Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
File: K5rePBkSeLKqitdnQu673v5yheY.mft (raw, json)
Hash identifier: JfoDEJyOuUIat/kVi6qdCMPq7lO8WVjdkw7Uw6vqlDs=
Subject key identifier: 15:B9:51:4D:FF:EB:D8:0C:5A:DD:6D:AF:65:1E:E9:22:82:D3:E6:4C
Authority key identifier: 2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
Certificate issuer: /CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Certificate serial: 019875D0B01828C935D9FC437E2BCAB14CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 16:01:07 +0000
Manifest this update: Mon 04 Aug 2025 16:01:07 +0000
Manifest next update: Tue 05 Aug 2025 16:01:07 +0000
Files and hashes: 1: K5rePBkSeLKqitdnQu673v5yheY.crl (hash: kTKSMLx/TZkQ2FOYMr7XIcg8KZlLpj7d/4kRXDnb2WQ=)
2: qG28szwgzKPw-jxxXZAb6g2XGqU.roa (hash: izxZJRDh1PNPhAdwizTZ+zNrbkp/H2QNfLC0QfnH8sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:b0:18:28:c9:35:d9:fc:43:7e:2b:ca:b1:4c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Validity
Not Before: Aug 4 16:01:07 2025 GMT
Not After : Aug 5 16:01:07 2025 GMT
Subject: CN=15b9514dffebd80c5add6daf651ee92282d3e64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:3e:fb:f8:e3:f2:92:64:30:1e:0d:52:84:
77:db:4c:01:cc:e3:80:d2:34:db:66:13:88:0e:5e:
cc:6a:11:65:c2:7d:ce:f1:99:d4:9a:1b:4f:6b:ea:
96:7f:b4:61:9e:4d:97:ec:35:70:2d:55:b0:1c:49:
36:dc:1c:3a:6b:6b:60:a5:d5:3a:d0:5c:d0:a5:bf:
3e:80:d7:c3:01:1c:88:44:5c:74:75:c8:3a:f6:be:
0a:a7:67:f5:4c:9c:65:cb:09:12:1b:5a:10:a6:7f:
dd:8d:a7:db:11:1e:02:f8:fa:36:a3:5f:3b:f7:a3:
71:c3:3e:2c:c1:20:3d:46:b2:2f:3a:20:63:59:03:
92:2d:62:2a:b9:5a:07:eb:f3:ee:d3:52:11:45:96:
e7:2c:34:6e:f9:ed:e4:95:b8:d6:ec:6f:01:40:fa:
eb:f0:3d:92:a5:c1:2b:e9:72:16:c7:1e:6a:8d:9b:
4f:67:7f:69:1e:b5:2e:14:25:4e:59:60:9c:68:18:
e1:08:5f:89:cf:3f:5c:48:ab:88:e1:21:86:a5:ae:
fa:ff:68:a5:1f:d0:a2:57:e2:c3:9f:bd:f1:55:f2:
8b:db:e7:d7:b3:d8:b6:da:c8:3d:db:b6:e2:aa:2b:
69:1e:a6:aa:a5:43:f3:22:4d:a8:23:51:a8:ea:27:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:51:4D:FF:EB:D8:0C:5A:DD:6D:AF:65:1E:E9:22:82:D3:E6:4C
X509v3 Authority Key Identifier:
keyid:2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c7:49:11:6e:32:df:9d:23:73:94:e4:fc:67:51:9c:38:2d:
d6:2e:c7:19:6f:9a:cc:02:ff:77:9f:cb:b4:8c:08:cb:1a:b0:
f4:6d:ec:2d:aa:0b:5c:f8:1f:63:e4:e3:a4:46:40:a7:31:57:
8c:ed:1d:0b:36:c2:6f:0c:09:c1:99:30:53:51:45:1b:9a:ee:
70:82:7c:f7:1e:bd:41:fa:22:6b:a4:71:d1:58:1c:c6:99:62:
d8:91:ac:0b:24:aa:de:22:b4:0b:2e:cf:b5:ea:2a:78:53:d9:
e9:31:15:db:1c:61:89:2d:1d:76:fa:19:15:e0:3f:bf:65:1e:
ab:42:bd:36:13:8f:7c:b0:b8:f8:2f:b4:a7:65:ad:b5:3e:42:
47:ec:fb:cd:b5:37:dd:9d:bb:83:a0:f2:89:83:9d:10:bf:71:
2e:ed:a9:21:39:4a:d1:d8:5e:4c:0b:77:2c:61:21:d6:c9:8b:
40:9a:84:e3:39:e9:13:9d:25:0d:0e:36:d9:10:ed:e3:3c:62:
80:2d:ef:c0:a6:f3:85:56:9e:50:12:4a:00:f0:81:82:69:c5:
a0:9a:39:43:68:30:95:20:d7:3f:04:c5:c4:1e:24:3a:4d:0d:
bf:85:fe:ac:55:83:c8:34:90:d1:dc:af:85:5b:de:67:14:45:
c2:fd:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:26:18 2025 by rpki-client