Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: nigTT1JBtl1k6RwHwymfbQfOnLiQeJsUCOkWkWPFVR0=
Subject key identifier: 47:B1:6C:87:B9:B2:7A:46:72:B2:EC:0C:29:8D:04:AD:9F:B9:7D:25
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 01993500A07C23C09F78AD106F9D3FDE05CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 160F
Signing time: Wed 10 Sep 2025 19:00:57 +0000
Manifest this update: Wed 10 Sep 2025 19:00:57 +0000
Manifest next update: Thu 11 Sep 2025 19:00:57 +0000
Files and hashes: 1: 847VWHs-caMwvruiasasUJ9i7yk.roa (hash: cGKjnew3so38YN3EBXzPrvxanAQQogJHwvbCrW4djb4=)
2: Cm9tMI3yXmOZgFYnxXLEbKAgtl8.roa (hash: 3SDCzkNnUy1DY9PhPdmuMPgAHQuW7TwXQTd2pQmOgYY=)
3: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: UEqMgTJ0b0bFeAvzjRr+THa210b7BROKI8G1LrObTWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:a0:7c:23:c0:9f:78:ad:10:6f:9d:3f:de:05:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Sep 10 19:00:57 2025 GMT
Not After : Sep 11 19:00:57 2025 GMT
Subject: CN=47b16c87b9b27a4672b2ec0c298d04ad9fb97d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:80:ee:cb:e6:71:20:f4:f9:52:4c:00:00:
16:eb:d9:5c:6f:42:7a:af:52:85:7f:41:6d:b7:a4:
29:1f:88:ae:9e:c5:65:3e:03:d6:f7:fc:53:ed:5e:
18:40:03:cc:30:ef:76:81:7a:aa:81:a9:2f:61:31:
12:12:22:94:71:54:f9:55:c8:6a:d5:8a:7b:f9:cf:
52:cb:63:27:d3:12:6f:d0:f8:34:78:3c:e9:3d:11:
a0:93:b0:0a:ff:7b:f0:d9:45:d0:33:5e:fc:8f:93:
87:14:4d:12:8a:db:69:e8:b5:d2:f9:a4:a8:63:61:
38:a9:27:81:dd:59:48:08:2f:91:ca:77:c3:fc:fe:
97:71:c7:41:61:86:08:df:85:4e:91:00:09:a2:ee:
f0:7f:54:a3:d8:12:a3:8b:55:aa:f0:c2:58:c1:06:
b8:eb:0b:7d:e0:41:04:04:99:d5:49:50:2e:d2:15:
6f:53:e7:c8:4c:4d:6f:e2:30:7d:eb:a3:f1:8d:7f:
0b:34:3f:93:79:b3:cc:d2:ba:e3:b2:4b:08:68:41:
53:d8:50:37:51:5c:0a:9e:ce:71:67:ee:3d:71:f1:
99:3c:57:a2:9d:10:a1:37:47:e3:38:c7:29:ff:c6:
2a:6b:69:e9:3f:4d:ff:de:1e:c8:84:66:99:8e:5c:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B1:6C:87:B9:B2:7A:46:72:B2:EC:0C:29:8D:04:AD:9F:B9:7D:25
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3f:92:82:b9:ca:9d:e0:44:1c:cc:36:95:e8:c6:b2:ce:32:
c4:c9:e6:e9:65:b1:ff:dc:6d:e7:c4:1b:26:e8:b3:45:13:30:
67:f3:b7:3a:5a:54:13:6f:e2:cd:29:4c:30:ac:21:81:b1:83:
24:09:51:2d:d2:d2:a1:a3:ee:f9:f9:fd:12:5b:a6:f4:ee:87:
ab:1f:5d:d3:a4:d4:52:e0:16:77:be:63:99:4a:49:56:98:23:
91:33:b9:d0:15:0a:39:ed:d7:0d:7c:af:02:3f:b4:a9:e9:02:
b5:53:46:a3:ed:41:00:82:0f:11:8f:15:d0:47:39:76:29:0d:
7a:fc:d0:c7:4b:fa:c2:eb:d5:8f:73:12:eb:dc:e9:90:4a:0b:
a5:b2:c8:60:10:16:1f:87:79:39:f3:31:1a:a5:6b:eb:15:2c:
12:14:38:b9:25:a2:de:ae:56:2e:0c:fc:ee:f3:8a:56:a3:7f:
11:b8:be:f9:c4:a5:19:01:88:cc:e1:39:a0:77:f6:16:9b:b3:
1b:b3:ce:98:d4:b2:a7:92:bd:e3:9c:c1:3b:fb:f0:d2:0a:cf:
e7:17:e0:7c:5c:2f:30:93:db:be:ca:4f:1d:8d:fd:67:59:37:
dc:36:55:74:2a:f1:62:a9:3a:5e:64:f7:b1:57:67:0a:bd:c3:
89:f0:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:02:33 2025 by rpki-client