Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
File: KeieDArUFRV01m8rML0dpKqd8Fs.mft (raw, json)
Hash identifier: HmtpfU02Bbv2zXPMhs24UrY2ufLbakMo1S3sEovolOk=
Subject key identifier: 1A:EE:1C:EA:99:53:FE:97:32:2F:2B:36:62:00:9C:C2:8F:D7:83:68
Authority key identifier: 29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
Certificate issuer: /CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Certificate serial: 019A71B7E7CF03B5D09857F4365DC8C81BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
Manifest number: 13EB
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: KeieDArUFRV01m8rML0dpKqd8Fs.crl (hash: j5IXrQOBLZqFu5MusnOp6sVVvK2xLCVkEaIUivKXp9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e7:cf:03:b5:d0:98:57:f4:36:5d:c8:c8:1b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=1aee1cea9953fe97322f2b3662009cc28fd78368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:ac:6f:27:39:8d:70:99:0d:b6:f7:21:10:
64:a3:07:a4:4f:24:e5:03:14:ba:bf:ab:3b:ea:6f:
81:64:a5:13:65:c1:93:bc:42:ad:28:6e:d3:04:1d:
c4:21:74:d5:ce:95:11:18:d7:63:d7:29:7c:a8:51:
96:84:7b:27:8a:96:e6:8d:ed:c3:4b:bc:0d:bb:81:
95:6c:a4:a1:7a:ea:f7:d1:66:7f:0a:95:36:61:44:
cc:aa:b2:99:59:5d:d3:fb:07:f4:d9:a2:85:a7:9b:
93:16:61:a9:d1:d7:f2:19:00:54:80:25:84:15:90:
a0:b4:14:4f:01:b9:8e:ed:ec:d0:d4:9e:81:0a:0a:
4a:03:bc:e8:ab:88:bd:56:9c:59:03:ad:a9:ab:2e:
af:e6:4a:12:0b:ba:e0:60:06:9f:13:a6:8a:52:18:
91:eb:47:03:49:81:47:12:5d:bd:ad:55:b3:a0:58:
90:c1:b4:41:a7:29:24:25:ee:42:b0:0d:76:7f:50:
5e:a6:0a:f9:08:c3:5a:0a:89:a6:7f:f1:c4:77:54:
14:79:c3:9f:d1:d7:d4:fd:df:64:aa:cc:b8:4e:e8:
de:24:32:79:0e:d4:81:33:2b:42:7e:bc:a6:a3:2e:
bb:93:f0:88:c1:99:5e:90:5a:f3:55:3a:6e:f2:6f:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EE:1C:EA:99:53:FE:97:32:2F:2B:36:62:00:9C:C2:8F:D7:83:68
X509v3 Authority Key Identifier:
keyid:29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:88:74:32:e9:cf:df:2d:21:a9:c3:29:70:33:a0:6b:aa:2b:
db:fe:1d:3e:d9:8f:81:45:87:24:7a:3e:2d:fa:8a:c1:86:b1:
99:40:60:f5:b9:9a:bd:4d:79:63:37:54:05:46:54:c8:d5:22:
22:eb:8e:57:4c:75:bb:47:83:a1:23:2b:4c:22:9a:4c:a9:e0:
c0:94:c9:86:94:3f:c0:7e:38:ea:84:1f:a8:02:55:f0:2f:61:
3a:1b:f7:74:24:e4:d9:4f:95:18:f5:c6:5d:c0:86:76:33:eb:
4a:17:8f:0a:91:a4:00:1d:b3:7d:70:d0:ab:7b:09:18:d6:bb:
ef:cb:98:4d:8b:3a:91:01:40:d6:25:ed:dd:7f:1e:f4:2c:74:
53:07:cf:b7:51:4c:9d:87:d2:98:a4:62:16:8b:1e:98:cd:20:
76:49:b4:2a:40:d6:76:b8:72:65:20:58:db:f0:4f:46:fc:da:
18:a1:6e:63:6d:69:e4:7a:af:88:19:f7:0d:ad:5d:21:68:a9:
61:29:ce:6a:d3:d6:ce:77:1d:ab:d8:54:b6:71:56:f0:dd:45:
1b:15:4c:0c:0c:7f:1e:cd:7d:b0:3e:b1:bb:7d:48:f2:2d:c7:
e9:dd:22:9a:27:7c:f7:13:cf:2c:19:5e:ba:58:77:49:d9:ab:
e4:99:72:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt+fPA7XQmFf0Nl3IyBvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZTg5ZTBjMGFkNDE1MTU3NGQ2NmYyYjMwYmQxZGE0YWE5
ZGYwNWIwHhcNMjUxMTExMDcwMTA5WhcNMjUxMTEyMDcwMTA5WjAzMTEwLwYDVQQD
EygxYWVlMWNlYTk5NTNmZTk3MzIyZjJiMzY2MjAwOWNjMjhmZDc4MzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQesbyc5jXCZDbb3IRBkowekTyTl
AxS6v6s76m+BZKUTZcGTvEKtKG7TBB3EIXTVzpURGNdj1yl8qFGWhHsnipbmje3D
S7wNu4GVbKSheur30WZ/CpU2YUTMqrKZWV3T+wf02aKFp5uTFmGp0dfyGQBUgCWE
FZCgtBRPAbmO7ezQ1J6BCgpKA7zoq4i9VpxZA62pqy6v5koSC7rgYAafE6aKUhiR
60cDSYFHEl29rVWzoFiQwbRBpykkJe5CsA12f1Bepgr5CMNaCommf/HEd1QUecOf
0dfU/d9kqsy4TujeJDJ5DtSBMytCfrymoy67k/CIwZlekFrzVTpu8m/YAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBruHOqZU/6XMi8rNmIAnMKP14NoMB8GA1UdIwQY
MBaAFCnongwK1BUVdNZvKzC9HaSqnfBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2VpZURBclVGUlYwMW04ck1MMGRwS3FkOEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iODdjMmEtY2QwMy00NTM4LTlkYzQt
OTkxZmFlNWM5YjA3LzEvS2VpZURBclVGUlYwMW04ck1MMGRwS3FkOEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9iODdjMmEtY2QwMy00NTM4LTlkYzQtOTkxZmFlNWM5YjA3
LzEvS2VpZURBclVGUlYwMW04ck1MMGRwS3FkOEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYh0MunP
3y0hqcMpcDOga6or2/4dPtmPgUWHJHo+LfqKwYaxmUBg9bmavU15YzdUBUZUyNUi
IuuOV0x1u0eDoSMrTCKaTKngwJTJhpQ/wH446oQfqAJV8C9hOhv3dCTk2U+VGPXG
XcCGdjPrShePCpGkAB2zfXDQq3sJGNa778uYTYs6kQFA1iXt3X8e9Cx0UwfPt1FM
nYfSmKRiFosemM0gdkm0KkDWdrhyZSBY2/BPRvzaGKFuY21p5HqviBn3Da1dIWip
YSnOatPWzncdq9hUtnFW8N1FGxVMDAx/Hs19sD6xu31I8i3H6d0imid89xPPLBle
ulh3Sdmr5Jlykg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:54 2025 by rpki-client