Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
File: K5rePBkSeLKqitdnQu673v5yheY.mft (raw, json)
Hash identifier: IRT/6dV1uKPQZMp4jxd3W3ch0t0gNrcnOUpBOTyGknw=
Subject key identifier: 18:90:CB:0C:24:D3:73:79:BF:14:F6:2A:98:5F:3B:3E:47:46:93:73
Authority key identifier: 2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
Certificate issuer: /CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Certificate serial: 0198D66059B916580B6F79B3E14A3743431C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:35 +0000
Manifest this update: Sat 23 Aug 2025 10:01:35 +0000
Manifest next update: Sun 24 Aug 2025 10:01:35 +0000
Files and hashes: 1: K5rePBkSeLKqitdnQu673v5yheY.crl (hash: ydhz5xor+DOnX/ezj9/d2H0EWf4yrBA70xB+CCl4RFs=)
2: qG28szwgzKPw-jxxXZAb6g2XGqU.roa (hash: izxZJRDh1PNPhAdwizTZ+zNrbkp/H2QNfLC0QfnH8sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:59:b9:16:58:0b:6f:79:b3:e1:4a:37:43:43:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Validity
Not Before: Aug 23 10:01:35 2025 GMT
Not After : Aug 24 10:01:35 2025 GMT
Subject: CN=1890cb0c24d37379bf14f62a985f3b3e47469373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:d3:59:33:23:26:b9:f1:e6:18:1d:b1:77:
75:b9:9a:58:50:43:d0:a1:1f:74:f9:26:e7:ae:9f:
81:db:ce:b0:36:71:15:30:77:be:eb:2a:a4:42:e9:
a5:2f:30:95:3b:96:c0:cf:a1:98:40:ec:30:47:78:
f9:76:f0:10:8c:43:06:60:09:1a:b8:9a:71:9c:57:
58:91:81:87:26:88:b8:c4:5e:2c:91:92:b3:11:3a:
f7:15:8b:69:79:26:c7:ff:10:b2:d8:86:db:fb:e2:
88:8e:65:33:5f:ad:2e:52:c4:0c:85:3a:15:66:92:
26:40:d0:66:df:55:f5:96:1b:08:8c:05:10:4a:c0:
54:0d:d7:2e:a3:19:be:8a:62:d4:88:b0:52:cf:b4:
c8:e8:a5:ef:5f:62:cb:85:ba:4f:d7:a7:02:26:62:
0a:11:61:64:71:30:74:a7:df:3b:c7:6a:a1:7c:82:
6f:5b:a7:4d:cb:df:6a:ca:a5:dc:e2:c9:bb:ac:e9:
db:f3:43:81:29:f6:6a:0e:ec:b3:92:99:ab:a9:fc:
fb:10:db:fb:17:d0:f3:95:41:d4:fd:18:45:16:1a:
0d:d1:f0:2e:ac:7e:02:43:30:db:2c:9a:fd:39:a2:
80:3c:92:02:e0:d2:ac:b0:c2:51:70:95:4b:72:72:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:90:CB:0C:24:D3:73:79:BF:14:F6:2A:98:5F:3B:3E:47:46:93:73
X509v3 Authority Key Identifier:
keyid:2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0b:53:b0:be:12:fc:6f:80:d7:70:ba:c4:3d:3c:e6:af:b0:
08:8f:61:f8:b3:76:59:e5:64:33:44:42:d5:29:a6:35:2b:03:
95:8b:2d:fa:6e:b8:91:8c:0e:8a:aa:89:bf:5c:4b:61:ed:c8:
8c:c5:77:cf:fc:c9:91:8b:9d:99:68:07:57:1f:ea:70:45:4d:
cc:95:e8:90:82:54:35:47:ed:58:c8:3c:80:c9:1e:ef:fb:41:
26:2d:49:12:66:4c:3e:60:c6:1c:98:c4:f7:20:7e:15:bc:47:
e8:fa:63:d0:09:4e:35:e9:cf:27:12:f3:00:2a:be:30:1f:60:
f5:cc:85:02:8b:c8:84:32:41:c2:71:cc:a5:61:8a:95:67:d0:
02:1a:38:8a:8d:b9:8b:ed:a1:9f:a7:30:8b:60:93:6b:0c:14:
e3:fd:2c:2e:6c:60:1d:ae:08:80:d8:79:73:c8:49:b1:b5:0b:
83:35:ab:ed:3c:d0:e7:4b:26:04:9d:6d:08:fb:54:aa:60:27:
d9:78:0c:d4:eb:52:06:b3:40:ae:17:75:45:c2:88:f8:d6:1d:
1a:e3:fb:ed:20:4a:2a:4c:a9:52:19:4e:13:da:e0:6d:67:1d:
a3:05:69:72:25:e2:02:ff:c0:cf:91:1b:e4:59:a1:40:11:83:
2d:76:e0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:47 2025 by rpki-client