Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: PEB8rb25Khy7zOwsXAw8eYzbwnpdEY1JIkSz2It/1JI=
Subject key identifier: 4C:18:3B:CD:80:36:05:06:19:3E:49:06:1B:A6:E5:8B:7B:1A:36:E4
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 0197B6A09F9D832EF3C2CC188E57426F7336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 13:01:09 +0000
Manifest this update: Sat 28 Jun 2025 13:01:09 +0000
Manifest next update: Sun 29 Jun 2025 13:01:09 +0000
Files and hashes: 1: 847VWHs-caMwvruiasasUJ9i7yk.roa (hash: cGKjnew3so38YN3EBXzPrvxanAQQogJHwvbCrW4djb4=)
2: Cm9tMI3yXmOZgFYnxXLEbKAgtl8.roa (hash: 3SDCzkNnUy1DY9PhPdmuMPgAHQuW7TwXQTd2pQmOgYY=)
3: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: BpeX5Vonn+uVgA8xaa57HcbjibU8q+LsDb3JNyfYr8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9f:9d:83:2e:f3:c2:cc:18:8e:57:42:6f:73:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Jun 28 13:01:09 2025 GMT
Not After : Jun 29 13:01:09 2025 GMT
Subject: CN=4c183bcd80360506193e49061ba6e58b7b1a36e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:43:a6:7d:d9:1e:30:91:ad:36:12:74:55:
5e:ba:be:0b:1f:ec:48:f2:0d:27:59:0d:66:a7:05:
6c:92:43:f3:dc:5a:6f:19:9e:fd:05:ae:65:e8:d6:
ab:21:78:09:0f:01:65:cc:28:ff:68:32:83:00:d3:
11:73:99:e6:20:cc:41:ce:92:79:49:85:98:60:de:
c0:7d:59:bb:4d:39:ab:a5:c6:a5:fb:c4:77:9e:94:
e9:b1:e8:dc:7f:03:39:84:35:dc:95:be:07:9b:4b:
da:2a:09:8d:a8:2b:91:07:f8:2d:d4:51:29:5f:ca:
cb:e5:6c:d5:17:4e:7d:7c:77:aa:b3:5d:64:2e:30:
46:13:ce:be:df:7a:2d:36:1c:50:ea:94:6c:04:49:
82:d5:d0:f9:cc:de:f7:da:d4:c3:b1:a4:55:92:6d:
88:01:48:70:80:6a:30:20:a1:9c:bc:44:47:4c:f5:
08:9a:b8:6a:e6:4c:ef:80:1e:ba:b0:98:9c:00:99:
36:6d:bc:45:f5:d6:4e:f5:7b:7e:af:af:40:45:c5:
e6:fe:1d:e0:a8:82:23:97:41:47:70:4e:7b:89:fa:
ba:1b:36:7d:b0:0e:cd:ed:87:e0:7a:3e:a2:86:bb:
ea:ac:72:11:ae:7e:79:20:30:49:23:0f:84:e6:e9:
cc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:18:3B:CD:80:36:05:06:19:3E:49:06:1B:A6:E5:8B:7B:1A:36:E4
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:bf:e5:a2:a4:83:42:af:e9:6e:d2:13:2f:5a:66:8c:88:e8:
ad:40:19:e9:a5:65:08:5c:98:50:7a:f0:b9:b9:a6:40:2d:43:
05:51:32:fd:90:4d:a9:cb:7f:be:27:0f:63:49:b4:84:f0:40:
2a:67:a2:7e:94:cd:47:18:21:9c:71:01:4c:4e:05:29:5b:9c:
3f:15:ed:bc:8d:e5:14:14:be:25:b7:6b:18:51:97:14:ab:17:
d0:e9:b7:ce:11:86:cc:20:43:7e:7b:5e:41:9b:b1:43:f4:d6:
e6:ae:c6:e3:d1:8e:c4:9b:3d:72:b0:6d:b2:be:d9:4c:13:26:
bd:f1:0d:00:4a:f2:a0:aa:06:7f:37:91:e9:60:45:51:6b:88:
0b:ad:62:67:29:5b:13:2e:0b:7e:8e:a9:73:95:50:23:12:aa:
c7:9d:56:d0:8c:9f:13:a2:c5:0f:e0:b3:0a:21:87:3c:4a:4c:
df:a4:d1:3f:9e:3a:7a:c8:40:2e:66:82:69:1d:a5:c0:03:d8:
fc:81:b4:d6:ac:82:ba:12:e8:bf:46:79:61:7d:bb:7d:4f:05:
07:98:31:22:4c:9b:d6:ef:96:b0:26:a3:87:f7:20:a3:7b:5c:
4e:8e:c0:14:8f:e7:56:f0:97:c1:31:4d:dd:36:64:3c:3e:73:
a4:f8:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:25 2025 by rpki-client