Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
File: KeRudYZejUoIHktd2kbTyUADZ5s.mft (raw, json)
Hash identifier: +vBe0T9ebFnaIT2Pzqvdhe1LKGso/FJ7SaeOgRj7Gjk=
Subject key identifier: A3:33:2E:6C:C8:44:F8:88:D8:D9:F7:9E:E3:81:69:32:1A:90:3F:97
Authority key identifier: 29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
Certificate issuer: /CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Certificate serial: 0199228C9349A41E8D4C95C068CD34D6EBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
Manifest number: 1550
Signing time: Sun 07 Sep 2025 05:01:01 +0000
Manifest this update: Sun 07 Sep 2025 05:01:01 +0000
Manifest next update: Mon 08 Sep 2025 05:01:01 +0000
Files and hashes: 1: KeRudYZejUoIHktd2kbTyUADZ5s.crl (hash: ebCHiZh3jvI9P32UxV9oCUkxJE4/xH3bZ0UjziZmrSo=)
2: sYwqpJAH6xt25FV658_Z0b8PqQ4.roa (hash: nTc7YSWaucHsViUALBoDYtryVR1AkC4pCCvnaDdeVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:93:49:a4:1e:8d:4c:95:c0:68:cd:34:d6:eb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Validity
Not Before: Sep 7 05:01:01 2025 GMT
Not After : Sep 8 05:01:01 2025 GMT
Subject: CN=a3332e6cc844f888d8d9f79ee38169321a903f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:cf:cf:e0:f2:63:e8:0d:50:6d:2c:54:72:
ad:8d:08:52:4c:ef:bb:7a:7c:bd:ca:53:30:e7:ac:
e6:96:cc:34:7e:ec:d0:dd:06:6c:3c:bb:1a:c1:33:
76:d8:e2:57:23:cf:18:fc:97:38:ac:ea:6f:65:24:
dc:33:a7:c4:4d:c3:fb:12:89:c5:ba:ae:05:98:a7:
44:48:60:ea:1a:55:3e:53:1f:42:aa:37:27:a6:fd:
ed:03:ea:48:1f:4d:b2:bf:19:1a:1c:95:f3:d8:b1:
9c:c0:4a:75:93:87:23:7d:ed:9f:b6:a1:8c:52:b4:
70:59:60:7c:9f:cd:3e:41:f6:22:86:ef:c0:ae:10:
71:13:88:02:ac:ad:04:f7:31:d3:2c:95:9d:35:5c:
b2:43:fe:0b:3c:92:de:d6:a7:31:d7:fb:63:37:b9:
59:70:c4:8a:8f:51:25:bd:31:bc:9a:80:9b:eb:3f:
12:94:f1:46:31:9f:bb:59:f0:1d:0e:1f:5f:ca:b4:
c0:7c:b8:4b:5e:7a:01:80:a0:ec:ab:ae:1d:b9:77:
f2:c0:af:1a:ec:03:24:11:6c:41:0c:e0:70:e2:11:
de:e1:8c:db:da:7e:50:33:54:b5:4b:0c:9f:d2:7e:
d2:0d:07:33:87:ae:8a:1c:81:3f:ae:ab:79:bf:c7:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:33:2E:6C:C8:44:F8:88:D8:D9:F7:9E:E3:81:69:32:1A:90:3F:97
X509v3 Authority Key Identifier:
keyid:29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:81:73:56:b6:69:e8:20:a0:e4:53:61:0e:d5:ff:ea:fc:42:
a6:14:82:64:6e:f5:dd:e1:60:74:6e:de:54:c6:d2:a4:ca:0f:
fc:5b:f7:93:a6:21:49:86:3c:ac:40:c0:d1:6a:ec:54:dd:60:
07:98:3b:58:50:ee:7e:4b:cc:b9:45:c1:c8:a5:a8:12:b5:e0:
dd:dd:20:80:b4:85:b4:df:6b:3e:aa:8a:a6:91:1d:22:77:c3:
96:7a:56:2a:37:f5:17:52:70:74:cd:a6:c1:eb:25:9f:26:9c:
2d:fb:c4:41:34:59:af:4b:ea:ca:04:71:1e:56:a2:61:91:61:
b4:aa:f0:23:08:27:66:67:00:22:cb:dc:1c:4e:26:fd:65:f1:
c5:7f:1e:2f:1c:7f:34:9f:9d:90:73:c1:2f:af:35:7a:40:a5:
78:7a:cb:07:e0:d1:6b:cd:3b:3f:a0:33:9b:01:1a:c6:6c:f6:
92:f8:4c:fe:69:97:5e:d4:6d:33:2f:ed:8b:65:77:67:da:f5:
fd:e0:41:7c:08:0c:c5:9f:cc:dd:6d:cb:69:77:9b:d5:25:2a:
06:e1:3c:1a:96:e1:16:f9:f8:85:61:ac:3b:39:62:88:54:d5:
e5:0f:4f:14:cb:6d:9c:44:90:d9:2f:d0:6e:41:2e:02:3d:d3:
a0:eb:5c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:23 2025 by rpki-client