Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: 7qwYiP8bguyRMqSa/aRI0ezMpn1Kn/Xsw5sYxnQUbMI=
Subject key identifier: 5A:86:87:31:41:57:22:FB:86:F8:FA:58:1C:5D:DF:1C:37:33:C5:C3
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 01974A7B42A72FB4BA3F70739A835171AF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 1511
Signing time: Sat 07 Jun 2025 13:01:21 +0000
Manifest this update: Sat 07 Jun 2025 13:01:21 +0000
Manifest next update: Sun 08 Jun 2025 13:01:21 +0000
Files and hashes: 1: 847VWHs-caMwvruiasasUJ9i7yk.roa (hash: cGKjnew3so38YN3EBXzPrvxanAQQogJHwvbCrW4djb4=)
2: Cm9tMI3yXmOZgFYnxXLEbKAgtl8.roa (hash: 3SDCzkNnUy1DY9PhPdmuMPgAHQuW7TwXQTd2pQmOgYY=)
3: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: dIQzKiFvtvl6klsiUwFx4LGgwbUQy9hzPWCl28WSyaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:42:a7:2f:b4:ba:3f:70:73:9a:83:51:71:af:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Jun 7 13:01:21 2025 GMT
Not After : Jun 8 13:01:21 2025 GMT
Subject: CN=5a868731415722fb86f8fa581c5ddf1c3733c5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3f:de:76:88:aa:87:cb:9e:6e:3a:59:86:93:
77:bf:87:6d:6b:91:d3:ae:b4:0e:7c:d2:de:d6:b7:
ba:53:a9:19:03:fe:30:57:50:0a:82:3b:ab:58:6a:
61:d6:d6:ed:12:8a:25:2d:cc:f3:31:8c:b1:00:25:
65:84:c0:97:2c:f0:be:a7:d8:83:1c:43:71:2a:47:
31:a8:1b:76:52:84:85:56:65:36:42:ff:fe:bb:7f:
26:ea:11:8f:b2:b7:bc:42:be:36:7b:65:25:c7:2b:
cb:67:75:7a:a1:47:6a:82:a8:fc:55:1f:a1:cc:45:
3c:ca:1a:5d:eb:64:fc:23:58:33:e6:f0:41:c4:26:
bf:d9:64:45:d7:6f:32:ee:6a:c6:9c:61:3e:ae:1a:
55:20:98:57:da:be:38:57:ab:70:ed:f6:56:54:a0:
61:da:ab:34:6f:97:e8:81:41:d1:a2:1f:15:e6:3b:
09:8f:be:7a:cd:2e:5d:af:6b:fb:de:2a:65:93:d2:
76:81:bd:42:9b:b6:f9:3b:af:ba:c4:fb:95:87:a6:
cf:b8:41:40:1d:db:d7:04:95:c6:90:51:47:59:eb:
39:5b:a5:51:71:45:ef:b7:b5:5b:8a:92:df:b3:ba:
7c:3d:41:28:29:1d:e7:7a:d4:6c:25:38:f3:8a:e8:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:86:87:31:41:57:22:FB:86:F8:FA:58:1C:5D:DF:1C:37:33:C5:C3
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:4b:c9:e1:05:27:03:43:74:43:27:bc:7f:78:9b:a0:5c:66:
fe:be:0c:4c:46:e5:8e:1a:28:ac:84:43:c6:b8:8e:9b:0e:4b:
b1:a2:c2:18:69:98:1e:c6:59:71:9d:cd:55:5e:cf:cc:7b:05:
ce:df:65:41:66:36:60:2f:ca:7b:81:08:91:d4:57:05:2d:6e:
0d:11:e3:79:71:b0:b2:7b:46:cd:e0:39:8e:c7:35:84:5b:74:
6d:15:8a:7f:20:0d:36:6c:35:82:98:fd:f2:1e:5c:a7:36:15:
ef:61:44:29:97:3b:2d:56:97:f0:76:11:03:b6:2e:7a:8e:9c:
a1:e7:18:1a:e3:3f:a1:5b:02:7f:fe:2a:6c:97:0c:99:9b:fb:
c2:f7:a9:c5:e1:80:bc:e2:2d:65:4b:df:06:49:5b:27:2d:2f:
78:2a:a8:d6:06:fb:c8:80:4f:ed:ee:a2:a8:5d:2f:3a:a1:36:
4c:a9:36:64:46:64:ad:99:4b:35:2f:54:0d:f1:4b:ed:c8:cc:
92:f9:93:25:2a:1f:47:53:ed:34:0c:4e:d8:21:3d:da:19:8e:
1f:b7:98:6d:33:8a:e3:18:15:80:e8:56:ce:26:89:0d:78:89:
7e:a5:1b:b3:95:8b:8c:c5:62:e3:80:bf:98:0d:36:67:3f:21:
cc:62:c6:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe0KnL7S6P3BzmoNRca+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZWRmMmE0ZjIwYWMwODIzNWM0MDE4MGRlNzRlYmMzOTM1
Y2ZjMjIwHhcNMjUwNjA3MTMwMTIxWhcNMjUwNjA4MTMwMTIxWjAzMTEwLwYDVQQD
Eyg1YTg2ODczMTQxNTcyMmZiODZmOGZhNTgxYzVkZGYxYzM3MzNjNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+D/edoiqh8uebjpZhpN3v4dta5HT
rrQOfNLe1re6U6kZA/4wV1AKgjurWGph1tbtEoolLczzMYyxACVlhMCXLPC+p9iD
HENxKkcxqBt2UoSFVmU2Qv/+u38m6hGPsre8Qr42e2UlxyvLZ3V6oUdqgqj8VR+h
zEU8yhpd62T8I1gz5vBBxCa/2WRF128y7mrGnGE+rhpVIJhX2r44V6tw7fZWVKBh
2qs0b5fogUHRoh8V5jsJj756zS5dr2v73iplk9J2gb1Cm7b5O6+6xPuVh6bPuEFA
HdvXBJXGkFFHWes5W6VRcUXvt7VbipLfs7p8PUEoKR3netRsJTjziuiq4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqGhzFBVyL7hvj6WBxd3xw3M8XDMB8GA1UdIwQY
MBaAFCnt8qTyCsCCNcQBgN5068OTXPwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUt
OTI0YzI5Y2Y3N2M0LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84Y2IxZTYtZTVmOC00ZmEwLTk3ZmUtOTI0YzI5Y2Y3N2M0
LzEvS2UzeXBQSUt3SUkxeEFHQTNuVHJ3NU5jX0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0kvJ4QUn
A0N0Qye8f3iboFxm/r4MTEbljhoorIRDxriOmw5LsaLCGGmYHsZZcZ3NVV7PzHsF
zt9lQWY2YC/Ke4EIkdRXBS1uDRHjeXGwsntGzeA5jsc1hFt0bRWKfyANNmw1gpj9
8h5cpzYV72FEKZc7LVaX8HYRA7Yueo6coecYGuM/oVsCf/4qbJcMmZv7wvepxeGA
vOItZUvfBklbJy0veCqo1gb7yIBP7e6iqF0vOqE2TKk2ZEZkrZlLNS9UDfFL7cjM
kvmTJSofR1PtNAxO2CE92hmOH7eYbTOK4xgVgOhWziaJDXiJfqUbs5WLjMVi44C/
mA02Zz8hzGLGow==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:08:50 2025 by rpki-client