Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
File: K5X2grxtV338PBDs7icYOB_uOyM.mft (raw, json)
Hash identifier: /0GnsSMIO3FkyXpNtWPh6qbS7X+hU10rbsf1gqS6JV0=
Subject key identifier: 80:28:CE:53:F6:A7:29:B1:B0:D6:CB:69:84:F8:E5:55:87:32:E5:08
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial: 019A50E32FC922A0C21C39AF35133516D02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 22:00:57 +0000
Manifest this update: Tue 04 Nov 2025 22:00:57 +0000
Manifest next update: Wed 05 Nov 2025 22:00:57 +0000
Files and hashes: 1: IRjrM71OJM5QObnZgNNrFRUyuDg.roa (hash: KDXjEC5+jgnVgR7YLpm66IF8Y8cfv8DKQxOxQp+OnTk=)
2: K5X2grxtV338PBDs7icYOB_uOyM.crl (hash: HRqs0WV4uQiL55nry4gZ8FEePjfpOaXlMOhB338nnlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:2f:c9:22:a0:c2:1c:39:af:35:13:35:16:d0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Validity
Not Before: Nov 4 22:00:57 2025 GMT
Not After : Nov 5 22:00:57 2025 GMT
Subject: CN=8028ce53f6a729b1b0d6cb6984f8e5558732e508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:25:07:7a:06:6e:4b:b8:99:55:61:1c:05:19:
da:e1:e7:19:54:8e:56:69:09:0b:ca:28:0d:a4:e0:
f4:6e:13:75:ad:e1:d6:97:35:cb:07:d4:21:4c:c6:
d4:8b:a2:ab:73:dd:00:56:57:8f:a1:91:21:e6:95:
d8:65:41:c7:b7:46:65:47:db:92:fc:29:88:53:f3:
0a:14:86:47:c5:8b:4c:bd:ba:44:87:d7:6f:ce:7a:
df:d5:bd:f4:a0:a7:c9:1d:f2:76:f6:5c:38:98:21:
29:14:d2:78:fd:21:44:3d:da:80:fe:f8:b4:0f:34:
8f:e6:20:85:48:56:f9:5a:e9:fd:a4:29:5c:db:b1:
57:b6:f4:38:7d:16:3d:0c:5e:b5:d1:a0:c4:e6:a9:
d1:f0:b8:e9:59:a7:0c:4b:b3:b8:dc:52:db:42:2f:
27:d6:e2:62:d5:69:44:36:b3:f9:68:db:52:b9:4f:
f8:1f:5d:0e:ad:59:31:04:75:ab:e3:7a:53:8e:62:
d8:4d:30:cf:b6:c2:22:8e:33:e7:47:32:f0:0b:47:
be:82:70:d6:01:9c:48:6a:3b:44:20:40:dc:c4:d7:
c5:63:4a:d5:e9:5b:9c:26:58:b7:79:46:8c:d4:ac:
49:c9:35:04:a9:50:20:e5:5c:e8:16:c6:f4:a9:67:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:28:CE:53:F6:A7:29:B1:B0:D6:CB:69:84:F8:E5:55:87:32:E5:08
X509v3 Authority Key Identifier:
keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1a:fa:bc:66:ae:15:e6:ec:f9:29:23:38:f5:3e:80:30:e5:
eb:d1:0d:d7:6b:a0:01:45:1b:e1:74:13:9e:ec:cc:2e:33:2c:
04:80:5c:a9:4d:85:d1:96:9a:15:03:8b:63:95:a0:07:70:04:
30:f5:43:24:f1:b3:5f:2f:00:2c:80:0b:aa:ad:73:30:d0:29:
45:79:80:9d:50:7a:66:13:b8:43:35:98:82:87:46:a4:b2:d5:
f3:03:2b:c7:09:78:3a:a9:23:af:48:07:00:46:b6:bb:1d:ca:
d1:23:1e:c6:65:1a:36:76:eb:b5:7b:97:f4:5c:69:fd:f2:fd:
95:60:ca:86:b6:19:da:50:e5:b1:45:74:0c:eb:80:17:72:f7:
bd:c6:d7:cb:13:11:eb:58:76:2c:8d:22:d4:30:02:85:88:d1:
61:cb:0d:19:22:3e:f1:2f:82:8b:12:68:27:17:94:7a:a8:4e:
bc:7f:17:63:7f:21:d1:96:cf:65:58:68:0e:65:49:90:a5:80:
ac:9d:8a:ed:e4:95:3d:8d:6f:fd:44:30:48:38:8d:c2:e2:0e:
c5:76:79:ad:e0:bd:70:79:e7:86:02:22:22:b3:55:b1:83:e6:
73:a4:87:fd:88:31:25:78:39:f5:8b:f1:54:bb:16:74:a0:24:
b1:cf:41:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4y/JIqDCHDmvNRM1FtAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTVmNjgyYmM2ZDU3N2RmYzNjMTBlY2VlMjcxODM4MWZl
ZTNiMjMwHhcNMjUxMTA0MjIwMDU3WhcNMjUxMTA1MjIwMDU3WjAzMTEwLwYDVQQD
Eyg4MDI4Y2U1M2Y2YTcyOWIxYjBkNmNiNjk4NGY4ZTU1NTg3MzJlNTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CUHegZuS7iZVWEcBRna4ecZVI5W
aQkLyigNpOD0bhN1reHWlzXLB9QhTMbUi6Krc90AVlePoZEh5pXYZUHHt0ZlR9uS
/CmIU/MKFIZHxYtMvbpEh9dvznrf1b30oKfJHfJ29lw4mCEpFNJ4/SFEPdqA/vi0
DzSP5iCFSFb5Wun9pClc27FXtvQ4fRY9DF610aDE5qnR8LjpWacMS7O43FLbQi8n
1uJi1WlENrP5aNtSuU/4H10OrVkxBHWr43pTjmLYTTDPtsIijjPnRzLwC0e+gnDW
AZxIajtEIEDcxNfFY0rV6VucJli3eUaM1KxJyTUEqVAg5VzoFsb0qWepKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAozlP2pymxsNbLaYT45VWHMuUIMB8GA1UdIwQY
MBaAFCuV9oK8bVd9/DwQ7O4nGDgf7jsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMt
ZTAxYTU2ZjU4ZDM3LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMtZTAxYTU2ZjU4ZDM3
LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRr6vGau
Febs+SkjOPU+gDDl69EN12ugAUUb4XQTnuzMLjMsBIBcqU2F0ZaaFQOLY5WgB3AE
MPVDJPGzXy8ALIALqq1zMNApRXmAnVB6ZhO4QzWYgodGpLLV8wMrxwl4Oqkjr0gH
AEa2ux3K0SMexmUaNnbrtXuX9Fxp/fL9lWDKhrYZ2lDlsUV0DOuAF3L3vcbXyxMR
61h2LI0i1DAChYjRYcsNGSI+8S+CixJoJxeUeqhOvH8XY38h0ZbPZVhoDmVJkKWA
rJ2K7eSVPY1v/UQwSDiNwuIOxXZ5reC9cHnnhgIiIrNVsYPmc6SH/YgxJXg59Yvx
VLsWdKAksc9BHQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:31:02 2025 by rpki-client