Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: P6PftKbIB0eSmzqeRFglX8zHKonjVkoYJymdR7dED6M=
Subject key identifier: 4F:A3:06:16:B2:FC:5B:BB:59:D1:C4:98:92:11:1C:00:1C:E7:91:47
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 0197B6A0A74052855D73456471E289503B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:01:11 +0000
Manifest this update: Sat 28 Jun 2025 13:01:11 +0000
Manifest next update: Sun 29 Jun 2025 13:01:11 +0000
Files and hashes: 1: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: KvLSaDuonPHJkHl8nVUn7LRvz7xdiZbSF/ekZJPpjYo=)
2: LM4PEm0ffK75EUFTgpXPbuoAKZ8.roa (hash: d7gyd2tIHJ6HJ/7vl5EHNlkX+eVBttxlbWWHGFZ3xxQ=)
3: _w36PBooYvePauBkPOTldD_qNZc.roa (hash: hpJoX8luKbQz9GDhdRpg1rk5Zn+lxQz5UWYQbVjTs1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a7:40:52:85:5d:73:45:64:71:e2:89:50:3b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Jun 28 13:01:11 2025 GMT
Not After : Jun 29 13:01:11 2025 GMT
Subject: CN=4fa30616b2fc5bbb59d1c49892111c001ce79147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:27:c0:ce:fa:6c:07:37:5e:16:52:eb:e2:4b:
22:1f:86:b5:72:6a:bd:7d:d9:f7:92:e2:17:a0:fd:
da:fa:c5:74:d7:47:be:b6:52:57:e7:8f:a8:94:8e:
32:34:b3:24:4e:69:dd:9b:d4:bf:a8:43:74:84:c5:
8e:06:c6:95:86:62:60:cc:b6:50:dc:d0:25:d9:a4:
91:5c:a8:1b:4e:c3:43:64:bb:cb:f5:a6:58:07:83:
4b:36:50:65:fe:58:04:71:3a:0d:aa:73:93:f1:dc:
13:77:86:ce:e0:0d:d1:80:bf:96:4b:a7:23:bc:e1:
75:b8:59:af:de:fe:ab:7a:17:12:59:d6:51:ed:46:
11:7c:3b:c6:01:91:52:1c:3c:23:ff:3d:bc:84:99:
75:95:e8:b0:1c:53:05:68:e2:ca:bc:b2:d3:13:c2:
14:a5:97:1a:49:87:61:23:95:0c:e4:6f:09:1b:f2:
c4:3a:48:ad:e7:03:2f:c5:35:11:13:29:da:f6:bd:
ed:a0:08:82:f3:1f:14:7d:0c:f9:10:56:37:21:d7:
75:1c:1f:33:52:0e:b9:8b:aa:f7:8a:e0:31:10:0b:
aa:67:ad:c8:c5:58:c1:2d:27:b4:ec:97:14:e3:9e:
66:d4:25:56:1a:98:1e:3e:05:16:90:9e:cd:98:61:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A3:06:16:B2:FC:5B:BB:59:D1:C4:98:92:11:1C:00:1C:E7:91:47
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a1:96:9f:20:59:6b:29:bf:db:54:2e:1f:da:47:67:91:9a:
c7:50:a7:33:41:62:e3:94:b4:a9:a1:2c:6d:d3:aa:55:f7:86:
45:1e:43:bb:96:13:a1:bd:36:90:1c:2c:c0:5b:d1:1c:03:c7:
35:e7:ed:1d:c9:70:36:c8:6b:1d:03:17:5d:e3:2b:f3:21:32:
60:eb:5b:bd:5f:c7:01:40:30:7f:70:b8:01:77:60:1c:28:1b:
aa:43:d6:38:d1:d2:fa:e1:8b:33:75:9a:b9:88:54:3e:fd:34:
31:81:e9:d1:0e:6b:87:67:f1:5d:43:3b:5c:e0:28:7f:79:21:
38:0b:96:1a:93:0e:ac:0e:c4:a5:ed:a1:8e:0b:8b:67:4d:d7:
d7:83:b4:e6:78:28:c3:cd:b2:48:16:16:64:31:f1:b1:c2:b1:
75:ce:aa:f4:13:18:ac:21:16:ee:cf:ea:b5:72:63:79:54:a5:
ce:26:6a:77:20:74:02:36:a0:ac:63:4d:1b:83:fc:0a:e9:d0:
b4:4e:12:ea:90:4e:11:5b:66:0c:b4:2b:63:5e:c9:cb:6e:96:
da:ff:18:bb:a5:8c:25:0d:94:fe:df:88:ec:15:70:50:5c:c1:
16:15:cb:13:77:35:6a:df:aa:0e:b9:f7:74:64:62:30:f7:43:
99:2e:85:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:22 2025 by rpki-client