Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
File: K5rePBkSeLKqitdnQu673v5yheY.mft (raw, json)
Hash identifier: Mf9DdLnnRi4xwIQFsU9aHkG+kx5W+d1Yx6VQsQJl2n0=
Subject key identifier: F6:AD:90:60:9C:D7:F2:14:AF:83:6B:4B:87:3C:A7:26:28:BC:E3:B1
Authority key identifier: 2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
Certificate issuer: /CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Certificate serial: 019770E36DB48862C978A454137E7FA8EC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 00:00:42 +0000
Manifest this update: Sun 15 Jun 2025 00:00:42 +0000
Manifest next update: Mon 16 Jun 2025 00:00:42 +0000
Files and hashes: 1: K5rePBkSeLKqitdnQu673v5yheY.crl (hash: DG4rpK044JGa/u000d2gh2KulKVa5OZRuqU/A8tQ0jE=)
2: qG28szwgzKPw-jxxXZAb6g2XGqU.roa (hash: izxZJRDh1PNPhAdwizTZ+zNrbkp/H2QNfLC0QfnH8sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:6d:b4:88:62:c9:78:a4:54:13:7e:7f:a8:ec:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Validity
Not Before: Jun 15 00:00:42 2025 GMT
Not After : Jun 16 00:00:42 2025 GMT
Subject: CN=f6ad90609cd7f214af836b4b873ca72628bce3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:8e:da:c7:a4:26:75:a3:85:37:8d:fb:4f:
49:6c:95:3f:12:35:c0:e5:51:0b:c6:94:b1:03:6e:
83:14:83:5a:5d:ea:a1:99:9d:bb:7f:54:f8:4d:33:
93:e6:7e:a4:34:bb:2f:45:b8:b7:c5:d9:1f:9b:2d:
06:cc:5a:79:b9:f9:84:46:20:f6:28:22:70:ef:2d:
10:50:72:5f:36:b4:85:e1:d3:40:09:8d:67:53:c2:
27:05:4a:e4:15:3a:08:0f:2c:66:73:c8:e2:fa:e1:
e4:2f:e0:6c:bd:ff:2c:a3:0e:20:37:ca:40:5b:06:
a5:c5:51:86:a2:48:a4:88:3e:da:ed:7e:ce:d2:60:
fc:6a:a7:08:54:fe:3c:19:34:96:82:98:cb:d2:f4:
4a:c7:ba:8b:01:fa:25:46:14:b5:f3:17:6f:54:e1:
e9:d7:80:9c:48:6a:68:1d:fa:d0:74:1d:6e:9d:c7:
99:55:09:02:ab:c4:86:71:97:5d:a8:fc:19:33:90:
92:ae:20:9d:5d:9d:52:27:5f:33:6a:8a:84:d6:bc:
98:0b:06:d0:4e:80:f1:22:8d:5b:f0:a7:e0:6c:0f:
3b:7d:fd:5e:b1:27:5a:fc:d3:d8:5d:36:bf:d4:5e:
de:ef:31:03:ad:4c:c8:f8:a9:ed:c6:c9:cb:14:f3:
95:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AD:90:60:9C:D7:F2:14:AF:83:6B:4B:87:3C:A7:26:28:BC:E3:B1
X509v3 Authority Key Identifier:
keyid:2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d7:b1:03:a6:a8:c3:85:ff:8f:26:0d:08:fc:ab:c8:12:bf:
d7:12:14:ec:f6:61:5c:47:48:78:65:d2:46:5c:dc:cf:20:1b:
1a:07:23:b9:52:f2:c5:e1:23:73:26:e9:33:65:ce:0c:50:c3:
b6:12:6a:37:6a:31:e8:f0:de:1d:c9:5e:1b:2b:25:58:a3:21:
46:10:3e:00:85:5b:ee:9c:c7:b1:59:37:6a:8a:27:f5:8c:a8:
91:6e:aa:52:78:15:81:3f:30:a0:67:73:cb:cb:6f:82:12:00:
25:c7:4c:75:1a:da:ae:7c:61:a7:49:2c:d3:ae:ab:9c:3a:89:
18:b9:db:4d:2f:1e:86:71:68:df:e4:2f:ea:67:58:3d:52:53:
49:91:6e:4d:85:6d:4d:9f:75:1b:26:f3:64:be:f8:9b:da:78:
18:00:d1:2c:fd:ca:28:bb:55:f6:52:d0:07:36:44:d9:d7:60:
11:1f:84:bc:81:23:15:64:6b:2b:a8:ad:eb:81:84:ff:98:57:
cc:5d:1f:3c:c4:08:b8:4e:90:77:2e:5c:52:51:d5:6d:56:89:
a9:2b:54:38:63:91:02:c2:b8:e6:45:30:ce:ff:ba:35:80:ad:
d1:72:5a:a9:b7:d2:aa:ba:ea:a9:e2:ec:52:f9:82:60:ab:b2:
e6:c3:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:07 2025 by rpki-client