Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
File: K5X2grxtV338PBDs7icYOB_uOyM.mft (raw, json)
Hash identifier: Mk2489HQKB3NszrBWji9F5E+vAJubgd3pjx+h1SpN4k=
Subject key identifier: 5A:34:8E:0C:3F:56:96:43:83:A0:31:D2:2B:79:DE:CB:AC:23:9E:9A
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial: 019873E2A3287106163672CE83D2E6E581E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:01:29 +0000
Manifest this update: Mon 04 Aug 2025 07:01:29 +0000
Manifest next update: Tue 05 Aug 2025 07:01:29 +0000
Files and hashes: 1: IRjrM71OJM5QObnZgNNrFRUyuDg.roa (hash: KDXjEC5+jgnVgR7YLpm66IF8Y8cfv8DKQxOxQp+OnTk=)
2: K5X2grxtV338PBDs7icYOB_uOyM.crl (hash: GmbqQS5sxFvj+MSi1B3IuOyyeQ2NP5l3MCZ//1kvyvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:a3:28:71:06:16:36:72:ce:83:d2:e6:e5:81:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Validity
Not Before: Aug 4 07:01:29 2025 GMT
Not After : Aug 5 07:01:29 2025 GMT
Subject: CN=5a348e0c3f56964383a031d22b79decbac239e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:6d:b9:0a:98:df:3c:23:aa:73:cc:52:cb:
ee:1c:1c:83:ee:74:72:20:c8:14:69:41:c6:7a:1f:
d0:42:59:ad:df:08:87:90:81:8a:8d:ee:fe:24:5b:
d6:6c:8e:1d:b8:e6:9b:53:52:1c:0c:ed:71:fa:b1:
5c:97:85:a7:33:2c:cc:98:94:e3:6b:fd:71:9f:ff:
6e:c7:bb:9a:00:18:ed:66:69:74:59:fe:ae:76:07:
3e:9f:a0:f4:c6:6a:fb:d8:0b:b1:34:48:86:1a:55:
68:e2:a2:27:20:6c:d5:78:84:24:ff:df:cb:70:5a:
5a:91:05:df:1e:5c:d0:66:3d:0b:14:3f:3d:36:74:
e0:1a:45:1e:3d:d8:38:bc:20:1f:31:b6:7b:12:6b:
c2:d1:b1:62:d9:61:99:62:cf:52:19:a6:fb:7c:b2:
89:3b:aa:35:11:0b:75:f6:e1:46:80:de:b2:e7:63:
7d:3a:3b:05:41:33:35:d2:f3:7c:83:01:3f:cd:07:
bd:cc:6b:4d:0e:18:76:72:b5:1a:c6:f8:83:b1:07:
f9:df:40:d1:ee:e9:48:33:05:96:99:ba:1b:62:e4:
1b:7a:ba:9e:74:25:10:93:99:4f:8a:bf:58:03:e5:
f2:49:ff:f7:38:03:45:f8:93:94:44:32:47:03:a8:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:34:8E:0C:3F:56:96:43:83:A0:31:D2:2B:79:DE:CB:AC:23:9E:9A
X509v3 Authority Key Identifier:
keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a0:25:5f:0c:f3:ba:e2:62:71:b1:aa:4b:92:15:1f:30:cb:
27:64:a4:ba:d7:95:d6:6c:1e:e8:b4:ec:cb:4f:df:ee:1e:88:
64:5b:3b:25:81:d7:34:4e:a7:19:84:61:3e:4f:4b:bf:86:3a:
d2:f4:08:91:ac:2a:fc:8b:8a:b5:07:74:5f:a2:5e:e1:a6:70:
15:df:25:3c:14:16:8b:e8:1a:c4:05:6a:cd:25:2d:3d:fe:ae:
bb:f8:73:6d:45:b1:16:d2:10:f2:e6:53:34:67:c1:5a:40:12:
bb:f7:be:aa:3e:f9:1b:e4:6d:2d:51:31:1f:18:f6:e2:9b:17:
9d:cd:b7:31:55:50:92:45:4e:b7:8d:f5:7d:3c:75:6f:e1:7e:
06:c3:3d:de:30:d6:ae:be:0d:e3:1c:8c:fc:b0:30:9d:d6:12:
76:d1:f2:59:f7:a0:54:ab:67:f2:b7:1e:6f:78:3e:a2:4c:d2:
cd:96:69:32:40:76:19:2f:85:20:60:e2:45:cd:3c:7d:54:f3:
9f:a4:5d:2a:f9:e3:70:c3:57:48:57:8c:e7:3a:72:87:ee:c2:
2e:92:5a:dd:77:d5:12:42:5a:ca:c3:f0:b3:f1:15:ad:08:bf:
7d:74:e9:17:db:b0:e8:e6:e9:5e:e7:92:7b:63:f3:39:f0:52:
fc:96:b2:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4qMocQYWNnLOg9Lm5YHpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTVmNjgyYmM2ZDU3N2RmYzNjMTBlY2VlMjcxODM4MWZl
ZTNiMjMwHhcNMjUwODA0MDcwMTI5WhcNMjUwODA1MDcwMTI5WjAzMTEwLwYDVQQD
Eyg1YTM0OGUwYzNmNTY5NjQzODNhMDMxZDIyYjc5ZGVjYmFjMjM5ZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYRtuQqY3zwjqnPMUsvuHByD7nRy
IMgUaUHGeh/QQlmt3wiHkIGKje7+JFvWbI4duOabU1IcDO1x+rFcl4WnMyzMmJTj
a/1xn/9ux7uaABjtZml0Wf6udgc+n6D0xmr72AuxNEiGGlVo4qInIGzVeIQk/9/L
cFpakQXfHlzQZj0LFD89NnTgGkUePdg4vCAfMbZ7EmvC0bFi2WGZYs9SGab7fLKJ
O6o1EQt19uFGgN6y52N9OjsFQTM10vN8gwE/zQe9zGtNDhh2crUaxviDsQf530DR
7ulIMwWWmbobYuQberqedCUQk5lPir9YA+XySf/3OANF+JOURDJHA6j9ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFo0jgw/VpZDg6Ax0it53susI56aMB8GA1UdIwQY
MBaAFCuV9oK8bVd9/DwQ7O4nGDgf7jsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMt
ZTAxYTU2ZjU4ZDM3LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMtZTAxYTU2ZjU4ZDM3
LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqAlXwzz
uuJicbGqS5IVHzDLJ2SkuteV1mwe6LTsy0/f7h6IZFs7JYHXNE6nGYRhPk9Lv4Y6
0vQIkawq/IuKtQd0X6Je4aZwFd8lPBQWi+gaxAVqzSUtPf6uu/hzbUWxFtIQ8uZT
NGfBWkASu/e+qj75G+RtLVExHxj24psXnc23MVVQkkVOt431fTx1b+F+BsM93jDW
rr4N4xyM/LAwndYSdtHyWfegVKtn8rceb3g+okzSzZZpMkB2GS+FIGDiRc08fVTz
n6RdKvnjcMNXSFeM5zpyh+7CLpJa3XfVEkJaysPws/EVrQi/fXTpF9uw6ObpXueS
e2PzOfBS/JayPA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:18 2025 by rpki-client