Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
File: KeieDArUFRV01m8rML0dpKqd8Fs.mft (raw, json)
Hash identifier: PFFAys1KAI+Ri+kn1CdycVYW5p4XVqSreA7xSTrJG3I=
Subject key identifier: B2:46:B8:52:EC:65:E8:B4:45:DA:11:7A:A6:68:5A:D7:37:B0:E6:7F
Authority key identifier: 29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
Certificate issuer: /CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Certificate serial: 01984778257A4B9AF917DE02B497D97F8B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
Manifest number: 12CC
Signing time: Sat 26 Jul 2025 16:01:52 +0000
Manifest this update: Sat 26 Jul 2025 16:01:52 +0000
Manifest next update: Sun 27 Jul 2025 16:01:52 +0000
Files and hashes: 1: KeieDArUFRV01m8rML0dpKqd8Fs.crl (hash: 2YE0Md/62ZORUGiTM6Z2eTGnCe906RKGSZvSjopVSoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:25:7a:4b:9a:f9:17:de:02:b4:97:d9:7f:8b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Validity
Not Before: Jul 26 16:01:52 2025 GMT
Not After : Jul 27 16:01:52 2025 GMT
Subject: CN=b246b852ec65e8b445da117aa6685ad737b0e67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:24:cc:df:c1:e8:8a:14:14:78:c0:4b:12:
6f:5d:a3:e6:ce:9e:12:59:d1:bc:2f:de:06:7f:2c:
d5:ad:de:8e:d0:62:7f:49:a9:fc:47:0c:ff:78:d8:
24:d9:e0:53:38:fb:e7:dc:55:39:1e:89:c3:05:f2:
b9:51:74:dd:ce:f5:f8:7e:70:f5:02:37:98:a2:2a:
48:ec:c3:3b:9f:23:aa:cf:21:82:aa:6e:92:b3:3d:
e9:3b:c4:2a:85:c4:06:96:dc:c5:19:a9:22:e3:3f:
6d:61:9a:fe:af:86:e9:61:35:2d:2e:c2:6a:89:de:
3c:35:04:50:00:92:ae:d9:a9:8a:ee:c6:54:11:19:
88:69:45:9b:77:f3:8f:d1:03:32:62:18:47:39:41:
f0:c1:46:b1:06:e0:b5:10:05:8e:15:50:d4:1f:e4:
7e:21:53:c5:f9:98:f3:8c:8a:33:89:07:04:69:d7:
1a:ec:60:51:e2:5a:ba:cb:18:1f:fe:a7:85:8b:fa:
7a:9e:ae:69:7b:67:10:25:6a:95:77:cb:6a:c3:a4:
cf:fd:c6:cd:db:8e:d3:d6:d7:a0:a0:e5:e6:de:93:
de:9f:17:1e:96:6a:e2:af:3d:ba:e5:0c:70:cf:9c:
ea:55:d4:18:0b:88:2e:7b:a5:69:78:9d:7e:95:41:
73:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:46:B8:52:EC:65:E8:B4:45:DA:11:7A:A6:68:5A:D7:37:B0:E6:7F
X509v3 Authority Key Identifier:
keyid:29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1b:4d:f7:c8:e7:6c:d9:a0:11:d5:0b:17:19:4c:52:a5:ea:
fa:60:9b:c7:4d:56:70:e8:c0:6f:46:3b:34:e7:0f:1f:7f:8f:
1d:4a:50:ba:89:f4:e3:95:31:ff:fe:91:f0:fe:26:35:20:44:
ce:d9:fd:d3:df:5e:aa:47:3e:84:da:ff:e5:6e:9a:ff:39:8f:
d4:55:64:ac:cd:26:11:15:98:61:7e:0b:e0:19:6d:8e:9f:96:
53:0b:e0:5f:69:71:43:bd:00:96:1e:cb:0f:d8:74:45:40:a1:
4d:b0:12:ab:53:23:cd:e5:b5:f5:f4:b6:98:bc:8e:f3:ba:f5:
27:12:16:11:bb:01:d6:5c:f8:03:e0:f3:5d:9c:42:b8:3a:76:
53:03:d5:c4:aa:4f:7a:b8:1d:aa:e7:21:08:61:78:4a:3b:69:
12:96:66:c8:71:f9:80:e7:37:dd:a0:e0:1e:fa:3a:44:0d:f2:
af:af:a2:a6:ed:5a:07:c1:81:85:bb:88:b1:26:7f:16:0e:cf:
e8:0b:c3:d6:62:b2:85:a4:95:e4:18:05:1e:f4:a3:1d:42:78:
23:45:30:f3:c9:94:20:4b:ae:f5:c6:56:85:b9:b7:8f:0c:a3:
d3:74:59:72:f5:3c:95:e6:1b:39:7f:df:6b:5c:5a:01:d7:ab:
03:4c:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:37 2025 by rpki-client