Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: MVNWsUoAwIrtGA7xYjUU+FXmWjmV6RBpOEkRSNEKn2w=
Subject key identifier: 0E:E3:22:53:E3:B7:FB:E8:32:97:9A:BC:E1:94:B6:64:15:8C:12:F8
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 01984B555936434DEA8EFD87F59C19B66FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 1596
Signing time: Sun 27 Jul 2025 10:02:21 +0000
Manifest this update: Sun 27 Jul 2025 10:02:21 +0000
Manifest next update: Mon 28 Jul 2025 10:02:21 +0000
Files and hashes: 1: 847VWHs-caMwvruiasasUJ9i7yk.roa (hash: cGKjnew3so38YN3EBXzPrvxanAQQogJHwvbCrW4djb4=)
2: Cm9tMI3yXmOZgFYnxXLEbKAgtl8.roa (hash: 3SDCzkNnUy1DY9PhPdmuMPgAHQuW7TwXQTd2pQmOgYY=)
3: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: /NhPU5ZnqMRpz57lJnskH0K5gi70P3NAndowZWciZPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:59:36:43:4d:ea:8e:fd:87:f5:9c:19:b6:6f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Jul 27 10:02:21 2025 GMT
Not After : Jul 28 10:02:21 2025 GMT
Subject: CN=0ee32253e3b7fbe832979abce194b664158c12f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:a9:35:41:c2:d5:77:a4:14:b7:40:9f:27:
ff:ec:55:33:99:a7:83:7d:03:d4:cd:5c:06:e8:55:
de:25:f0:32:e2:fd:36:e3:4d:3d:57:0a:ef:15:bd:
58:f1:bf:09:5c:b8:15:72:7f:d4:f6:d3:69:a8:03:
da:5b:47:bd:42:02:e0:ff:ec:f0:ab:b1:ad:53:81:
2b:80:c3:e3:84:1e:ee:c6:79:30:d6:31:5f:57:a0:
0e:62:3d:48:dc:68:73:f6:bc:d4:54:c8:08:7c:dd:
74:90:8a:5b:db:05:51:04:4c:5c:de:86:1a:42:22:
db:39:45:52:56:2e:87:7c:4b:03:84:65:94:6a:00:
5f:91:e4:2a:35:62:b3:95:f5:d9:0d:1f:57:c9:9c:
32:71:72:81:96:55:b7:b6:79:1c:c8:45:c8:0c:ef:
4d:46:19:54:d5:4f:23:4a:60:87:c1:e8:52:24:99:
6b:92:dd:93:a3:be:14:f8:61:e6:06:06:46:f5:97:
0a:42:0a:a9:88:cc:c2:64:11:68:b3:78:1f:fb:7b:
39:7f:07:e2:c7:24:33:db:60:e1:98:78:9d:bc:5e:
3e:2f:29:99:20:03:80:33:b3:fa:37:eb:77:f6:20:
48:33:43:f2:7d:a0:2f:ae:bd:a7:ff:03:ee:1d:2d:
5a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E3:22:53:E3:B7:FB:E8:32:97:9A:BC:E1:94:B6:64:15:8C:12:F8
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:03:5f:00:42:1f:84:51:e1:09:9a:a2:aa:00:d7:3c:78:33:
39:b9:52:96:de:7f:5a:14:52:d8:22:f1:ee:67:79:9e:23:87:
14:8d:1b:29:c6:30:cb:f7:e2:44:a9:76:e2:c1:ee:dc:99:f2:
4f:bf:f3:63:dc:72:14:4d:5a:ed:78:36:1f:a7:65:59:bd:48:
dc:c7:a0:5c:df:cd:aa:5c:79:d8:63:7f:7d:69:11:0f:40:89:
3c:d6:aa:6a:73:4f:80:19:0b:ea:ce:97:e1:69:df:26:c8:93:
f8:0b:ae:1f:7c:1a:aa:ca:af:f5:de:70:e7:c6:8f:9f:58:34:
a1:ed:65:c3:67:8c:de:b2:c2:44:dd:93:eb:03:9e:76:58:83:
94:ab:fe:18:0f:7a:36:9b:36:ba:ad:68:6f:31:ba:98:7a:ef:
bb:6c:4b:b4:94:c6:cb:5b:fe:cc:97:fd:66:56:ee:5f:cc:38:
bb:3c:d4:dd:3d:0f:96:a2:9c:3c:89:b3:0b:61:11:46:0a:56:
73:6f:f0:66:2c:4c:ca:11:3b:64:fb:a1:28:eb:a4:d5:6f:cf:
86:f2:98:c7:57:0b:7b:ec:1b:fc:ba:b6:c1:e1:fa:5f:c5:41:
49:33:d9:2a:53:6b:e5:0f:4f:b0:f4:59:db:49:a5:1b:da:0d:
93:90:1d:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVVk2Q03qjv2H9ZwZtm/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZWRmMmE0ZjIwYWMwODIzNWM0MDE4MGRlNzRlYmMzOTM1
Y2ZjMjIwHhcNMjUwNzI3MTAwMjIxWhcNMjUwNzI4MTAwMjIxWjAzMTEwLwYDVQQD
EygwZWUzMjI1M2UzYjdmYmU4MzI5NzlhYmNlMTk0YjY2NDE1OGMxMmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10epNUHC1XekFLdAnyf/7FUzmaeD
fQPUzVwG6FXeJfAy4v024009VwrvFb1Y8b8JXLgVcn/U9tNpqAPaW0e9QgLg/+zw
q7GtU4ErgMPjhB7uxnkw1jFfV6AOYj1I3Ghz9rzUVMgIfN10kIpb2wVRBExc3oYa
QiLbOUVSVi6HfEsDhGWUagBfkeQqNWKzlfXZDR9XyZwycXKBllW3tnkcyEXIDO9N
RhlU1U8jSmCHwehSJJlrkt2To74U+GHmBgZG9ZcKQgqpiMzCZBFos3gf+3s5fwfi
xyQz22DhmHidvF4+LymZIAOAM7P6N+t39iBIM0PyfaAvrr2n/wPuHS1aOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7jIlPjt/voMpeavOGUtmQVjBL4MB8GA1UdIwQY
MBaAFCnt8qTyCsCCNcQBgN5068OTXPwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUt
OTI0YzI5Y2Y3N2M0LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUtOTI0YzI5Y2Y3N2M0
LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwANfAEIf
hFHhCZqiqgDXPHgzOblSlt5/WhRS2CLx7md5niOHFI0bKcYwy/fiRKl24sHu3Jny
T7/zY9xyFE1a7Xg2H6dlWb1I3MegXN/Nqlx52GN/fWkRD0CJPNaqanNPgBkL6s6X
4WnfJsiT+AuuH3waqsqv9d5w58aPn1g0oe1lw2eM3rLCRN2T6wOedliDlKv+GA96
Nps2uq1obzG6mHrvu2xLtJTGy1v+zJf9ZlbuX8w4uzzU3T0PlqKcPImzC2ERRgpW
c2/wZixMyhE7ZPuhKOuk1W/PhvKYx1cLe+wb/Lq2weH6X8VBSTPZKlNr5Q9PsPRZ
20mlG9oNk5Adtg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:33:22 2025 by rpki-client