Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft
File: K5Ro565AOUbluk3mHMHEej2b794.mft (raw, json)
Hash identifier: xa6J1sle/LDLjVr/ROlCDKXUG+fYwshcfPXjx7zHFhg=
Subject key identifier: C5:48:C3:34:66:DD:9C:38:05:04:DF:9D:72:7A:73:E1:1F:31:A2:D5
Authority key identifier: 2B:94:68:E7:AE:40:39:46:E5:BA:4D:E6:1C:C1:C4:7A:3D:9B:EF:DE
Certificate issuer: /CN=2b9468e7ae403946e5ba4de61cc1c47a3d9befde
Certificate serial: 019A4EF52E42EB0C18102CE216E8EE1931FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Ro565AOUbluk3mHMHEej2b794.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft
Manifest number: 0BC6
Signing time: Tue 04 Nov 2025 13:01:22 +0000
Manifest this update: Tue 04 Nov 2025 13:01:22 +0000
Manifest next update: Wed 05 Nov 2025 13:01:22 +0000
Files and hashes: 1: K5Ro565AOUbluk3mHMHEej2b794.crl (hash: JBCQV9CO6RYrUF0UQakIdOvMwjvrmBTOAKML7/kmyq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5Ro565AOUbluk3mHMHEej2b794.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2e:42:eb:0c:18:10:2c:e2:16:e8:ee:19:31:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9468e7ae403946e5ba4de61cc1c47a3d9befde
Validity
Not Before: Nov 4 13:01:22 2025 GMT
Not After : Nov 5 13:01:22 2025 GMT
Subject: CN=c548c33466dd9c380504df9d727a73e11f31a2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:69:c6:00:d2:e5:d8:c2:d8:1a:a4:14:d5:
b4:e5:6a:e8:cf:ea:cf:71:75:63:e7:2e:24:47:0f:
3c:86:32:09:19:f8:f9:96:18:53:52:ce:58:28:0e:
c8:3e:42:af:c9:96:ff:10:9e:aa:18:48:a5:8d:73:
90:96:e0:f9:1c:a3:a0:58:04:5d:68:0f:00:8f:eb:
61:e6:04:c2:ed:3a:3c:4f:35:db:2f:79:b8:fd:7c:
2f:5a:1c:20:0d:73:46:ee:07:d6:9e:f9:bf:b4:6d:
64:0b:56:ae:ae:16:c6:17:ed:ec:fd:00:ed:39:24:
a6:44:bc:5f:02:cc:91:b2:cf:97:42:ef:32:0c:76:
ab:fc:9c:57:47:73:e5:bd:ff:ca:46:5f:ae:59:c4:
d5:e0:d5:20:1e:31:61:67:dd:2f:43:72:58:34:fa:
1d:b6:2b:25:26:cc:59:3f:8f:b6:e2:50:9d:cb:de:
0d:36:de:50:b8:bc:0d:49:c1:f8:9f:f8:d8:40:1a:
c6:04:80:8b:f1:9d:47:86:a2:a6:3b:5b:a8:cb:8b:
39:c0:29:eb:34:d6:48:82:42:33:2b:af:c9:44:f7:
ce:8b:5b:ca:93:59:01:d8:42:45:70:06:53:75:c7:
5f:6e:21:6a:48:44:be:5b:27:86:39:e5:57:ce:00:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:48:C3:34:66:DD:9C:38:05:04:DF:9D:72:7A:73:E1:1F:31:A2:D5
X509v3 Authority Key Identifier:
keyid:2B:94:68:E7:AE:40:39:46:E5:BA:4D:E6:1C:C1:C4:7A:3D:9B:EF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Ro565AOUbluk3mHMHEej2b794.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1a:08:46:1a:02:d1:96:13:0d:d7:e5:89:bf:5a:e7:d6:42:
31:8b:bb:a7:9b:a6:4f:a7:e3:11:83:6f:88:79:2f:f1:b2:db:
44:c7:cc:f3:26:5c:d1:85:51:d5:ca:c8:3c:3a:57:56:c7:62:
81:e7:b0:75:bf:e6:12:b5:de:0c:34:b2:1c:34:ec:e0:97:6f:
7e:f9:7d:40:bd:0e:b1:dc:60:03:3f:54:0d:e0:1a:48:99:45:
74:0e:20:51:d6:5d:95:95:9a:a7:e2:c8:61:c7:0a:96:55:8e:
ef:a8:20:48:0e:0a:48:86:f2:f1:0f:97:d2:fd:bc:8c:cd:37:
69:69:46:23:40:9f:ff:fb:8d:9f:c9:51:cb:4d:9b:ee:72:26:
22:59:22:06:e2:e7:50:99:de:89:64:ba:cc:79:a8:3a:de:d3:
4f:90:d4:ab:b3:2d:10:b1:e4:35:b6:b8:6a:23:b4:aa:5a:92:
e2:bb:65:bc:e5:5b:ef:11:e6:2b:f8:e0:d8:92:98:3f:e2:b0:
40:64:87:c8:de:4a:1f:f5:ad:7a:c6:06:7d:1d:a4:84:83:04:
f7:c9:ce:ba:06:dd:98:a8:42:e3:8d:22:3c:5c:db:4d:87:c6:
20:15:27:8e:4e:3f:15:99:7c:bb:c2:a3:40:83:b1:77:30:de:
8b:12:10:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9S5C6wwYECziFujuGTH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTQ2OGU3YWU0MDM5NDZlNWJhNGRlNjFjYzFjNDdhM2Q5
YmVmZGUwHhcNMjUxMTA0MTMwMTIyWhcNMjUxMTA1MTMwMTIyWjAzMTEwLwYDVQQD
EyhjNTQ4YzMzNDY2ZGQ5YzM4MDUwNGRmOWQ3MjdhNzNlMTFmMzFhMmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMVpxgDS5djC2BqkFNW05Wroz+rP
cXVj5y4kRw88hjIJGfj5lhhTUs5YKA7IPkKvyZb/EJ6qGEiljXOQluD5HKOgWARd
aA8Aj+th5gTC7To8TzXbL3m4/XwvWhwgDXNG7gfWnvm/tG1kC1aurhbGF+3s/QDt
OSSmRLxfAsyRss+XQu8yDHar/JxXR3Plvf/KRl+uWcTV4NUgHjFhZ90vQ3JYNPod
tislJsxZP4+24lCdy94NNt5QuLwNScH4n/jYQBrGBICL8Z1HhqKmO1uoy4s5wCnr
NNZIgkIzK6/JRPfOi1vKk1kB2EJFcAZTdcdfbiFqSES+WyeGOeVXzgANzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVIwzRm3Zw4BQTfnXJ6c+EfMaLVMB8GA1UdIwQY
MBaAFCuUaOeuQDlG5bpN5hzBxHo9m+/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVSbzU2NUFPVWJsdWszbUhNSEVlajJiNzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi80YjVjMTgtODQ3Mi00MWRiLWI1NTct
MjI2OWMxYWYyYWQzLzEvSzVSbzU2NUFPVWJsdWszbUhNSEVlajJiNzk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi80YjVjMTgtODQ3Mi00MWRiLWI1NTctMjI2OWMxYWYyYWQz
LzEvSzVSbzU2NUFPVWJsdWszbUhNSEVlajJiNzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBoIRhoC
0ZYTDdflib9a59ZCMYu7p5umT6fjEYNviHkv8bLbRMfM8yZc0YVR1crIPDpXVsdi
geewdb/mErXeDDSyHDTs4Jdvfvl9QL0OsdxgAz9UDeAaSJlFdA4gUdZdlZWap+LI
YccKllWO76ggSA4KSIby8Q+X0v28jM03aWlGI0Cf//uNn8lRy02b7nImIlkiBuLn
UJneiWS6zHmoOt7TT5DUq7MtELHkNba4aiO0qlqS4rtlvOVb7xHmK/jg2JKYP+Kw
QGSHyN5KH/WtesYGfR2khIME98nOugbdmKhC440iPFzbTYfGIBUnjk4/FZl8u8Kj
QIOxdzDeixIQjQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:59 2025 by rpki-client