Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
File: KeieDArUFRV01m8rML0dpKqd8Fs.mft (raw, json)
Hash identifier: iOBI9+3mJdGwsQgs0+cnKxN20d+vSk3Tb2niYgXYv/o=
Subject key identifier: AE:D3:43:D6:32:60:FB:B9:94:8D:DC:0B:DE:45:DA:D2:47:84:BD:2B
Authority key identifier: 29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
Certificate issuer: /CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Certificate serial: 0197B6A1BCFEA078B8EDE9BA83928A6E08DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
Manifest number: 1281
Signing time: Sat 28 Jun 2025 13:02:22 +0000
Manifest this update: Sat 28 Jun 2025 13:02:22 +0000
Manifest next update: Sun 29 Jun 2025 13:02:22 +0000
Files and hashes: 1: KeieDArUFRV01m8rML0dpKqd8Fs.crl (hash: GzY21Hl7vCYs9yi0DrvWesRkxpSP8HVTit1aGaxdfks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:bc:fe:a0:78:b8:ed:e9:ba:83:92:8a:6e:08:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Validity
Not Before: Jun 28 13:02:22 2025 GMT
Not After : Jun 29 13:02:22 2025 GMT
Subject: CN=aed343d63260fbb9948ddc0bde45dad24784bd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:52:ec:94:d1:94:ab:28:ef:04:68:04:ee:00:
31:d0:00:09:2f:1c:8b:30:f7:32:fc:05:ca:68:77:
fa:38:3b:d0:e3:fe:82:28:6e:a1:3d:8e:0c:86:4a:
62:ed:1a:fd:17:14:92:41:27:3c:55:68:5b:9a:52:
45:c2:cd:6f:61:48:33:b0:9c:2f:8c:e2:3e:b0:39:
d9:59:59:d2:1f:b4:cd:c4:d0:8c:95:b8:9f:4b:13:
5b:6e:1a:ec:fb:de:f2:49:c0:33:36:26:a8:37:e2:
12:e6:a0:79:62:67:1d:1e:06:b0:bd:5d:cc:11:84:
58:91:31:8d:38:4f:64:bc:ac:18:f8:f6:c4:b8:91:
b2:ae:5b:77:fa:a3:ba:de:c3:e8:c1:c9:4b:b9:7b:
0e:08:06:68:32:c0:46:b4:cc:b3:4e:62:a0:7b:8f:
ec:71:85:26:8e:03:2d:3e:7a:08:8a:67:59:8f:57:
2b:4d:cd:ad:33:d5:11:43:3c:89:04:85:1e:ed:f4:
7e:5e:58:74:3b:df:ef:a7:b9:58:9b:e2:86:52:d9:
6f:07:2e:01:10:69:fb:38:b8:0f:de:2c:6d:6a:a8:
eb:37:6a:2e:32:63:64:df:db:58:29:bb:f9:a5:34:
fb:d6:d4:46:03:40:ee:88:46:97:57:93:ab:83:0b:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D3:43:D6:32:60:FB:B9:94:8D:DC:0B:DE:45:DA:D2:47:84:BD:2B
X509v3 Authority Key Identifier:
keyid:29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:84:7c:26:53:4b:bd:0c:7e:c2:83:41:e2:3c:c6:2f:5d:5f:
d3:8e:67:69:03:3c:44:6b:68:8f:45:df:6e:5d:85:24:5e:d8:
75:86:9e:5a:78:e1:91:5a:f3:67:96:5b:18:8a:f2:53:88:ee:
87:94:b7:e2:e4:14:60:32:43:40:b2:3f:b0:9e:c4:7e:9f:87:
dc:fd:d9:45:7b:b8:0d:14:ee:c0:80:74:28:98:eb:4d:0d:3e:
3b:8d:fc:b3:d3:1e:a4:0a:b3:3b:36:79:30:78:c7:4b:ff:24:
85:9f:fc:d2:71:83:49:87:ad:14:90:af:72:4c:70:10:3b:31:
49:a1:7e:23:68:13:e3:7a:e4:36:1d:49:09:8d:c6:ae:54:9b:
eb:d3:a0:1b:71:71:14:0f:35:f3:e7:ba:ef:ea:d0:8a:66:ad:
e4:9c:aa:9e:0c:1c:61:ab:22:19:ea:31:85:a6:23:86:f6:de:
f5:e9:73:21:62:92:ad:74:13:07:6b:1b:e4:f2:23:58:52:36:
94:19:ad:84:33:28:5d:70:5f:22:98:b7:fe:14:70:2d:d8:18:
76:83:2b:17:d6:0f:4c:21:68:ac:86:cb:72:7d:dd:3c:5e:85:
b6:85:ee:a8:be:c6:43:d0:aa:87:f2:06:3e:5b:6e:b8:42:7d:
ae:c4:b3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:18 2025 by rpki-client