Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier: CVGDAfyAqYCv9sfcHhwvxWbwukVH9AVyIqNAU14nUxA=
Subject key identifier: DB:7E:3A:41:64:53:E2:42:B6:D8:67:85:60:56:EE:8F:DA:32:94:77
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 0199FF5978FEE45A2CF7511F72F1C7B57B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 02:01:17 +0000
Manifest this update: Mon 20 Oct 2025 02:01:17 +0000
Manifest next update: Tue 21 Oct 2025 02:01:17 +0000
Files and hashes: 1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: p/ZZSSxk92GMAxNwQ6ArwPSjgyQ4HPntfI4Tyg2F3UA=)
2: m0XExKmyfiqbc39X_t0r3f-rPnw.roa (hash: FEVTKa9GfQK+wd1z7OERkMrYF0fGkCabFyfJNv3Ffiw=)
3: rqU6u3hoknN-3UdF3hZxUQWu0pY.roa (hash: NDMORKcf0xpEpr+RJnB8nufh5JN+9UGeMs7mpyek8O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:78:fe:e4:5a:2c:f7:51:1f:72:f1:c7:b5:7b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Oct 20 02:01:17 2025 GMT
Not After : Oct 21 02:01:17 2025 GMT
Subject: CN=db7e3a416453e242b6d867856056ee8fda329477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:5b:8d:c1:5e:8e:6d:db:ff:fc:05:1d:42:
5a:07:f9:93:97:9a:4f:b5:1a:f9:e1:e2:d3:d4:ba:
83:76:52:7c:89:65:4b:fc:94:6d:3c:ac:1f:36:ec:
29:3c:80:e9:64:ba:a4:e8:f8:e6:4e:38:0d:66:fd:
21:b3:15:0a:55:14:77:88:f7:70:33:21:e3:e7:a5:
49:2b:dc:58:3c:82:12:c1:d9:c1:bc:64:6f:be:bb:
35:64:a3:ff:ac:7f:78:59:76:8b:aa:7e:4e:60:8c:
09:99:0f:ec:87:93:47:21:ec:a7:8e:f9:06:f7:a5:
dc:08:65:9e:0f:31:14:97:61:bd:01:c3:0b:f2:6f:
ff:d6:1d:ad:5e:e6:17:00:4a:6f:d1:bd:82:4d:2f:
72:28:d2:3d:86:24:62:d5:61:c0:25:42:5e:be:83:
e3:ff:eb:83:af:52:3d:62:55:97:33:e5:aa:c9:44:
2d:04:a6:7a:84:af:81:c1:1f:8d:65:8d:cf:84:dd:
2f:ae:bd:67:08:37:3c:c4:19:40:2f:f7:77:28:b8:
c3:64:50:16:8c:a2:8d:a7:84:81:69:a6:04:58:87:
9b:46:73:c2:ad:e1:18:54:56:07:75:83:26:68:0c:
eb:ad:14:1b:9a:18:45:9b:e9:df:2e:1f:09:e3:1e:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7E:3A:41:64:53:E2:42:B6:D8:67:85:60:56:EE:8F:DA:32:94:77
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:78:40:b3:60:ed:77:bb:cd:3c:3c:b9:e4:3a:50:a4:2d:6b:
86:67:05:64:66:7f:86:d3:a9:d3:dd:3e:5e:46:5e:b1:d2:2f:
c4:df:5c:f1:9d:39:5c:7a:e2:39:d1:53:11:c3:fd:9d:3a:9c:
36:42:60:8e:91:01:91:20:4a:cb:05:af:85:4a:7b:bd:92:0d:
bf:4c:58:0d:fc:63:dd:35:3f:9e:d1:c4:12:a6:11:84:00:d4:
eb:8c:07:cd:89:77:0f:38:2f:70:b1:cb:d4:33:81:fc:47:23:
84:fb:40:43:7c:18:02:cc:06:14:a4:6b:d9:71:f2:9b:5e:ae:
19:fc:cb:8f:f2:b4:c1:0a:b8:67:aa:c2:00:90:b7:51:67:2f:
ec:fe:93:4c:ed:da:4f:d8:0b:7b:e3:55:8e:7e:86:61:37:73:
3d:7a:4f:7c:d6:ec:8b:69:75:a2:70:7a:72:1e:af:54:8a:5a:
ea:bc:4d:73:64:4c:ea:b5:7b:4e:4e:b7:0f:c3:13:53:ae:dc:
cd:fe:22:0c:aa:59:34:e2:b9:cb:32:b0:3a:fc:64:28:4a:f0:
1e:0e:2c:f0:2c:db:89:67:73:3c:01:62:a6:dc:b9:98:f4:d4:
10:00:56:44:c7:bf:87:2a:6a:1c:ba:11:e2:7c:c8:07:51:29:
58:92:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:16 2025 by rpki-client