Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier: B6XYNPya6MUAXGejqVAbBS4MW6fkkHIELT5Dm4i0LLw=
Subject key identifier: 4D:BF:0B:14:15:A1:2A:88:3F:A3:0F:82:CD:09:C8:C5:A4:20:23:D5
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 01976CCFA81AB63DE16C6A58E607517A80CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 05:00:37 +0000
Manifest this update: Sat 14 Jun 2025 05:00:37 +0000
Manifest next update: Sun 15 Jun 2025 05:00:37 +0000
Files and hashes: 1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: btvKF9AHXPY1ggQPB9kY+eHDxUVd4r+/zBJgzgxf5Us=)
2: m0XExKmyfiqbc39X_t0r3f-rPnw.roa (hash: FEVTKa9GfQK+wd1z7OERkMrYF0fGkCabFyfJNv3Ffiw=)
3: rqU6u3hoknN-3UdF3hZxUQWu0pY.roa (hash: NDMORKcf0xpEpr+RJnB8nufh5JN+9UGeMs7mpyek8O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:a8:1a:b6:3d:e1:6c:6a:58:e6:07:51:7a:80:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Jun 14 05:00:37 2025 GMT
Not After : Jun 15 05:00:37 2025 GMT
Subject: CN=4dbf0b1415a12a883fa30f82cd09c8c5a42023d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:e2:2a:d8:12:69:cb:34:01:2d:9c:21:6f:
3c:ce:b3:18:27:c5:c9:5e:f2:15:1c:55:62:ca:88:
31:a0:90:7b:57:19:80:bc:5d:29:8e:0f:bb:b2:29:
2a:2b:e7:a2:cf:e9:ba:41:aa:06:af:49:8d:93:d4:
d4:12:67:0b:fc:f1:a6:1e:ab:09:04:f4:75:a3:15:
df:be:02:90:e6:3f:33:0c:c3:e2:79:0e:a7:e5:44:
9f:28:ce:98:75:9b:24:f7:02:88:e2:d3:74:db:77:
12:d2:ac:16:03:c1:88:b6:d5:13:c9:57:ad:cd:9d:
5f:fe:8e:09:d4:15:f6:b4:d1:2d:6d:ff:6b:74:72:
73:5a:e6:c3:83:58:86:3f:ad:ed:63:7a:68:84:d0:
c6:8c:56:e3:67:21:09:ee:ca:5e:69:a8:dd:42:77:
db:82:15:3f:44:75:26:0e:ed:2c:0e:5f:3c:9e:79:
04:db:29:ff:03:a3:e8:69:c0:0e:c7:68:e3:d9:a3:
20:6f:0b:0d:34:74:8f:6c:2e:73:6f:cf:06:fe:1f:
40:a7:40:4b:17:0a:65:94:bb:97:78:84:71:f7:5e:
3f:65:2a:25:5c:a0:fd:d2:71:22:0c:f8:94:68:f0:
5d:7f:ce:b6:8f:1e:0a:4f:10:82:32:a3:2b:f3:fc:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BF:0B:14:15:A1:2A:88:3F:A3:0F:82:CD:09:C8:C5:A4:20:23:D5
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:08:f6:39:0a:97:c8:b1:02:56:c1:65:4c:99:5a:ae:43:e5:
03:a6:e2:49:51:e1:f8:24:62:2b:c3:0f:e0:69:a0:31:a9:e4:
16:1d:26:3c:03:d4:c1:5f:fd:b4:ec:42:c8:9f:4d:ba:9d:6f:
20:5d:3c:bf:bb:3e:2d:f2:6a:d0:61:0d:c6:cb:c6:47:94:ad:
07:bf:ea:06:62:51:8a:52:64:ed:8b:70:be:96:4c:89:6a:4c:
79:9c:e8:ad:29:70:b7:46:d6:5f:b2:4d:b2:7e:b6:90:91:7f:
74:66:f0:36:92:60:78:b3:a1:31:74:32:89:cd:db:6a:05:61:
67:65:f6:c9:7f:cc:10:de:34:72:c1:06:e0:09:55:38:fc:da:
28:3b:e4:d4:65:0e:b2:ff:f6:83:5a:ea:07:66:ac:ec:78:41:
a6:de:5a:69:e9:ac:04:36:1b:2c:78:df:5d:56:53:50:f1:c0:
57:54:e4:22:aa:fe:5f:e8:6c:fa:48:05:96:fe:c5:84:8d:80:
4b:a6:14:d4:10:94:9f:62:d1:74:95:69:15:5d:ee:95:c2:d4:
aa:74:f7:a0:17:ae:55:0c:6b:7a:89:ff:0b:5c:c2:c5:b7:88:
e9:5b:5f:9b:2f:0f:70:e7:3e:64:28:88:a0:0b:dd:40:0f:56:
6d:8e:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:18 2025 by rpki-client