Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: WyXSzLlGNy0hQPRy991zWSb9RXh3YWPG+qjOoK0hvfs=
Subject key identifier: FD:CA:3F:46:68:94:08:EB:2E:FD:75:C9:F6:4B:6F:93:0F:B3:25:47
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 01976D3D586D360D01960CBEE595745ED563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 1523
Signing time: Sat 14 Jun 2025 07:00:26 +0000
Manifest this update: Sat 14 Jun 2025 07:00:26 +0000
Manifest next update: Sun 15 Jun 2025 07:00:26 +0000
Files and hashes: 1: 847VWHs-caMwvruiasasUJ9i7yk.roa (hash: cGKjnew3so38YN3EBXzPrvxanAQQogJHwvbCrW4djb4=)
2: Cm9tMI3yXmOZgFYnxXLEbKAgtl8.roa (hash: 3SDCzkNnUy1DY9PhPdmuMPgAHQuW7TwXQTd2pQmOgYY=)
3: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: eUi0w9M/94lJEwCPgzJPFNuZXCReQnb3+HVh3EPTqf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:58:6d:36:0d:01:96:0c:be:e5:95:74:5e:d5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Jun 14 07:00:26 2025 GMT
Not After : Jun 15 07:00:26 2025 GMT
Subject: CN=fdca3f46689408eb2efd75c9f64b6f930fb32547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:d8:7f:ae:ce:af:bc:4f:a1:74:e6:b9:93:
7e:b6:d8:2a:b7:3f:b2:be:44:2a:09:c1:39:ad:9b:
1f:8c:a7:e7:2b:64:af:f8:fa:47:1a:9f:dd:aa:e0:
41:a3:6e:f8:ce:a5:ed:fb:46:e5:f2:90:2f:6e:57:
4e:eb:92:97:d6:10:7c:09:4b:f9:13:52:9f:a5:02:
0d:7a:4e:e9:b5:66:df:88:8b:d2:d3:b1:76:a7:0d:
a6:81:92:87:38:c6:92:7a:79:75:ef:f1:7e:d6:d8:
fe:31:e2:4e:6b:a4:89:5b:d8:0d:15:47:9f:10:6f:
69:1c:1a:90:50:8b:e8:29:69:a5:79:4b:4c:11:85:
e7:51:54:dd:d3:81:3f:27:18:73:78:2d:0f:aa:15:
a9:15:77:aa:b5:de:3e:73:4b:e7:6f:2f:a9:f0:7d:
48:34:1c:e2:3c:44:38:23:8b:0c:4e:80:a4:75:c4:
b7:fa:f6:57:ea:26:27:81:1f:a6:c4:ab:02:fa:aa:
54:54:34:14:7d:18:47:89:44:4a:e1:ce:c4:04:c0:
e5:07:7d:f6:89:cb:36:09:97:3e:48:c8:3b:dc:3c:
bd:38:d6:98:2f:32:e3:76:fa:52:6d:46:e5:a4:4e:
fc:57:b7:55:4c:9b:9f:0d:80:99:55:61:13:0c:82:
46:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CA:3F:46:68:94:08:EB:2E:FD:75:C9:F6:4B:6F:93:0F:B3:25:47
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:e0:f9:99:18:f7:5c:50:70:50:64:07:83:fd:fb:e4:c2:2a:
6f:71:d8:43:80:a1:10:f0:08:a2:d1:5d:3d:62:7b:46:dc:80:
2d:1e:d9:36:cd:96:c5:cc:76:66:3e:7a:b6:eb:97:18:35:86:
55:99:aa:80:b3:c1:a1:0a:a0:4e:71:bd:82:bb:04:5d:0a:d7:
06:c3:29:93:81:c0:f5:c5:b6:2e:6d:be:01:20:20:7d:fd:6e:
97:bd:47:20:96:60:f3:a5:28:da:93:40:2d:a2:28:55:88:97:
ee:5d:5f:97:82:4e:c4:6d:07:1e:ba:85:98:ad:9a:03:ac:5a:
36:4d:ff:47:71:8d:04:71:c3:a6:e3:4f:3f:aa:32:c2:de:f2:
31:27:61:a4:32:90:07:4d:3f:1f:38:6d:a9:b2:b3:60:c0:af:
ef:6a:fd:7a:21:ae:88:81:66:48:1d:35:f2:cf:42:40:e4:d8:
9d:52:bc:78:a2:4e:59:97:ed:54:73:6f:ec:6b:fb:7c:ec:48:
f0:9a:0e:38:59:d7:d4:4e:4c:51:5d:aa:6e:a0:dc:aa:43:01:
0b:45:42:ce:d8:d1:40:1d:f8:37:93:1b:96:68:17:84:a9:9c:
68:81:7d:3b:90:d4:79:e5:73:41:17:e5:50:e2:34:ce:00:cf:
8b:ea:8c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:41 2025 by rpki-client