Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
File: KeieDArUFRV01m8rML0dpKqd8Fs.mft (raw, json)
Hash identifier: UO4Yh4c/21IBmXZuA7ZP9+UXgHxHww/opRDG37h6co8=
Subject key identifier: 00:E1:E4:F8:A3:2C:E3:A0:30:70:88:D1:5E:6E:8D:14:B0:22:7A:3E
Authority key identifier: 29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
Certificate issuer: /CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Certificate serial: 01974C68F0CF659ECBC6201801A8586AF4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
Manifest number: 124A
Signing time: Sat 07 Jun 2025 22:00:35 +0000
Manifest this update: Sat 07 Jun 2025 22:00:35 +0000
Manifest next update: Sun 08 Jun 2025 22:00:35 +0000
Files and hashes: 1: KeieDArUFRV01m8rML0dpKqd8Fs.crl (hash: DMjaik/gTbV9aDvryNbblJCGD1s0Ipn5UfNS6MKN22I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:f0:cf:65:9e:cb:c6:20:18:01:a8:58:6a:f4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Validity
Not Before: Jun 7 22:00:35 2025 GMT
Not After : Jun 8 22:00:35 2025 GMT
Subject: CN=00e1e4f8a32ce3a0307088d15e6e8d14b0227a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:d3:4b:a1:3a:a7:ba:22:c3:12:7e:12:2f:
61:73:e9:f7:71:e3:69:72:ff:8d:c2:93:2e:7b:5e:
7f:8d:fe:3e:77:63:ad:97:05:36:6a:ba:53:55:46:
a5:3e:d1:58:a9:7d:56:a0:f3:fa:65:9a:ed:ee:7d:
a0:0d:de:e7:92:d3:57:c4:f4:38:cb:17:16:9d:ee:
8a:1e:b3:6a:67:ef:7a:93:73:2f:19:f9:2d:65:16:
85:44:1f:4c:27:85:d7:92:0f:57:98:a1:75:98:c1:
44:33:eb:b1:3e:43:f1:30:fa:2b:a3:42:ea:c5:7a:
89:de:a5:eb:de:75:8e:be:f0:14:ee:ad:9c:b1:64:
44:6e:35:eb:76:97:df:76:f6:55:1e:20:49:86:de:
06:4b:d5:c8:dd:fe:cc:e2:b4:c9:54:ff:10:03:e7:
e3:5a:73:4d:76:6c:2d:f2:e5:8d:00:95:b7:8e:62:
50:f3:82:48:e1:0b:b9:43:99:08:ed:27:ca:88:06:
63:7a:1e:cc:75:59:3d:5b:68:21:f0:8c:13:c2:ed:
1f:24:0f:f9:9a:54:5c:a4:94:fc:60:e9:eb:bb:d7:
ec:4b:6a:cd:45:92:dc:ec:30:17:b4:84:b8:ba:e2:
f2:20:36:7a:a7:78:c6:ca:79:c9:a0:17:a4:c9:ab:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E1:E4:F8:A3:2C:E3:A0:30:70:88:D1:5E:6E:8D:14:B0:22:7A:3E
X509v3 Authority Key Identifier:
keyid:29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ec:49:86:8a:d7:d6:f2:64:94:64:fa:98:e2:4a:af:d2:8c:
16:28:5f:e7:e4:48:1d:ac:9b:32:96:cd:8c:d8:3f:6f:fb:0b:
b9:73:ea:a2:92:49:6d:66:85:ac:25:03:92:0e:af:45:2a:c2:
b1:ae:bb:41:b2:62:92:fc:be:91:18:81:ba:39:79:b6:a9:05:
2b:1d:a3:6d:1d:ce:cb:e5:2a:33:31:f1:4f:ad:ca:ea:8b:db:
aa:0f:da:c4:39:91:13:f9:64:a4:bc:ba:ed:39:79:1f:64:92:
e5:bc:49:93:8a:e2:03:3e:86:18:e8:8c:c7:ee:65:fc:51:fc:
6a:0b:aa:df:d4:52:64:3e:db:ba:b5:25:aa:ec:40:f8:8c:cd:
11:ab:5b:6b:38:12:4e:fa:82:7c:67:08:5c:9c:bb:37:80:12:
8a:7a:62:56:25:75:bb:1a:40:05:93:71:d6:37:2a:34:e5:79:
63:d0:02:58:fd:fe:5e:9c:1c:27:74:8c:88:c7:a4:92:ea:12:
0e:ca:a7:0f:d9:6f:ab:d6:c4:f6:f0:a9:da:88:a6:5c:82:df:
63:32:bf:70:d3:8b:71:17:0d:d8:16:df:6d:40:c8:db:36:22:
3f:50:8b:95:21:70:57:57:f7:a7:8a:9d:fe:61:b3:e0:32:d8:
6a:c4:a7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:09:55 2025 by rpki-client