ab:5f:8b:e4:fd:0c:05:4a:19:db:91:b2:78:01:
4a:f0:32:69:db:18:d1:f2:fc:50:79:c0:a4:94:b5:75:64:3d:
8b:da:d0:fd:8f:78:7c:86:74:28:ea:f6:7d:26:63:2a:7f:1a:
0b:1d:6e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:20 2025 by rpki-client