Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
File: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft (raw, json)
Hash identifier: YAcZkEZhzgpRCPzuuUC5RfOU75tKJAAB0x1yW1kj5ic=
Subject key identifier: 82:87:32:1F:EA:04:75:30:79:68:18:61:C5:3D:75:54:D2:D9:0C:CB
Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
Certificate issuer: /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Certificate serial: 0199FAD85CA6FB1AFBD93A12B6CCE1C97563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
Manifest number: 58
Signing time: Sun 19 Oct 2025 05:01:47 +0000
Manifest this update: Sun 19 Oct 2025 05:01:47 +0000
Manifest next update: Mon 20 Oct 2025 05:01:47 +0000
Files and hashes: 1: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl (hash: G5c61beCRtA1vqUxFeJdQdh27HQ376NEyHeBGiXwjvY=)
2: r23feT6NV4gkY4zPASAiQfbYf2Y.roa (hash: ReD3jPU9ih7dYlCC9A/HHv2ji9KRX8p8gAkXwzlwEc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:5c:a6:fb:1a:fb:d9:3a:12:b6:cc:e1:c9:75:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Validity
Not Before: Oct 19 05:01:47 2025 GMT
Not After : Oct 20 05:01:47 2025 GMT
Subject: CN=8287321fea04753079681861c53d7554d2d90ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d6:1e:60:7a:44:fe:28:a1:e5:3d:80:39:8a:
34:b9:ba:40:7a:72:f2:58:a5:9f:40:16:81:26:2d:
33:4f:53:2f:51:8b:9e:ce:3b:24:2f:e4:3c:39:6d:
9a:d9:4a:fd:e0:75:a8:e0:8f:c0:b1:77:85:d7:21:
c0:fe:c6:b0:30:28:0e:46:ea:c4:19:9b:d1:fe:c3:
5a:b1:3a:e0:17:a5:b9:ad:c0:74:f1:0d:cb:ff:b5:
ca:9c:d3:fc:bb:0a:60:97:2c:76:79:90:09:71:c5:
2c:35:87:42:2b:92:04:1f:d3:b3:e5:ea:4c:c8:3d:
61:aa:0b:f0:4f:e4:8b:87:7a:5b:83:30:ce:f1:14:
af:64:1a:39:83:92:0b:bd:b4:51:3b:76:b1:7c:81:
92:b7:b2:06:2d:1d:0a:84:b8:83:87:5c:12:84:a7:
84:88:61:b5:f9:c5:53:9e:3a:1b:9c:80:7d:7f:c7:
c5:9c:da:c3:5b:99:7e:3e:78:9e:6f:46:ee:38:83:
f6:04:9e:e8:a9:7b:01:00:1b:4d:b3:8e:93:af:c4:
4c:45:18:f6:c4:23:fd:04:a3:94:0f:d4:dd:41:4e:
3b:9d:31:26:12:78:b3:17:21:39:10:52:96:78:c2:
99:4c:18:00:aa:e8:4b:ce:88:01:bc:e1:aa:c9:38:
3a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:87:32:1F:EA:04:75:30:79:68:18:61:C5:3D:75:54:D2:D9:0C:CB
X509v3 Authority Key Identifier:
keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:80:9c:7a:cb:7a:cc:bd:73:90:7c:9f:ee:e1:5c:3c:d7:dd:
75:a9:88:44:c2:1a:24:49:7e:1a:c7:db:2f:3c:37:36:ee:19:
7e:2a:64:6a:30:2a:a3:80:7f:b5:d2:2d:f5:a7:04:01:4e:84:
a6:ac:59:cf:d2:1f:4f:7a:6f:9d:03:95:2a:49:be:05:ca:47:
2a:ef:be:cc:ae:10:67:fb:7a:ed:12:16:71:83:2a:20:4b:5e:
06:88:b8:9f:a4:4e:49:16:d3:25:10:d1:a9:3e:2b:01:a6:eb:
e3:0a:e8:e4:6f:a5:3b:2b:68:fb:51:52:e8:9b:06:8f:f8:e0:
12:bc:c7:70:f1:47:d0:95:08:d9:d3:ee:6b:a0:f1:a5:67:4b:
82:00:b6:bd:90:d2:f8:ab:5e:fd:3d:40:2c:80:84:eb:36:55:
82:38:a2:d0:38:c6:10:a4:7c:21:c8:9d:d3:f9:3a:bb:58:d7:
ec:89:da:f9:84:9b:cc:b7:4e:47:bf:3a:f5:18:73:64:89:55:
18:3b:b3:69:1b:3c:fa:fa:ad:50:93:7a:aa:14:8f:c9:92:f7:
6e:64:d1:3c:c8:9b:a0:31:94:35:29:f2:c9:d3:e9:bb:5e:bd:
9a:f2:0d:8c:23:ef:84:d4:4c:c4:71:ee:a0:16:95:02:34:ba:
92:ab:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:11 2025 by rpki-client