Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier: EvYnWvKtv3jKQQ3e4cAerpmtuxgHsia30Ish2BM8J34=
Subject key identifier: 64:62:F4:A1:41:E1:F1:49:A8:C1:D9:F6:59:79:40:2D:07:5E:A2:6E
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 019873740C6471FCB8D66F6495E5555C0C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 05:00:41 +0000
Manifest this update: Mon 04 Aug 2025 05:00:41 +0000
Manifest next update: Tue 05 Aug 2025 05:00:41 +0000
Files and hashes: 1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: +PbNoPJKYJz3pcrUu/iwK5eJl1AW74EoEVOwzcnh7Ag=)
2: m0XExKmyfiqbc39X_t0r3f-rPnw.roa (hash: FEVTKa9GfQK+wd1z7OERkMrYF0fGkCabFyfJNv3Ffiw=)
3: rqU6u3hoknN-3UdF3hZxUQWu0pY.roa (hash: NDMORKcf0xpEpr+RJnB8nufh5JN+9UGeMs7mpyek8O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:0c:64:71:fc:b8:d6:6f:64:95:e5:55:5c:0c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Aug 4 05:00:41 2025 GMT
Not After : Aug 5 05:00:41 2025 GMT
Subject: CN=6462f4a141e1f149a8c1d9f65979402d075ea26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:17:62:bf:90:39:1c:d3:c2:34:c1:71:cd:35:
d6:00:18:37:08:78:43:67:09:bf:39:56:1c:22:6c:
07:a1:81:21:77:a7:d4:9d:f7:17:f4:75:cd:71:51:
e3:5e:08:31:d2:cd:c8:9f:e5:b2:71:dc:a8:07:19:
9c:78:b7:ea:64:ee:6e:c4:0b:ed:d7:b3:16:aa:5e:
b5:25:b0:90:06:3e:cd:a8:b6:1b:9c:6c:fa:e9:5c:
6e:d9:ba:94:59:bc:f5:78:a5:3a:10:1c:ec:3c:46:
7f:cd:3b:07:cb:04:65:81:1f:5d:9d:d7:3f:58:a9:
c4:9d:37:eb:6e:85:f2:ec:3e:1f:23:56:f1:98:f4:
3b:4b:9b:98:f8:04:ee:d3:b7:24:fa:97:21:9b:49:
9a:30:98:1e:e2:2b:74:04:a3:f0:da:9e:52:bb:cc:
3c:5e:a9:6b:00:87:1c:80:3b:d7:eb:cd:a4:46:98:
47:49:fd:ea:18:ed:db:06:4b:8e:c4:70:fc:77:0b:
d5:32:3b:d9:5a:0a:f4:29:35:16:9b:3d:61:38:e7:
71:3d:66:f5:08:4a:22:f4:a9:a1:c2:eb:a0:f8:34:
08:7f:40:82:24:15:b8:5b:85:ec:9e:c0:d6:f5:3a:
2d:07:57:01:85:98:e0:41:3e:cc:93:84:e3:a5:45:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:62:F4:A1:41:E1:F1:49:A8:C1:D9:F6:59:79:40:2D:07:5E:A2:6E
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b9:c6:b3:eb:f8:11:fa:58:b7:53:ca:ef:fc:74:d0:cb:12:
d0:13:04:6e:68:a1:60:fd:98:bf:c5:a6:2d:e5:18:44:7a:91:
bf:72:be:ca:93:2e:17:9f:b6:56:8d:13:ad:3a:51:36:5e:62:
97:7c:9c:3a:db:0b:ae:af:64:1e:39:ea:6a:42:0a:3f:1f:51:
1b:a2:4e:d4:7c:b7:d8:ac:09:28:e4:7a:97:90:a2:5e:e8:e4:
32:97:cb:e0:3a:f7:46:02:9c:dc:22:d9:a1:98:e7:1c:20:48:
a5:9f:fe:19:99:05:30:f0:a1:75:cc:73:20:66:3b:32:62:fd:
c9:d9:3d:a8:ba:7f:31:fb:0a:04:9b:04:dd:b9:0b:e6:79:13:
68:9c:0f:23:d7:09:85:85:c8:52:6f:1c:7c:80:ed:cf:a0:ce:
80:4e:30:a8:a2:5a:0c:e3:8d:2c:55:1c:26:f5:ec:01:89:a7:
41:ea:03:74:93:1c:98:4b:54:96:cc:c6:e9:c2:8d:c4:f8:bc:
5d:7b:b6:dc:0f:6d:6b:e7:8f:78:55:22:ff:fd:08:e5:93:19:
45:2a:73:14:e7:59:82:9d:f3:a5:c0:ef:11:b2:ab:03:3d:af:
9d:97:33:c4:e9:73:a4:59:fb:f9:4a:65:b5:a8:ba:b2:5e:18:
67:bf:41:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:12 2025 by rpki-client