Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier: 7JmRYUtP+voNXaC9G5nKb8PgRrBH8iGNlZM3H77Uoak=
Subject key identifier: A3:3E:B1:66:0F:E1:95:1C:4B:CE:8F:6C:4F:5F:0E:37:59:62:6C:FA
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 0198D5F152C9702A068AB42FE79CEE10191D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:18 +0000
Manifest this update: Sat 23 Aug 2025 08:00:18 +0000
Manifest next update: Sun 24 Aug 2025 08:00:18 +0000
Files and hashes: 1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: hyomhNsjl5GJu1SDONISXpKoLC+4WVQwm7ZdVZAuDrY=)
2: m0XExKmyfiqbc39X_t0r3f-rPnw.roa (hash: FEVTKa9GfQK+wd1z7OERkMrYF0fGkCabFyfJNv3Ffiw=)
3: rqU6u3hoknN-3UdF3hZxUQWu0pY.roa (hash: NDMORKcf0xpEpr+RJnB8nufh5JN+9UGeMs7mpyek8O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:52:c9:70:2a:06:8a:b4:2f:e7:9c:ee:10:19:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Aug 23 08:00:18 2025 GMT
Not After : Aug 24 08:00:18 2025 GMT
Subject: CN=a33eb1660fe1951c4bce8f6c4f5f0e3759626cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:9a:c7:70:fd:42:53:94:3e:b9:a2:56:2f:
8d:c0:55:7d:4e:ec:5f:76:8b:7b:82:c9:27:cd:57:
19:14:1f:70:1f:e2:36:4c:f8:ae:cc:f0:7c:4d:07:
9f:1a:62:a4:b7:18:0b:10:b2:a0:b6:91:f8:c1:a8:
60:24:01:2c:ac:0a:22:61:fb:0a:d2:5c:5d:04:cd:
27:35:58:2b:b9:f7:f2:b2:ff:8d:5c:6e:de:50:8b:
c3:4c:1c:1c:76:a2:03:63:ee:18:f0:78:95:65:64:
e0:35:a2:1e:ae:ce:76:4e:7c:6c:46:e8:1f:8a:93:
fb:b8:f1:fa:62:32:15:2a:cc:cd:71:62:3d:0b:f8:
9f:70:54:17:d1:30:6a:21:33:7c:53:65:46:af:6d:
dd:1a:96:4b:d6:8c:97:09:1e:22:de:54:5c:bf:fb:
54:95:7b:e9:16:3f:61:18:dc:5a:f2:f8:78:55:28:
b6:d8:bf:b3:1a:fc:3e:ff:76:6c:be:0b:e5:e4:58:
76:5a:92:41:2d:d8:1c:c6:e0:1e:a6:50:aa:3b:be:
f4:86:88:96:39:14:fc:75:3f:8f:1d:c9:b8:3b:d4:
97:d9:d1:b5:64:1e:88:50:13:df:c2:4e:79:7b:94:
85:cf:f3:07:62:37:54:89:e3:b1:0b:ca:12:47:2f:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3E:B1:66:0F:E1:95:1C:4B:CE:8F:6C:4F:5F:0E:37:59:62:6C:FA
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:37:45:6c:3d:20:5c:e4:ff:d5:ad:9b:5c:33:b3:0d:37:01:
7c:1a:de:20:69:a2:13:f9:fa:54:d0:68:15:0e:7b:35:ff:20:
69:f1:45:59:46:2c:eb:f6:a1:5c:49:28:b3:2b:4d:b5:b8:09:
0c:50:6d:fa:d5:08:94:e7:6a:ae:0c:9f:83:29:3e:4e:fd:23:
0f:f8:04:d6:98:81:b3:dd:02:56:b8:b4:f4:0e:d1:ec:47:d7:
9d:76:3f:b9:a5:b7:fc:0c:5d:71:02:9b:e4:c0:83:46:9b:c1:
f2:9b:8e:8c:4b:e5:fe:1a:ac:79:4a:4e:01:24:6c:f8:8e:69:
f0:fb:9b:98:7f:3a:7a:01:7b:aa:26:eb:b9:b2:2e:38:d6:26:
a5:cc:5d:05:1e:6b:c6:92:4c:e8:13:3c:7a:c3:56:fa:c1:4b:
f9:b9:f6:65:66:14:c1:15:fb:75:8b:cc:fb:56:e0:24:eb:af:
85:d6:c9:97:6a:d3:a9:99:c4:93:66:34:7e:ba:ed:83:b5:59:
34:6d:e9:06:34:e7:69:ce:f3:03:b0:9d:bd:6a:ac:0e:d5:6d:
dd:c0:0c:f0:6f:87:0f:1f:fb:da:e3:c8:4d:f3:e2:3c:2a:3e:
2f:18:93:b4:f8:3c:1e:20:5e:3f:80:9f:55:e4:1b:fd:2d:84:
db:9f:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:38:08 2025 by rpki-client