Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier: OJB8f9rLyKig9uEPVLk/bnQIajs6r+CStTwBK4nLuh0=
Subject key identifier: C7:F5:B0:BB:87:AA:62:6F:7C:66:D3:45:84:7D:66:D7:13:28:78:F1
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 0196A01AB255481F2DC434309F12335E49DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 11:00:26 +0000
Manifest this update: Mon 05 May 2025 11:00:26 +0000
Manifest next update: Tue 06 May 2025 11:00:26 +0000
Files and hashes: 1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: TWqQ6eiwjnCzBgBGx3OPXelhGc3PwEKxsVrl+kPzHys=)
2: m0XExKmyfiqbc39X_t0r3f-rPnw.roa (hash: FEVTKa9GfQK+wd1z7OERkMrYF0fGkCabFyfJNv3Ffiw=)
3: rqU6u3hoknN-3UdF3hZxUQWu0pY.roa (hash: NDMORKcf0xpEpr+RJnB8nufh5JN+9UGeMs7mpyek8O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:b2:55:48:1f:2d:c4:34:30:9f:12:33:5e:49:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: May 5 11:00:26 2025 GMT
Not After : May 6 11:00:26 2025 GMT
Subject: CN=c7f5b0bb87aa626f7c66d345847d66d7132878f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:91:cb:73:7f:d1:88:24:a6:c4:02:7f:ef:9c:
f0:b7:f3:0e:23:9b:4d:9b:11:c1:2f:15:a6:82:aa:
37:4f:5d:fc:b7:b7:52:e8:1c:2b:d0:74:df:6b:c5:
7c:b2:ff:77:36:d8:6c:d1:89:62:5f:2f:88:17:59:
be:55:38:7a:63:81:93:6f:a1:67:10:77:ad:8b:5a:
e7:fe:86:56:6d:b8:fc:62:ed:c7:92:36:05:c4:5e:
94:d3:80:db:4b:f7:27:10:2b:21:7f:ab:3d:8d:d0:
a3:8e:8a:f3:7a:73:69:18:96:20:b0:72:72:46:bb:
50:ff:d1:f8:ff:78:a2:e7:9d:ab:d5:99:48:14:25:
63:34:e5:5d:36:50:96:cd:91:52:98:8f:32:3a:ee:
71:87:39:a2:86:6c:da:de:ae:ef:97:bb:3b:82:1f:
3a:97:02:cc:14:ea:94:24:b2:85:c2:56:48:b6:13:
4a:70:c0:a6:01:79:49:fb:a1:65:58:67:3a:cf:db:
ea:1c:47:30:b7:bb:df:03:71:dd:c5:71:c1:af:51:
13:91:9e:38:2f:84:10:94:9b:3b:cf:bd:ac:15:f4:
fe:e5:ff:f3:8b:17:73:35:01:72:92:6a:3f:cb:b0:
16:7e:95:ac:04:11:01:8e:72:e7:56:c9:9b:b2:e8:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F5:B0:BB:87:AA:62:6F:7C:66:D3:45:84:7D:66:D7:13:28:78:F1
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d5:d4:2b:64:8d:c2:bb:41:30:f1:d9:d8:d6:f1:c3:f2:05:
9a:97:7b:04:8e:2d:d7:a8:d4:43:43:df:24:89:4f:e1:8d:b3:
81:e8:4a:31:a9:fa:1c:6d:15:d5:4e:55:4c:05:4b:30:87:89:
b1:a2:df:c7:ad:1d:7a:72:ba:a7:0b:03:c3:91:28:21:e5:3e:
d2:96:a1:a1:5a:bc:a6:74:15:be:9e:af:be:3f:7f:ac:18:70:
59:20:ce:5a:67:25:6f:36:db:a2:0c:30:fc:d8:9b:9e:9c:77:
b7:ef:14:a3:31:5e:4a:5d:47:ff:ed:e0:f5:52:bc:52:ae:64:
fe:6a:73:37:ba:a8:fa:4a:12:bd:91:21:b7:d1:f4:05:ee:9c:
cc:80:bc:e1:a7:a2:c3:be:c6:68:bc:ae:a5:48:c6:aa:cb:9a:
f7:54:0d:16:84:95:7b:54:52:41:76:3a:32:c7:75:94:e7:01:
25:49:10:17:7d:e7:bd:0c:a1:cf:93:77:0b:f0:4e:b9:14:27:
d4:30:87:75:e4:2c:cb:22:20:d8:e4:37:f5:cf:7d:8f:1e:e2:
08:01:fe:4c:cb:55:1b:43:47:1e:aa:80:5d:5a:dc:f0:1f:d2:
e1:87:85:80:c2:c3:56:68:a2:45:af:88:02:9b:72:a0:ee:77:
04:30:35:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagGrJVSB8txDQwnxIzXknfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDEyNjJhY2Q2MmM5MGU2ODA4MWE2Zjc3NzM3NWRmMmMz
NzEzYzIwHhcNMjUwNTA1MTEwMDI2WhcNMjUwNTA2MTEwMDI2WjAzMTEwLwYDVQQD
EyhjN2Y1YjBiYjg3YWE2MjZmN2M2NmQzNDU4NDdkNjZkNzEzMjg3OGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5HLc3/RiCSmxAJ/75zwt/MOI5tN
mxHBLxWmgqo3T138t7dS6Bwr0HTfa8V8sv93Nths0YliXy+IF1m+VTh6Y4GTb6Fn
EHeti1rn/oZWbbj8Yu3HkjYFxF6U04DbS/cnECshf6s9jdCjjorzenNpGJYgsHJy
RrtQ/9H4/3ii552r1ZlIFCVjNOVdNlCWzZFSmI8yOu5xhzmihmza3q7vl7s7gh86
lwLMFOqUJLKFwlZIthNKcMCmAXlJ+6FlWGc6z9vqHEcwt7vfA3HdxXHBr1ETkZ44
L4QQlJs7z72sFfT+5f/zixdzNQFykmo/y7AWfpWsBBEBjnLnVsmbsui7jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMf1sLuHqmJvfGbTRYR9ZtcTKHjxMB8GA1UdIwQY
MBaAFChBJirNYskOaAgab3dzdd8sNxPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2It
OTVhMzNlMTJhM2FkLzEvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2ItOTVhMzNlMTJhM2Fk
LzEvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadXUK2SN
wrtBMPHZ2Nbxw/IFmpd7BI4t16jUQ0PfJIlP4Y2zgehKMan6HG0V1U5VTAVLMIeJ
saLfx60denK6pwsDw5EoIeU+0pahoVq8pnQVvp6vvj9/rBhwWSDOWmclbzbbogww
/Nibnpx3t+8UozFeSl1H/+3g9VK8Uq5k/mpzN7qo+koSvZEht9H0Be6czIC84aei
w77GaLyupUjGqsua91QNFoSVe1RSQXY6Msd1lOcBJUkQF33nvQyhz5N3C/BOuRQn
1DCHdeQsyyIg2OQ39c99jx7iCAH+TMtVG0NHHqqAXVrc8B/S4YeFgMLDVmiiRa+I
AptyoO53BDA1fQ==
-----END CERTIFICATE-----
Generated at Mon May 5 13:33:22 2025 by rpki-client