Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier: Y/zoYvr/dblJrDSc0c3syjxQw3jExM3N74QB7tVl9iE=
Subject key identifier: 86:F4:6A:7A:5D:75:BE:EB:E7:18:90:DA:8E:87:54:C6:5D:57:E3:F7
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 019A4E86A9492DF36507684D6173DCBC2E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: 1xR4qXjJa2pkdAZxl7oGlsVnZzpfJCfonJuJN/3TiKc=)
2: m0XExKmyfiqbc39X_t0r3f-rPnw.roa (hash: FEVTKa9GfQK+wd1z7OERkMrYF0fGkCabFyfJNv3Ffiw=)
3: rqU6u3hoknN-3UdF3hZxUQWu0pY.roa (hash: NDMORKcf0xpEpr+RJnB8nufh5JN+9UGeMs7mpyek8O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a9:49:2d:f3:65:07:68:4d:61:73:dc:bc:2e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=86f46a7a5d75beebe71890da8e8754c65d57e3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:86:8c:24:32:10:51:7f:d4:b2:78:44:43:
e9:94:aa:98:ee:72:71:de:b4:e9:50:cc:51:7f:bf:
35:f0:56:d2:d0:42:47:9c:e2:f1:da:f9:12:1e:62:
fc:ec:3b:39:4f:f6:97:63:6f:39:eb:63:4f:13:37:
fa:39:07:94:51:45:93:60:6d:48:d6:4f:eb:f6:ca:
ad:f3:f5:50:18:4a:fe:45:66:7f:1d:42:f4:e1:27:
a6:7c:74:e9:dd:a1:8d:2c:cd:2f:e3:f5:ad:94:54:
97:5f:51:a9:d6:ba:0f:41:70:41:9d:3c:18:08:54:
90:2e:3e:65:a3:8d:8e:80:b3:06:f2:5b:48:c5:2f:
af:c3:cb:a2:c6:6e:a0:01:99:72:a3:b2:96:6e:27:
6f:bc:16:bf:1b:d5:58:08:57:8c:b0:35:a5:74:14:
b6:fa:c0:b2:18:bb:68:67:f2:12:86:6e:57:db:7e:
b5:a0:c0:28:27:a1:af:be:51:d6:55:01:e9:d8:d0:
50:26:42:96:6b:25:d1:9d:b7:14:8c:58:90:26:7d:
5b:a3:30:e1:12:e5:9d:00:aa:90:1f:14:f5:c6:03:
15:9b:18:bf:bb:10:88:80:d9:9a:d6:ac:28:3f:22:
8f:e2:35:b6:0b:1b:8a:d1:46:c8:4c:d6:84:02:3e:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F4:6A:7A:5D:75:BE:EB:E7:18:90:DA:8E:87:54:C6:5D:57:E3:F7
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4c:6d:cb:5f:77:df:bd:bf:d5:48:6d:95:53:7f:01:3f:26:
f6:ca:04:52:9c:dc:a3:c2:59:66:02:88:7c:86:fc:dd:cf:37:
97:f1:01:6d:ee:f0:f0:d4:c3:d5:2c:d1:fd:a0:7a:f2:b6:4f:
67:76:08:ef:84:d1:24:ca:1d:2e:4a:5b:7b:8a:23:95:15:b2:
6c:ee:b1:54:10:9e:11:e0:c6:b7:95:55:61:64:93:08:ce:cb:
1c:98:b8:11:26:11:db:2b:d4:87:59:cb:d4:3b:5a:0d:fb:2a:
c3:55:40:e8:c7:57:31:fd:73:f1:66:10:f7:ca:e4:a4:a8:40:
06:43:3a:65:de:67:16:18:c7:0d:e1:77:13:44:89:49:4e:72:
cc:5b:5f:fc:c0:23:52:f1:5c:15:5d:4b:47:93:dd:27:29:48:
59:76:11:f3:80:0d:a5:be:46:22:60:56:5c:04:a3:10:b4:3c:
b0:84:51:c9:e5:c2:1e:f5:e3:5c:2e:c1:b7:67:f3:49:70:4d:
87:2e:80:16:4a:21:30:48:2a:d4:68:a7:06:fe:0e:a9:4f:df:
ef:a1:dc:ca:d4:e9:0e:a8:4f:dc:cb:35:9b:eb:96:d5:31:1d:
5e:33:5f:96:87:1f:86:57:db:3f:da:3e:27:75:54:fb:fe:a5:
ad:f0:77:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:39 2025 by rpki-client