Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
File: K5vsAhH2Hq8RnOstQMWg_jqowqA.mft (raw, json)
Hash identifier: a/v3CSRgvsYfcg5ZYO/oYohk1cs/kjitRo1LLBwKlVI=
Subject key identifier: 5B:7E:DC:9A:94:01:59:08:0A:A6:A1:C6:5A:EF:B2:C8:9C:DF:BC:57
Authority key identifier: 2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
Certificate issuer: /CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Certificate serial: 01988B0ECAB6C5B9914DED208153B5B95F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
Manifest number: 0C88
Signing time: Fri 08 Aug 2025 19:00:59 +0000
Manifest this update: Fri 08 Aug 2025 19:00:59 +0000
Manifest next update: Sat 09 Aug 2025 19:00:59 +0000
Files and hashes: 1: K5vsAhH2Hq8RnOstQMWg_jqowqA.crl (hash: wNrp6Fvqxg0/qLt7QzRaR/NRYwAzWiyFtzFxjHn/dDU=)
2: KkH_R6IQv1u30qAL1KWqZsXbAEI.roa (hash: 04O63RIXPPpD9GmqGsDm2l0jn4ZXl6cAUxlim79VpG4=)
3: _JzEQSr5OZqDWs8nTia735Fx54o.roa (hash: n/vl1VjbI5NvAsfCuLgcPjpEvc0iKrJUQhClyjm4L3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:ca:b6:c5:b9:91:4d:ed:20:81:53:b5:b9:5f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Validity
Not Before: Aug 8 19:00:59 2025 GMT
Not After : Aug 9 19:00:59 2025 GMT
Subject: CN=5b7edc9a940159080aa6a1c65aefb2c89cdfbc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:a6:86:c6:98:95:db:05:88:89:bd:6b:74:
92:a0:89:05:2f:fd:04:f4:bc:9d:9b:14:38:12:e2:
26:1f:3b:31:28:21:a1:fb:2a:78:6b:d2:a6:08:8d:
5d:93:e1:21:2b:7e:96:9b:a1:36:68:01:cc:ee:cd:
90:f4:a3:a1:fa:95:6e:37:d6:87:28:f0:ce:68:12:
aa:52:56:12:b6:ca:35:de:3a:7e:3b:1c:ac:6b:7a:
33:f7:d6:4d:f7:eb:e1:0a:02:eb:8e:e5:01:71:99:
da:32:4e:98:c9:25:53:5a:11:90:b5:89:28:7f:81:
50:60:44:23:7f:f0:b3:71:0c:16:98:a5:e5:57:c7:
f7:f1:e8:0e:0c:ec:2b:d1:bb:77:be:ca:c7:70:05:
4b:3f:ed:00:5c:4b:ce:34:cd:a7:e6:ea:91:55:4e:
29:a0:fb:50:7d:8d:10:64:bc:42:d4:90:ac:3f:f9:
1f:99:13:6e:44:6d:75:b0:af:d4:8e:2b:5c:ff:8a:
dc:45:c6:61:ff:37:df:35:30:c1:5d:48:77:c6:b9:
d4:c6:86:36:50:cd:04:20:6f:02:a9:32:89:a9:2c:
37:e3:de:d8:38:e5:35:7e:e4:47:8e:1c:a2:64:5e:
ea:07:5d:75:8d:8c:61:fb:b8:51:0c:17:b9:1a:a5:
0d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7E:DC:9A:94:01:59:08:0A:A6:A1:C6:5A:EF:B2:C8:9C:DF:BC:57
X509v3 Authority Key Identifier:
keyid:2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e9:2b:e9:56:f7:00:f4:cc:bb:cb:e8:f8:aa:66:01:ca:76:
ca:9d:c3:fd:b2:49:aa:93:78:c0:7a:36:55:80:ae:e6:24:bf:
f0:84:ab:5a:d6:69:d6:8c:65:6f:92:b0:8b:2f:fe:f8:dd:7c:
32:e1:a4:91:ba:14:08:c0:f8:b4:10:da:ee:90:fd:26:ed:0b:
02:90:79:1c:8b:3e:98:69:08:d3:44:81:d3:27:56:1d:df:8d:
77:f4:35:ab:3b:1e:a4:6d:6f:ec:fd:97:94:79:5a:8e:08:74:
19:38:44:44:62:5a:e2:45:47:1d:3d:23:04:73:1a:0d:50:a2:
28:c0:a4:28:6f:81:9c:09:f3:bf:4c:1c:3a:fd:a4:01:a8:ac:
90:c8:2f:b2:a9:c2:de:a0:5d:4c:ae:15:44:fa:1a:98:4f:8e:
79:4b:30:df:20:01:1f:67:41:57:c8:b9:96:1a:f6:a9:4f:b3:
a2:1f:03:03:5f:cc:85:85:7a:5d:46:35:b0:05:08:fa:a8:08:
00:86:71:d9:44:35:4a:27:64:3c:05:a6:3a:8d:17:56:99:ab:
8c:14:62:bd:d5:56:41:d3:3f:7e:83:b5:c4:0f:73:91:09:6f:
a5:0c:39:f3:58:50:9c:9e:1c:af:e4:cd:c1:0d:44:65:f9:22:
6f:3a:23:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:57:25 2025 by rpki-client