Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier: Y/deiiwBV+LdMNMfWlYp7bEvyjUfboCVqF4GrBYZ4JA=
Subject key identifier: 7C:6B:59:E1:82:B8:3F:2A:4E:1E:F6:42:69:43:62:8B:81:43:65:D1
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 0197462FE3CAE2DC7BE7408FEF62823AA83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 17:00:33 +0000
Manifest this update: Fri 06 Jun 2025 17:00:33 +0000
Manifest next update: Sat 07 Jun 2025 17:00:33 +0000
Files and hashes: 1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: 7OU0qfqwXMlKAjFr3V7ZXqXfuVWGOTRwS/E0WzQ3g3Q=)
2: m0XExKmyfiqbc39X_t0r3f-rPnw.roa (hash: FEVTKa9GfQK+wd1z7OERkMrYF0fGkCabFyfJNv3Ffiw=)
3: rqU6u3hoknN-3UdF3hZxUQWu0pY.roa (hash: NDMORKcf0xpEpr+RJnB8nufh5JN+9UGeMs7mpyek8O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:e3:ca:e2:dc:7b:e7:40:8f:ef:62:82:3a:a8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Jun 6 17:00:33 2025 GMT
Not After : Jun 7 17:00:33 2025 GMT
Subject: CN=7c6b59e182b83f2a4e1ef6426943628b814365d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:67:9e:ff:64:20:14:62:f6:e2:bb:37:43:
25:1d:fe:73:13:51:1d:5e:a9:45:52:e4:63:42:2f:
bb:fa:5d:60:78:31:53:ae:1c:f4:2f:2a:7c:f3:70:
6a:f2:df:26:62:dc:d0:b0:26:3f:da:68:15:d3:ce:
3a:60:9c:1d:01:cc:92:27:f8:7c:c0:53:78:0d:80:
d7:ea:3b:13:b3:36:72:99:fd:00:ad:7e:00:96:7e:
7e:46:b3:6b:b1:dd:fe:cb:62:f2:6f:ea:5d:07:19:
40:87:8c:58:1c:d4:95:e0:38:2f:72:aa:28:4c:0e:
54:ee:83:1c:43:f1:5a:80:6e:a2:b1:5a:8f:f5:ae:
ab:51:78:54:cf:ae:d7:da:d8:7b:c4:11:80:c9:f4:
fb:dc:0b:0d:85:8a:b0:39:ac:80:f5:87:6a:fb:88:
05:0c:4d:e9:91:64:cd:82:65:10:e9:8a:92:d8:59:
da:ed:d0:b4:90:d8:6e:c8:af:7c:60:c4:87:33:39:
f0:92:74:19:ab:b2:27:58:9a:a4:4b:ca:bf:f9:48:
5b:d3:f8:78:36:83:60:a1:b3:81:8d:53:4f:73:c9:
d4:49:89:38:0c:af:c7:1c:32:84:03:60:dc:b6:91:
4b:ee:42:d8:84:9e:a8:b8:e5:6e:96:e1:92:cd:29:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6B:59:E1:82:B8:3F:2A:4E:1E:F6:42:69:43:62:8B:81:43:65:D1
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f3:9d:76:37:4b:26:54:bf:e1:dd:e0:fe:1c:33:67:23:b4:
ff:a9:ef:e8:fd:0c:5d:37:a7:a6:ea:c1:29:e1:15:a4:4f:97:
77:d9:ae:bb:f4:61:17:5b:57:ad:32:24:85:7f:c9:8f:8b:40:
12:d6:cf:35:9e:de:7d:39:c8:47:ff:69:a5:a9:e8:7b:7b:05:
82:3f:79:60:01:0e:a8:aa:b5:ce:e1:c3:88:ae:8c:2a:9c:76:
64:eb:63:d4:69:85:03:b1:0c:82:b9:e9:1d:d4:e9:f5:14:4a:
69:21:99:4f:60:d5:e9:59:8d:c7:6d:80:5a:78:aa:cb:77:0e:
1f:d0:c3:85:fa:0d:39:0f:01:80:8e:9d:ef:0d:f4:7d:42:7d:
7a:db:82:f8:31:ce:6f:c9:76:f8:60:73:34:51:71:ae:7b:fc:
f9:bf:26:fb:06:14:c7:f5:1a:50:b3:9e:16:18:51:ef:4f:15:
3a:9d:a6:17:d1:95:3f:6b:f9:d9:6a:b8:88:4a:ef:5c:8d:0e:
9e:3d:f9:ee:8b:16:37:eb:02:0b:fe:4b:4b:3b:d1:e3:c6:27:
40:c9:5d:d2:d6:a8:61:73:ee:2a:81:ee:88:23:3b:f3:45:57:
3d:b4:0a:46:0b:07:a7:ec:9e:12:3b:b7:67:d9:91:d4:39:f9:
54:06:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:31 2025 by rpki-client