Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
File: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft (raw, json)
Hash identifier: 1quWhCOJLQc/zlV0oHg+kMr16/UHN13Xi7vRtWFQtTE=
Subject key identifier: 56:0B:5C:62:D9:67:12:6F:A5:12:32:33:1E:1B:67:DC:A6:D0:85:5E
Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
Certificate issuer: /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Certificate serial: 019A559B58A00D65B814F48388D1A76ED49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
Manifest number: 87
Signing time: Wed 05 Nov 2025 20:00:35 +0000
Manifest this update: Wed 05 Nov 2025 20:00:35 +0000
Manifest next update: Thu 06 Nov 2025 20:00:35 +0000
Files and hashes: 1: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl (hash: kNyHEbQXAqORU48L7rY4BLekMoCNehQUshOKc4BAtLg=)
2: r23feT6NV4gkY4zPASAiQfbYf2Y.roa (hash: ReD3jPU9ih7dYlCC9A/HHv2ji9KRX8p8gAkXwzlwEc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:58:a0:0d:65:b8:14:f4:83:88:d1:a7:6e:d4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Validity
Not Before: Nov 5 20:00:35 2025 GMT
Not After : Nov 6 20:00:35 2025 GMT
Subject: CN=560b5c62d967126fa51232331e1b67dca6d0855e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:91:c7:19:26:3c:d0:ed:30:8e:08:78:25:
4f:ea:8c:36:85:02:1e:c5:f1:2e:29:43:99:a5:d0:
8d:47:d2:c7:a9:05:c4:af:ad:6a:28:a7:97:0e:65:
a7:70:88:97:78:9b:f1:8d:0a:bd:b5:a1:4c:c1:a4:
4d:14:01:b9:ed:56:ce:b1:19:aa:c8:fb:6f:c0:0e:
da:c3:80:8b:45:30:f3:eb:73:3e:86:63:43:62:5d:
b2:1f:2e:84:20:93:85:d3:e2:c1:d0:3e:52:9c:5a:
af:e4:7a:b3:4d:27:c6:55:ef:a0:00:f4:27:f1:7e:
f2:e1:5f:99:d6:34:de:fb:33:20:43:59:36:33:aa:
40:ea:5d:da:92:12:d9:5f:63:ea:89:1b:80:7a:02:
02:ba:43:d0:d2:09:cc:cf:26:82:e1:c6:21:b6:42:
6c:bc:9f:2e:13:e8:d3:d0:18:a2:f0:45:86:1a:06:
4c:db:15:de:21:ca:b4:59:52:ec:26:5f:b6:bf:3c:
d6:2d:0c:bf:18:1f:d9:cb:c5:fc:40:b5:81:b1:ea:
20:9e:e7:5f:39:9a:94:21:31:61:d7:3c:10:16:d6:
2e:27:66:8e:f2:4f:de:fb:48:fb:f5:eb:d9:07:56:
03:bd:44:c6:44:21:4e:89:40:59:ed:b3:d4:37:db:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0B:5C:62:D9:67:12:6F:A5:12:32:33:1E:1B:67:DC:A6:D0:85:5E
X509v3 Authority Key Identifier:
keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b5:0a:fa:ed:26:1f:96:f8:15:3d:f9:ff:29:2f:a6:92:da:
8b:06:85:b8:3d:f7:6f:b0:65:86:e4:a9:28:80:a3:5c:40:e4:
31:70:6b:54:75:3a:80:b3:94:f6:94:2a:b8:7e:91:ef:50:8b:
1c:1e:62:21:7f:95:ec:c7:f5:1c:d6:b3:ae:b3:25:d2:dc:73:
24:5c:83:f4:8b:82:e5:43:62:36:36:9a:a6:b5:ed:aa:de:b6:
6c:04:d6:ce:a0:bc:98:fc:4e:b9:66:4e:51:53:ce:64:99:6a:
3f:1d:32:9a:24:2a:84:c8:f8:f0:90:f4:ba:af:ef:76:30:53:
14:64:be:11:04:6c:68:c3:24:ef:f5:d0:e3:a6:09:b4:5d:cb:
a8:84:b4:91:57:71:12:10:1a:b2:79:c6:76:13:fb:98:25:7a:
32:87:86:f0:e1:4a:a7:aa:c8:11:eb:72:a6:26:27:7d:e3:da:
aa:19:e2:cc:4f:ca:d5:c2:8a:b6:cf:78:fd:4c:90:7d:a5:09:
6e:bd:82:bf:c0:3d:61:44:8d:60:b6:9b:4c:9b:40:14:cd:6a:
a1:6c:23:51:bf:97:bf:a5:79:72:c8:9d:44:a4:1f:98:a8:52:
45:6c:d7:ee:27:2a:d6:b3:26:51:b3:00:41:45:06:4d:f2:cd:
f7:85:bd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:54:39 2025 by rpki-client