Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: zBpJBqOyDnEZWpaGWlxZ2XXyU4szdA+9rv6qDwS4oZk=
Subject key identifier: C1:16:30:04:C3:51:35:78:CC:C3:97:3F:B5:D1:BF:1F:C9:88:39:61
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 019A2477C2CA8A0A1F716C16DAFB288366CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 168B
Signing time: Mon 27 Oct 2025 07:00:19 +0000
Manifest this update: Mon 27 Oct 2025 07:00:19 +0000
Manifest next update: Tue 28 Oct 2025 07:00:19 +0000
Files and hashes: 1: 847VWHs-caMwvruiasasUJ9i7yk.roa (hash: cGKjnew3so38YN3EBXzPrvxanAQQogJHwvbCrW4djb4=)
2: Cm9tMI3yXmOZgFYnxXLEbKAgtl8.roa (hash: 3SDCzkNnUy1DY9PhPdmuMPgAHQuW7TwXQTd2pQmOgYY=)
3: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: mqYWcvLWNM6LVwz4cfDmbvzparwdfMPsZGHScJSSqvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:c2:ca:8a:0a:1f:71:6c:16:da:fb:28:83:66:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Oct 27 07:00:19 2025 GMT
Not After : Oct 28 07:00:19 2025 GMT
Subject: CN=c1163004c3513578ccc3973fb5d1bf1fc9883961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:53:a0:f5:8e:e4:1c:9a:4b:dc:a0:e8:82:
b8:eb:53:32:fb:7e:4e:33:c2:a9:ca:fe:96:2b:6c:
49:87:30:60:ac:85:fc:d4:59:ef:9f:0f:68:0a:63:
3e:2a:95:6a:49:91:0f:52:4f:8f:6e:6c:45:4b:cc:
dd:db:fe:17:76:94:fd:08:52:77:58:f5:63:1e:80:
1b:09:80:50:49:a5:12:ff:35:5f:fb:aa:2d:1c:4a:
5a:2b:50:17:9d:fd:f6:9b:82:85:d7:12:76:e4:62:
9e:a1:98:1b:a4:f3:e1:42:76:1f:09:96:ee:50:ae:
de:dd:05:61:1b:05:bc:46:57:9a:39:a9:d6:7d:85:
29:8f:9e:69:72:40:76:4d:b0:7e:c8:3a:bd:eb:3b:
3b:4a:64:72:f1:ca:05:99:c9:7a:18:0f:e9:78:a5:
97:8c:db:2d:05:90:d2:8f:95:33:97:b1:a0:af:c6:
77:25:c2:45:91:19:ce:8a:22:29:1b:e3:b6:8f:98:
ed:59:c5:65:f4:86:53:24:dd:70:04:f8:cf:1b:48:
49:ea:d2:ef:84:92:b5:ed:4b:2d:3a:24:06:b8:f4:
73:5a:e8:4a:aa:2b:21:4c:a4:94:cd:36:c2:2b:ac:
d8:84:2b:29:bc:67:7f:ee:40:c2:a9:d3:41:c0:44:
90:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:16:30:04:C3:51:35:78:CC:C3:97:3F:B5:D1:BF:1F:C9:88:39:61
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ca:ed:ff:cb:a1:f0:f8:93:35:db:f3:13:fa:65:7a:28:bd:
ab:c6:cf:c3:9f:fd:fb:d8:f0:44:bb:73:d8:49:15:1a:02:91:
48:d7:ed:05:d1:95:77:55:82:62:48:31:a0:ea:db:8b:19:31:
5c:aa:59:f0:c9:43:21:ab:ec:3c:1b:50:4c:24:38:11:2e:bb:
3f:55:5d:18:4a:4a:81:06:88:2e:74:04:26:59:1f:94:ab:fd:
7e:5e:58:8b:17:a1:33:91:54:3e:ec:9a:5b:c3:7f:06:7d:54:
10:4a:2b:76:4f:18:e2:1f:57:af:4e:b8:79:26:48:22:76:1b:
0e:73:a2:87:cf:20:1b:ef:d3:a3:89:5d:88:55:3d:41:0d:f0:
da:a5:0e:14:5d:bb:fc:71:15:5d:c4:fd:5c:57:2c:55:a2:71:
8f:c2:95:68:be:bf:b7:34:f2:60:b5:e3:09:16:d1:90:1f:5c:
3c:bf:d7:37:f8:0b:9e:8d:74:40:25:b1:ec:4d:06:df:9b:14:
c9:14:a2:fb:98:3b:60:5f:57:86:ca:20:37:2f:30:0c:c5:7e:
3b:3c:f2:86:b1:dd:81:0a:4e:e3:67:a9:25:4e:ba:48:29:ca:
dc:27:56:30:53:1c:63:aa:72:c2:0c:5e:ca:05:06:2c:03:fb:
93:97:09:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:04:38 2025 by rpki-client