Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: ZNL74WG0hm5IJyxG7yYjgmeOWXFyO4rHvuL27P2VXAE=
Subject key identifier: 55:9B:C3:7D:E3:E6:24:8B:61:8D:26:93:C1:42:08:88:37:22:30:7A
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 019872CF5FF32C229022469437CB6735D5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 1369
Signing time: Mon 04 Aug 2025 02:00:49 +0000
Manifest this update: Mon 04 Aug 2025 02:00:49 +0000
Manifest next update: Tue 05 Aug 2025 02:00:49 +0000
Files and hashes: 1: 7heC61NtQoMcpuhj_ZjE2RH5xUk.roa (hash: 9n2osY0Zh0YOvne11Off7803igcpZJUc8/cMI8UdihQ=)
2: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: ETsWGS6gHp6OP9AHhhSunMtCg50eCFuV6CodaeZTKWU=)
3: qu7vMGQcvRYv7s2ySlulG6L93rk.roa (hash: MEMNuLUG6QK5Jryxt/02AqlLZl7VyqgmTmooG82bGe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:5f:f3:2c:22:90:22:46:94:37:cb:67:35:d5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Aug 4 02:00:49 2025 GMT
Not After : Aug 5 02:00:49 2025 GMT
Subject: CN=559bc37de3e6248b618d2693c14208883722307a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:84:12:47:9a:0c:51:00:82:6c:db:91:7a:
e4:30:05:23:16:35:1c:34:3b:95:a0:75:c9:4f:03:
49:7c:47:51:da:87:4f:72:c6:2d:ae:9b:41:2b:71:
a2:78:06:d2:a3:c2:f0:24:bf:ae:e3:b3:db:7e:3f:
ef:cb:dc:4d:e6:14:04:ed:44:fd:94:2c:d0:bb:5c:
5b:49:8e:0f:31:b0:42:30:ba:6e:c4:59:5d:21:ae:
61:a4:89:e4:a9:c7:0b:60:ba:97:a1:40:76:91:ec:
7c:48:41:f5:f3:7d:21:27:96:3d:aa:8b:09:02:1b:
14:7f:15:24:94:15:f1:f4:4e:5c:16:85:29:50:31:
1c:a5:7e:17:58:c2:a1:40:9f:2d:e4:91:a7:2a:20:
5a:71:f1:04:f4:1d:64:11:39:8d:4d:2f:bc:8b:e8:
c9:17:38:8e:e3:0f:0a:73:86:28:12:d9:a9:9f:49:
ba:7d:e4:28:47:41:50:f4:5b:41:18:9c:9d:19:2d:
c6:52:b6:1a:21:d2:67:1e:99:62:cf:57:69:46:76:
4a:60:ec:70:fd:04:b9:c8:8c:98:f2:9b:6f:25:79:
09:5a:78:2f:75:50:4e:e3:71:03:e7:9d:03:a1:ac:
f5:e6:86:bf:cc:a2:8b:f8:96:1a:f9:88:cf:6c:b6:
c4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9B:C3:7D:E3:E6:24:8B:61:8D:26:93:C1:42:08:88:37:22:30:7A
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d7:98:9b:04:e8:7d:08:f0:df:b6:e8:dd:e7:4f:44:b3:8f:
3c:f3:e0:ef:94:3a:ed:03:a7:aa:51:bc:6b:d8:aa:ee:94:48:
4c:13:3e:c9:ac:e0:38:2b:27:42:ad:10:0b:84:d8:57:1b:a6:
47:1b:95:6c:ba:fe:94:b6:66:8b:ff:7e:62:4e:fc:0e:28:db:
cc:08:5b:4d:57:f6:4d:67:88:4d:15:28:18:af:c6:11:34:c9:
9b:6d:33:b1:b9:d9:ca:8b:4e:63:91:90:16:ef:7a:31:05:2f:
db:94:a3:a5:61:89:9f:8b:1c:e6:5c:fa:3b:16:77:12:95:63:
f1:f0:e0:37:2f:19:a3:3d:15:1a:50:27:28:b2:09:a2:43:0e:
5a:63:90:9e:3d:49:f9:3c:6e:32:84:1d:ff:de:f4:8e:14:16:
96:c6:00:c9:3e:50:30:48:36:bc:a6:c4:b7:8c:30:f5:c7:16:
70:50:eb:07:38:e4:fc:23:f2:e3:d1:18:b8:18:94:3f:45:f5:
78:3d:02:26:c5:62:67:16:66:44:5c:f3:78:23:65:05:6c:b6:
3f:09:ef:f1:45:b5:dd:2d:eb:e8:f0:0d:bc:ee:1a:ae:a2:19:
4b:01:41:f6:e7:ae:38:b0:74:ef:15:54:c5:3a:0a:47:56:41:
5d:04:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:22 2025 by rpki-client