Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
File: KeieDArUFRV01m8rML0dpKqd8Fs.mft (raw, json)
Hash identifier: uisz5rHT8NGNoiZrS9SQr5fmfHwsdzosBKMXIQXdB/U=
Subject key identifier: 46:A7:5B:EE:51:6D:55:7E:32:61:3A:35:32:F5:47:90:94:AE:BB:57
Authority key identifier: 29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
Certificate issuer: /CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Certificate serial: 0198D660422DED50B985EDB9291D924825AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
Manifest number: 1316
Signing time: Sat 23 Aug 2025 10:01:29 +0000
Manifest this update: Sat 23 Aug 2025 10:01:29 +0000
Manifest next update: Sun 24 Aug 2025 10:01:29 +0000
Files and hashes: 1: KeieDArUFRV01m8rML0dpKqd8Fs.crl (hash: x3RBlMPTdfuVukr8AY0iApydu1jsGDOPRxQ70GnhpNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:42:2d:ed:50:b9:85:ed:b9:29:1d:92:48:25:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Validity
Not Before: Aug 23 10:01:29 2025 GMT
Not After : Aug 24 10:01:29 2025 GMT
Subject: CN=46a75bee516d557e32613a3532f5479094aebb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:93:44:9a:47:a3:a5:59:f3:b7:6b:19:53:
c5:d6:5f:df:b9:18:3d:a6:56:86:a5:41:f7:df:a1:
e0:8c:32:38:9d:7d:f9:1b:53:17:39:f3:35:de:a4:
a5:e5:a2:dc:41:43:34:46:f5:a9:c2:98:43:25:db:
e5:70:c3:36:12:0c:ed:33:71:fb:ed:26:fd:9a:24:
df:13:e2:65:1e:c6:67:4b:fb:a3:16:ea:c3:07:64:
ae:08:6e:04:82:14:8e:d4:e0:23:02:0f:fb:25:f1:
3e:e9:f1:ce:7f:90:d8:3a:4b:54:0b:0c:b6:0e:16:
41:f7:7a:4f:f9:33:be:fe:de:92:1d:12:5a:5b:b6:
30:27:03:8f:bf:04:e2:c1:9e:10:eb:4b:9e:fb:90:
cd:72:bc:05:f3:12:cf:a6:3a:0b:45:54:9e:a5:df:
86:fb:2b:f2:ee:54:c2:99:5b:42:fd:82:5d:33:b7:
49:56:b2:f0:92:70:55:15:31:96:71:ac:57:e3:3f:
ac:8d:f1:ba:be:25:02:4c:d0:e8:e8:4b:4a:e4:9b:
d3:39:b2:41:f8:b1:cf:c1:91:12:93:41:99:1b:9c:
0d:b3:02:c5:ca:b9:63:76:80:ce:17:b0:5c:73:58:
1f:53:c0:4d:f5:22:f1:8b:9b:43:3a:85:a9:a2:cb:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A7:5B:EE:51:6D:55:7E:32:61:3A:35:32:F5:47:90:94:AE:BB:57
X509v3 Authority Key Identifier:
keyid:29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ac:6b:35:dd:d9:a9:24:09:cf:96:04:d6:1b:6e:d8:a6:85:
a1:c0:6f:0a:9c:5a:be:a9:29:c2:72:19:f4:e5:a0:90:cf:28:
c2:c3:bc:0f:37:dd:4e:01:3f:c0:c5:69:81:24:4d:d3:83:57:
4f:b0:cd:41:00:0b:82:96:39:60:45:b5:3a:95:30:d1:34:81:
23:a6:95:5f:f1:55:3c:0e:66:90:86:05:48:6b:04:1d:50:5d:
fa:37:a8:3f:f2:6f:2f:6e:d8:0a:12:9d:88:b1:a7:af:f2:2f:
6d:3c:aa:c0:66:38:06:a2:fd:67:fd:f5:f7:99:12:52:61:ea:
54:2c:eb:42:66:43:6e:09:45:72:6c:42:6f:8d:23:0b:3e:94:
4d:59:63:56:0d:c3:d9:17:d1:21:63:4a:11:2a:ff:dc:19:af:
71:90:11:7e:3c:56:34:06:b9:99:fc:de:c8:eb:7e:6f:3d:4c:
6c:2b:74:41:29:c1:1e:e0:03:31:0d:1d:14:e7:50:04:57:ef:
4f:54:5b:34:38:c3:6c:62:6d:67:20:38:a4:6e:fb:b8:4d:f5:
ec:4e:17:b1:f0:6d:62:cb:62:67:5f:1f:f4:34:51:2d:56:35:
d1:c5:28:f4:49:91:20:b7:68:dd:5c:c6:bf:43:b1:3c:58:22:
b5:58:27:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:34 2025 by rpki-client