Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: 4/nNbmgYOlrG/Qx5Tsmqoqe3WIaZw90hrD4y+I7H49o=
Subject key identifier: 6D:4C:EE:F5:84:27:9E:27:92:EF:52:29:CE:B0:EE:DB:F4:FD:E9:B9
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 0198D4724AFFF982620C97413A908442AA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:01:56 +0000
Manifest this update: Sat 23 Aug 2025 01:01:56 +0000
Manifest next update: Sun 24 Aug 2025 01:01:56 +0000
Files and hashes: 1: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: 0YRvLf72fTHOsdhhDzeKRCMBq5jZ95qYh3fwNf1LAOo=)
2: LM4PEm0ffK75EUFTgpXPbuoAKZ8.roa (hash: d7gyd2tIHJ6HJ/7vl5EHNlkX+eVBttxlbWWHGFZ3xxQ=)
3: _w36PBooYvePauBkPOTldD_qNZc.roa (hash: hpJoX8luKbQz9GDhdRpg1rk5Zn+lxQz5UWYQbVjTs1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:4a:ff:f9:82:62:0c:97:41:3a:90:84:42:aa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Aug 23 01:01:56 2025 GMT
Not After : Aug 24 01:01:56 2025 GMT
Subject: CN=6d4ceef584279e2792ef5229ceb0eedbf4fde9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:60:56:75:dc:51:f5:35:0c:0b:3a:65:99:
d7:20:bd:c8:b6:b9:33:87:7b:42:49:82:45:83:e6:
39:67:75:f2:6c:d7:9f:de:f1:7d:83:85:e4:b8:91:
7a:4a:64:8b:94:ed:6c:7e:31:f7:bc:1a:bd:a5:04:
00:c6:64:cd:0d:e9:18:e3:63:3f:a5:3d:83:f5:76:
64:01:69:7b:7f:83:33:e3:36:f5:3b:f7:11:fd:e0:
3e:ec:97:e8:3c:a6:ec:1b:52:c6:fc:21:d9:b9:b7:
d5:d5:88:50:34:da:e8:78:37:e3:15:c8:47:6c:0a:
f6:22:7b:c3:f7:8b:61:13:2c:b8:c0:e5:91:78:26:
bf:e3:e0:5d:81:27:97:86:55:57:67:d4:15:2c:51:
8e:d5:7f:5c:3a:7d:64:e6:30:92:66:6e:0c:7f:9e:
ee:67:84:0f:58:32:69:51:5a:95:81:24:1f:3e:0c:
dc:04:31:7e:8e:93:44:d7:04:fa:46:02:b6:01:1d:
28:44:75:aa:90:99:a4:b2:34:d8:10:d8:ec:55:f1:
86:a7:d0:07:4f:5a:5b:1a:5a:89:5e:f1:28:3d:2f:
71:80:db:c4:23:29:f3:9b:a1:46:04:91:86:84:8d:
79:de:5e:d3:09:c1:63:ba:eb:33:31:0d:00:37:ca:
aa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4C:EE:F5:84:27:9E:27:92:EF:52:29:CE:B0:EE:DB:F4:FD:E9:B9
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:83:7e:23:19:8e:38:d9:91:e3:d6:d7:3c:0c:e3:5c:30:11:
b0:73:db:43:5a:23:90:55:f6:d1:44:2d:6e:c9:fd:54:0e:93:
0c:06:67:4a:e8:36:d1:fe:d2:50:fa:ce:5c:d9:a8:7c:3b:d0:
66:a9:4e:c6:99:b7:76:50:ab:3f:2b:02:d6:d6:40:a5:e9:c1:
4f:e5:0e:c3:e2:4f:76:ba:f7:a7:bd:8c:cd:f7:32:c9:9a:67:
86:9c:a5:d7:b3:f8:76:6e:46:61:64:cb:37:eb:20:d9:65:69:
5f:50:89:4e:3e:39:e7:94:f5:38:10:bf:8e:d5:7d:35:9b:9e:
23:6b:5f:78:7b:04:ef:72:61:42:1f:b9:9c:7d:cf:90:5a:5b:
67:de:9b:1c:10:f4:90:16:af:d6:81:46:da:ed:ea:b2:b7:44:
df:79:74:da:48:2c:d2:0d:62:64:c8:ab:94:d2:3b:76:ef:73:
6e:64:3c:d9:4d:91:55:48:21:f4:c9:4e:1a:cc:da:6e:9f:17:
fe:9f:c9:97:26:ba:34:7f:ca:c0:fa:ad:09:d8:13:71:29:b5:
92:52:e2:98:1f:3e:86:ac:a0:d9:04:b3:ce:76:66:a6:c9:ac:
09:8a:21:b8:69:81:18:6b:bf:c3:74:a1:dd:0a:92:f1:8c:9e:
0a:06:f4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:52 2025 by rpki-client