Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: d3Q5VNdZ65eA6/wpSAdRkAi0hVHSveWz0vEPe522qsY=
Subject key identifier: 06:33:4F:FE:E4:23:01:58:95:AE:32:5E:EF:65:B6:1A:A8:E5:D3:D9
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 019873E1C7129FF5DC5643A07D82FE8E7D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 07:00:32 +0000
Manifest this update: Mon 04 Aug 2025 07:00:32 +0000
Manifest next update: Tue 05 Aug 2025 07:00:32 +0000
Files and hashes: 1: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: rz206Gyagvue2kmsSLVdAIZszQE1ospfb1SR7/AN/B0=)
2: LM4PEm0ffK75EUFTgpXPbuoAKZ8.roa (hash: d7gyd2tIHJ6HJ/7vl5EHNlkX+eVBttxlbWWHGFZ3xxQ=)
3: _w36PBooYvePauBkPOTldD_qNZc.roa (hash: hpJoX8luKbQz9GDhdRpg1rk5Zn+lxQz5UWYQbVjTs1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:c7:12:9f:f5:dc:56:43:a0:7d:82:fe:8e:7d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Aug 4 07:00:32 2025 GMT
Not After : Aug 5 07:00:32 2025 GMT
Subject: CN=06334ffee423015895ae325eef65b61aa8e5d3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:62:b7:28:22:72:6b:c9:6c:60:db:22:ab:38:
eb:24:a7:0a:a4:d9:35:1f:24:12:77:e2:6a:1f:b5:
88:e8:c2:c7:6c:c0:59:b5:55:59:06:2c:d9:f4:89:
6e:9e:70:f0:f4:ef:69:94:25:99:7f:55:66:b4:47:
e1:0d:35:7a:a3:a9:be:92:f8:52:22:d0:00:8d:36:
71:5d:58:7b:1a:ad:5c:e8:92:72:cb:09:53:45:02:
b6:51:e7:c5:4e:d4:b5:97:09:32:2f:67:2b:94:26:
63:a6:6b:9e:e6:07:f0:08:c5:b2:4a:1d:6b:16:2e:
6d:e1:52:91:dc:ef:90:ca:60:8f:e4:49:2e:2d:a1:
55:3f:b5:b7:ae:48:06:ab:b5:96:a3:57:73:a0:71:
88:17:39:67:d6:ff:71:c5:87:7b:39:21:13:2b:1a:
af:6d:c3:5b:0d:ab:52:ad:fa:22:c1:69:c2:26:25:
00:ce:1a:4f:ba:a0:c3:af:26:b2:8e:86:45:dd:f5:
53:41:3e:0c:ec:b5:69:ce:60:4f:1c:2b:b1:ae:aa:
b1:2b:a7:72:aa:6b:c2:01:6d:5c:5d:fd:ab:a2:91:
7b:1c:8d:6b:8d:04:3b:ca:51:53:c4:3e:85:68:cf:
5d:56:b3:06:62:2e:4a:c2:19:74:ee:52:55:02:b9:
19:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:33:4F:FE:E4:23:01:58:95:AE:32:5E:EF:65:B6:1A:A8:E5:D3:D9
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f8:a8:bd:d2:2b:c1:6c:c3:2f:ef:d6:f3:34:e7:a0:57:15:
1b:68:60:7e:dc:72:5c:7a:0f:29:4b:9e:3a:4b:35:db:54:6e:
3c:94:86:7c:9d:c9:ec:97:8a:a5:ff:8f:73:47:2b:c9:b4:32:
bc:4e:e0:3b:55:ba:d5:6e:7f:37:09:af:0d:d8:7a:8c:42:24:
05:02:d8:26:33:64:85:77:71:7b:9d:68:69:7b:19:72:1d:da:
7f:06:e3:c2:42:bc:85:ad:3b:87:38:07:1b:f6:9b:b0:c7:71:
27:bf:42:6e:6f:25:b2:77:5c:1f:1b:69:12:8b:aa:8e:1f:8a:
c5:d0:f5:07:47:1d:08:99:da:43:6a:b6:69:48:18:9f:4e:89:
18:51:73:4e:6d:75:3e:0a:0a:7a:52:f7:ba:0d:33:eb:ec:be:
d7:1d:57:a8:a7:d6:37:5f:40:15:14:27:ef:2f:cf:12:ac:ca:
2b:72:92:30:6c:28:e5:f6:f7:d1:2a:be:af:91:8b:95:31:85:
e9:2e:1c:9b:a2:2e:fe:11:bc:a5:f9:9f:79:cf:34:86:0f:97:
d7:6f:a4:10:87:cb:10:f6:ae:0a:11:9f:5e:50:09:23:ab:3e:
ab:73:ca:6a:56:bb:3b:c8:00:a6:d3:01:4c:9d:02:a8:43:9b:
1f:02:73:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:15 2025 by rpki-client