Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: Y4+nWHMi856KSgyCuwgvSgGIdTZHz8Q+goFVBSL9UhE=
Subject key identifier: AA:08:6B:49:1B:CC:3F:4F:73:96:7D:5E:2B:0A:28:44:E3:9F:DC:E6
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 0199FFC8B50690F1515FA8210A2DA51D0D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 1678
Signing time: Mon 20 Oct 2025 04:02:47 +0000
Manifest this update: Mon 20 Oct 2025 04:02:47 +0000
Manifest next update: Tue 21 Oct 2025 04:02:47 +0000
Files and hashes: 1: 847VWHs-caMwvruiasasUJ9i7yk.roa (hash: cGKjnew3so38YN3EBXzPrvxanAQQogJHwvbCrW4djb4=)
2: Cm9tMI3yXmOZgFYnxXLEbKAgtl8.roa (hash: 3SDCzkNnUy1DY9PhPdmuMPgAHQuW7TwXQTd2pQmOgYY=)
3: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: R3RtPfruSMMlj4FS/lKcFm5yUxP5bD39ifZJP+GNWVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:b5:06:90:f1:51:5f:a8:21:0a:2d:a5:1d:0d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Oct 20 04:02:47 2025 GMT
Not After : Oct 21 04:02:47 2025 GMT
Subject: CN=aa086b491bcc3f4f73967d5e2b0a2844e39fdce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:b9:f8:29:47:7d:67:cc:d6:e7:8e:18:e0:
85:1a:08:32:04:16:f2:1f:0a:43:25:48:98:c2:2c:
1b:a4:6e:83:62:73:09:21:c3:f4:ec:6f:e3:20:02:
b0:50:b5:fd:28:1a:c4:16:99:b5:18:36:12:8e:4c:
44:27:a3:6f:31:35:41:80:6a:db:7a:06:eb:aa:56:
7c:03:fd:74:b4:3d:7a:e4:1f:f6:e6:17:ab:8c:cf:
34:dd:f5:67:5f:59:a4:67:66:f2:a7:5f:70:99:ba:
de:c7:26:ef:01:c4:0b:0c:21:8a:24:6d:af:25:a9:
81:d2:31:33:23:e0:c6:7d:37:53:1e:cc:e6:8a:a4:
27:21:81:ee:c2:66:f2:e4:69:30:2c:4b:c0:14:11:
16:72:0c:17:e0:93:96:1a:a6:f7:f4:4b:79:12:86:
9f:2e:4b:91:af:c9:21:4b:c5:04:7a:35:0c:9e:97:
6e:7f:d7:c0:fd:7e:3f:25:18:50:49:3f:2c:75:fa:
5b:e3:46:72:ab:89:ad:d2:0a:09:8e:d8:11:b1:47:
0f:c7:54:42:35:2b:df:d4:d9:e0:16:e4:1d:6d:42:
8d:7d:d9:08:c9:15:55:28:1a:51:3c:9b:ec:d0:be:
98:86:38:5f:a3:12:0b:8f:8d:41:37:33:70:93:8b:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:08:6B:49:1B:CC:3F:4F:73:96:7D:5E:2B:0A:28:44:E3:9F:DC:E6
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:30:25:71:76:54:da:f3:a0:ea:b1:ea:8e:5b:2f:e3:3d:b5:
94:74:41:8b:08:63:8f:5f:7e:99:11:cf:c5:11:e7:5b:9e:7a:
04:b3:53:b9:03:b1:46:21:3f:0b:3a:10:17:5e:5c:fb:bc:1c:
e5:b8:e4:40:72:ef:c3:92:2a:6b:ec:85:f9:9c:b4:60:05:1b:
6b:45:c8:c4:8d:a5:18:b0:88:25:84:d8:42:5d:a6:d2:41:b7:
67:39:c1:c3:fb:2b:a3:2a:72:7e:c0:27:87:80:b5:72:27:fa:
41:6f:6b:c6:87:97:c7:80:30:dd:12:aa:65:5b:1a:57:c4:d3:
7f:37:ab:04:26:50:47:8b:3d:a8:8e:c2:67:9c:60:07:9b:a7:
0b:22:55:56:bb:13:de:15:c0:06:1a:70:76:b6:32:95:f0:1c:
84:26:b1:9e:3f:f4:d0:4b:79:68:b9:c1:18:9a:48:43:f8:74:
8d:4a:07:61:8d:e4:b1:62:d1:dd:c9:48:49:79:ff:15:71:98:
39:c6:e0:a6:48:67:03:44:64:a0:ab:b8:a9:90:04:f4:ce:a7:
fa:6f:c9:3e:b4:05:55:26:a0:cb:db:2e:be:5a:10:ba:75:c1:
8e:55:93:16:3f:c9:fe:98:be:44:38:c3:37:08:3e:6e:dc:34:
34:ff:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:25:00 2025 by rpki-client