Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
File: KeRudYZejUoIHktd2kbTyUADZ5s.mft (raw, json)
Hash identifier: 7SuEmCBZf+vrFtfmhLhAYgatcU8ZrOuNVjkRLdWq4rk=
Subject key identifier: 3D:DD:C9:5A:48:0C:83:F1:2C:EB:D6:B6:A8:56:6D:EF:E5:6B:92:D7
Authority key identifier: 29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
Certificate issuer: /CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Certificate serial: 0199FCC625A0EC3D022626C4043D3061A90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
Manifest number: 15C1
Signing time: Sun 19 Oct 2025 14:01:08 +0000
Manifest this update: Sun 19 Oct 2025 14:01:08 +0000
Manifest next update: Mon 20 Oct 2025 14:01:08 +0000
Files and hashes: 1: KeRudYZejUoIHktd2kbTyUADZ5s.crl (hash: WE3Iks/PsZpGFF43QxCbLyAHpBB//l+jUhbY8fpPZqE=)
2: sYwqpJAH6xt25FV658_Z0b8PqQ4.roa (hash: nTc7YSWaucHsViUALBoDYtryVR1AkC4pCCvnaDdeVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:25:a0:ec:3d:02:26:26:c4:04:3d:30:61:a9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Validity
Not Before: Oct 19 14:01:08 2025 GMT
Not After : Oct 20 14:01:08 2025 GMT
Subject: CN=3dddc95a480c83f12cebd6b6a8566defe56b92d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:83:d1:9c:0f:21:df:c9:c8:f4:1a:3c:fd:2c:
d8:ac:8b:e1:ed:ac:dd:c2:72:05:a6:b0:fa:57:f2:
83:ff:b6:17:ad:94:99:1e:dc:e3:79:78:33:59:42:
0b:f6:83:7e:cc:af:6c:ed:e8:35:44:6b:c7:d6:11:
5b:28:07:a5:87:ce:14:49:e5:33:a2:60:b3:1a:f2:
38:7f:ae:8d:42:f0:23:d9:4d:fc:31:7e:95:a7:db:
f5:11:81:e7:ac:47:2d:5e:f4:22:fc:3c:c3:1f:f9:
5b:f0:d5:b3:33:92:e8:13:5c:7a:af:22:30:70:17:
0e:70:12:fc:e4:4c:27:6f:9d:86:63:d0:7c:ac:b0:
90:33:52:1e:e7:eb:bf:81:51:0c:d6:b3:3f:a6:ce:
45:02:85:f1:69:b6:f2:79:9e:7d:18:b1:ce:9c:b2:
0f:2c:0b:31:3a:fb:ba:37:61:e5:32:80:27:a0:b0:
61:70:d6:58:a9:ff:c0:82:40:94:ee:ac:c5:f1:53:
24:42:b9:b7:e2:c9:a9:82:37:20:4f:5d:ca:d0:91:
56:e4:17:8a:2a:f7:ab:20:0f:4e:27:6a:66:02:e8:
53:d5:24:88:62:6e:88:77:38:a7:c7:b5:9d:b2:2a:
9a:cd:15:ee:cc:44:98:a5:68:a8:bc:b1:cd:e9:3a:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DD:C9:5A:48:0C:83:F1:2C:EB:D6:B6:A8:56:6D:EF:E5:6B:92:D7
X509v3 Authority Key Identifier:
keyid:29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4c:8c:5f:82:ae:0f:0d:27:77:34:ea:bd:b6:df:87:2a:46:
3f:ad:de:f8:dc:c2:8c:23:c8:79:48:a1:d5:b0:27:27:6d:6f:
63:55:42:31:ff:e9:c9:9b:b2:5b:89:12:22:af:32:e9:d9:b1:
23:f7:31:94:46:99:30:61:b6:e1:9d:60:b0:95:78:a6:e1:23:
fd:c9:a2:11:55:55:e0:1f:a4:e8:ae:95:04:6f:91:0e:24:ab:
34:c2:7e:8f:41:ec:d2:d1:1f:1f:25:91:f7:a6:74:2d:d8:7f:
0e:ee:56:cb:52:8c:69:4f:12:11:bc:45:2a:22:a2:5e:7b:dd:
25:2c:eb:21:38:01:4f:75:7e:19:c7:07:ad:1c:c6:21:86:3e:
1b:f0:21:dd:56:f0:c0:14:b0:4c:ec:41:66:e9:2a:5a:30:cf:
4f:47:21:df:44:15:eb:9f:d5:bb:c5:08:2e:6f:04:b7:60:96:
45:fa:6e:32:25:62:96:24:96:dd:f5:e1:98:05:0c:2e:89:98:
1d:2c:a3:11:17:28:f5:64:16:a7:e9:4c:22:52:8f:a0:12:62:
2b:c0:5e:91:a4:39:16:43:17:1b:3d:5e:d1:8e:c9:18:0b:b7:
20:4f:cf:6f:99:91:ff:60:71:f9:c3:60:2d:bf:cb:d7:b3:ae:
60:d4:22:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:26 2025 by rpki-client