Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: 2F1pzLnTIb/ktAakb666jIpZKHoALXVd9+GWcSSN6/Q=
Subject key identifier: BB:59:2D:0A:36:7B:4B:41:E0:6F:21:A4:A4:0A:E5:A1:40:18:CA:12
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 0199FBEBFC49DC608945C7BC5144245C52F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: j+C+eUDBZFwQma2aqphZEOzNCaWrzWUqcBTAl4DV0Mk=)
2: LM4PEm0ffK75EUFTgpXPbuoAKZ8.roa (hash: d7gyd2tIHJ6HJ/7vl5EHNlkX+eVBttxlbWWHGFZ3xxQ=)
3: _w36PBooYvePauBkPOTldD_qNZc.roa (hash: hpJoX8luKbQz9GDhdRpg1rk5Zn+lxQz5UWYQbVjTs1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fc:49:dc:60:89:45:c7:bc:51:44:24:5c:52:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=bb592d0a367b4b41e06f21a4a40ae5a14018ca12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:68:69:37:e8:7f:36:94:31:90:c8:8c:fa:
cd:39:8b:ff:f4:4c:44:c6:36:ba:82:0e:2b:7f:68:
8d:7f:52:08:d9:03:ca:1e:4c:e0:11:e6:94:39:15:
ce:7b:9e:27:6a:c3:89:9f:9f:7b:8e:40:42:df:ce:
6b:e4:8c:b0:cc:bc:91:3e:67:32:c6:3c:71:c1:48:
5d:c6:b7:45:09:a2:f6:7d:3a:aa:51:2d:79:3a:37:
9e:fe:99:08:ae:d4:55:54:61:5f:94:2f:cc:91:bc:
53:de:29:e5:4c:9c:e6:8b:4e:b1:92:a3:70:27:8c:
68:49:c8:45:da:df:21:bb:02:a0:cc:88:35:82:c8:
23:99:9d:06:02:ff:93:df:57:7b:c4:47:b0:c0:3b:
a1:11:6e:2f:9f:f2:7d:97:5f:73:d7:76:6c:ab:b1:
a2:c9:00:f9:08:07:10:f7:dd:ff:ed:ff:7b:4d:38:
8c:7e:98:2b:41:0f:dc:17:5c:03:5f:a7:4b:51:a2:
40:63:a1:e7:25:83:b8:5b:1a:20:41:c9:04:b7:21:
f8:89:07:7b:6c:ee:1c:11:37:86:b6:da:30:13:bf:
ae:07:ae:94:55:43:3a:04:6b:b9:c5:da:72:47:22:
9b:dc:b8:13:96:34:f8:6c:a0:ff:1d:49:7e:13:c2:
1e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:59:2D:0A:36:7B:4B:41:E0:6F:21:A4:A4:0A:E5:A1:40:18:CA:12
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:55:54:f7:75:14:90:19:14:91:26:d5:fa:89:9f:ae:9b:57:
af:b1:f0:f3:07:24:89:b3:93:98:f3:32:91:68:22:06:8e:93:
4f:0d:11:19:bc:25:95:c6:0b:33:b1:c1:1b:c3:03:15:a5:3f:
f3:c6:8f:06:f8:a8:b0:51:61:02:a6:e8:f8:b2:ce:5f:5e:04:
a0:ed:35:fc:49:04:06:47:50:e2:bf:23:0c:89:bc:71:ca:c8:
17:da:7e:70:3a:0d:9e:ec:cf:67:dd:9f:d8:dd:79:e2:18:47:
9a:a0:50:0e:99:64:7b:d4:a9:78:56:12:5f:0b:b1:64:39:e5:
02:f7:43:78:ac:28:23:67:f2:58:db:ee:2c:97:2e:a7:94:57:
74:3c:96:b6:b7:a4:b1:01:d0:c4:94:c6:ef:31:f8:7a:2d:f2:
75:67:b0:de:1b:a2:c7:86:f2:63:f3:84:be:d0:18:b4:09:b8:
33:6d:ac:29:0d:4c:4f:2d:85:2a:cf:6c:f7:81:18:31:59:f7:
bc:fc:2e:bd:2f:d9:87:0e:a5:8e:0f:46:f7:27:e1:1e:80:55:
40:6b:34:48:77:03:ff:ca:fc:d6:cc:1c:8f:8b:06:22:81:e9:
b1:5a:c5:2a:c3:c7:62:29:4c:d8:10:1d:3b:6f:d3:11:f2:3a:
9c:21:ef:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:13 2025 by rpki-client