Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: RK/okAgMDC2Dh9WTku4Zc+m9xpTpjfHnLh5BRdxHdaA=
Subject key identifier: FF:A4:92:5D:C7:EF:68:C7:77:BA:4A:EF:31:C3:37:A9:7D:BC:3F:88
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 019769611140C33C4D814B6BC4C29FF36412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 13:00:58 +0000
Manifest this update: Fri 13 Jun 2025 13:00:58 +0000
Manifest next update: Sat 14 Jun 2025 13:00:58 +0000
Files and hashes: 1: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: ZQ5s3aupklt3nhhTStVXoCGk6ziFJUgViQkbTeGw5p0=)
2: LM4PEm0ffK75EUFTgpXPbuoAKZ8.roa (hash: d7gyd2tIHJ6HJ/7vl5EHNlkX+eVBttxlbWWHGFZ3xxQ=)
3: _w36PBooYvePauBkPOTldD_qNZc.roa (hash: hpJoX8luKbQz9GDhdRpg1rk5Zn+lxQz5UWYQbVjTs1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:11:40:c3:3c:4d:81:4b:6b:c4:c2:9f:f3:64:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Jun 13 13:00:58 2025 GMT
Not After : Jun 14 13:00:58 2025 GMT
Subject: CN=ffa4925dc7ef68c777ba4aef31c337a97dbc3f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:c8:c8:17:4e:50:8a:df:08:2a:47:c4:37:
03:88:3c:42:c9:de:23:92:76:a8:6d:b0:02:6e:42:
47:e2:89:68:78:86:06:12:49:8f:5d:7a:f6:ed:4b:
fa:8c:8b:dd:e8:40:de:16:64:f0:ff:d0:a1:bb:6d:
6e:05:75:03:53:e5:7a:fd:46:87:cd:fe:a6:28:b7:
1c:73:ad:a9:7a:31:ad:c2:74:55:59:d6:8c:e6:dc:
83:a4:80:7e:ec:7f:90:c2:c3:ea:db:3e:7b:e5:f4:
6b:e7:ab:8a:8f:80:db:b9:eb:35:bf:03:65:37:7a:
1a:cb:a1:80:88:db:ba:8d:cf:85:0a:45:5d:24:d8:
27:7f:93:cc:81:8c:42:1c:4c:e0:97:c9:eb:7b:95:
6b:00:64:10:10:e1:b4:b5:53:55:ac:0d:d6:69:c1:
04:44:b1:9a:49:f4:c6:40:68:4a:8f:65:40:83:a1:
e6:d4:19:86:36:a3:d0:b8:fa:f3:33:68:dd:64:35:
e5:33:f0:ce:1c:c7:50:8e:ff:2c:5b:83:33:be:12:
15:f4:74:11:e5:36:99:a0:df:2e:93:39:f9:d3:96:
79:0b:dc:60:31:9c:36:e6:23:ea:96:01:d2:95:65:
94:c5:0f:79:3d:99:57:01:74:ff:22:75:2f:a7:f3:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A4:92:5D:C7:EF:68:C7:77:BA:4A:EF:31:C3:37:A9:7D:BC:3F:88
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:be:e4:f5:2f:96:21:61:11:d7:40:b1:47:e8:74:b4:19:3d:
78:17:7e:38:33:96:ca:da:0e:b5:a7:52:33:3e:fd:99:5e:c1:
29:b1:2d:c1:34:fe:3c:3b:89:64:85:2d:55:87:a4:12:89:f0:
b4:17:7c:52:77:20:a1:d1:92:65:a4:0f:03:10:1c:6a:3e:04:
55:77:13:c0:7e:b2:27:fa:e5:b5:40:e4:c1:14:d0:0e:44:cf:
54:15:4a:ca:67:51:cf:56:98:7d:33:9a:57:a9:92:e6:82:6d:
42:6f:e0:de:2b:82:24:9c:45:ae:64:4d:78:6e:19:97:f1:ed:
46:7d:96:37:32:aa:cc:c8:a5:28:f4:3e:30:c6:58:92:23:7f:
b0:a4:bb:62:85:60:0f:ea:05:f9:d7:c9:d6:d8:6a:6e:d1:d8:
b6:7a:2b:20:1c:85:64:14:0c:c9:d4:3d:d0:79:04:8d:4a:36:
c7:25:04:34:07:67:3f:b7:f9:df:7c:29:90:6a:e0:ae:93:46:
6d:8d:31:89:a2:5b:d5:40:df:13:57:73:3d:10:27:15:3d:b5:
d1:50:f2:0d:28:32:6e:18:eb:51:c4:81:9e:14:5a:ac:bf:c4:
ac:c3:0c:fd:09:65:36:d7:59:f1:ad:1c:e3:45:62:bf:5e:fc:
02:0f:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:28 2025 by rpki-client