Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier: jEypSQHNAk9S/76xeZ+qhlhvY10v3VBrlNYM2uyKGPY=
Subject key identifier: 3A:73:63:C5:0C:7F:32:7A:85:91:01:63:9D:12:FA:02:0C:D0:EB:E4
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 0198529F2D2DD52539BD7D23A246E574225A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 20:00:20 +0000
Manifest this update: Mon 28 Jul 2025 20:00:20 +0000
Manifest next update: Tue 29 Jul 2025 20:00:20 +0000
Files and hashes: 1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: S4KPgIaLmgRWcS+xrW1pD7hYqJYWXMpQdXquQSK7Uho=)
2: m0XExKmyfiqbc39X_t0r3f-rPnw.roa (hash: FEVTKa9GfQK+wd1z7OERkMrYF0fGkCabFyfJNv3Ffiw=)
3: rqU6u3hoknN-3UdF3hZxUQWu0pY.roa (hash: NDMORKcf0xpEpr+RJnB8nufh5JN+9UGeMs7mpyek8O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:2d:2d:d5:25:39:bd:7d:23:a2:46:e5:74:22:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Jul 28 20:00:20 2025 GMT
Not After : Jul 29 20:00:20 2025 GMT
Subject: CN=3a7363c50c7f327a859101639d12fa020cd0ebe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:20:be:53:3a:38:ff:73:48:d4:2c:33:03:
6b:19:35:6c:ac:e2:5a:99:b5:54:f2:08:5b:5d:cf:
dd:da:5e:9e:c3:76:ac:5e:40:2d:a8:63:08:ef:36:
64:a7:d1:fe:7f:5f:da:a6:2b:03:7c:2f:e3:61:f3:
22:a6:87:2d:1c:d8:6b:bb:ce:68:3d:ac:40:d9:6a:
26:a1:de:60:f4:fb:40:4f:40:bf:cf:32:83:50:cf:
ef:5b:e7:1b:a0:36:6c:50:1a:c7:48:04:63:1d:84:
ec:e5:a0:0c:f8:8b:57:0d:a6:cc:2d:21:f5:cf:85:
39:78:a6:58:83:fc:3d:2c:ff:79:c4:33:07:91:d2:
b0:a0:49:15:60:27:81:d9:e7:1f:78:35:5c:d8:de:
77:63:0a:56:a9:e2:8f:b3:e6:83:e2:36:19:4f:ca:
76:6a:2a:54:28:0e:f0:44:ce:62:12:c2:48:02:7e:
8f:66:95:12:39:d5:d1:3a:8c:fb:b8:db:fd:80:33:
f3:1d:d2:2a:93:53:49:10:b5:ba:6d:d5:fd:d7:94:
70:26:d0:8e:10:dd:53:25:26:30:63:03:e0:9a:49:
d4:fa:f3:fd:e1:6b:65:a9:3b:d2:f4:5a:ff:ee:49:
2b:c3:0b:00:db:63:4a:33:4c:0a:d7:a9:7b:12:5b:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:73:63:C5:0C:7F:32:7A:85:91:01:63:9D:12:FA:02:0C:D0:EB:E4
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:59:0f:83:69:3d:9d:f7:54:4d:5c:10:fe:48:9c:9f:78:0f:
1f:71:f8:33:d4:85:89:04:6c:e7:58:e1:42:13:18:b4:1f:44:
7a:1f:7f:12:72:77:ad:3c:b3:ac:7f:1e:15:3e:9e:7c:ad:62:
8e:e5:e0:82:6e:1e:1d:29:27:26:e9:35:f9:a9:ff:ef:11:c9:
c9:3c:f1:17:40:e7:ef:45:1e:03:2a:61:2d:f0:f9:48:69:04:
08:5d:6d:82:88:e8:88:73:b4:cf:84:bf:db:26:4c:d3:47:e1:
2e:19:3b:9b:4c:01:7d:8a:87:f4:47:de:00:19:17:4c:99:d6:
50:3e:62:6a:b2:d0:89:df:09:34:11:79:cb:3c:b6:ee:ae:96:
52:1e:1a:ff:04:c6:ab:49:15:d4:dc:53:88:c6:64:ca:cd:96:
a5:bf:33:77:b7:85:29:7b:e6:d4:16:4d:1b:eb:37:2f:8f:81:
0f:cf:6c:a5:90:57:8b:ee:52:65:26:a5:aa:8c:d1:fb:29:6c:
1d:eb:8d:66:f0:d6:82:53:66:cd:92:d8:8c:70:66:1f:40:32:
0d:ed:61:20:f9:5a:71:48:4c:62:f5:06:3d:d6:96:34:94:9e:
92:5c:f5:da:f4:14:c5:bc:98:eb:28:2f:51:6c:a5:ae:c0:4b:
46:10:5f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:42:44 2025 by rpki-client