Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
File: K5rePBkSeLKqitdnQu673v5yheY.mft (raw, json)
Hash identifier: /bX8S8zgiD7akCIUN6pbnARW+BkfgOaofjMopKz9ZGE=
Subject key identifier: 06:E8:85:FB:C2:DD:B2:15:03:B5:D6:30:C1:4F:73:79:B7:5D:18:B4
Authority key identifier: 2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
Certificate issuer: /CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Certificate serial: 0197B6A069F7E66F37106FAB7CB6041A004F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:00:55 +0000
Manifest this update: Sat 28 Jun 2025 13:00:55 +0000
Manifest next update: Sun 29 Jun 2025 13:00:55 +0000
Files and hashes: 1: K5rePBkSeLKqitdnQu673v5yheY.crl (hash: 2Tg5JZ7C52YmJe5FLiuP2dJs7Flgc+hmJ4d6zlurPrU=)
2: qG28szwgzKPw-jxxXZAb6g2XGqU.roa (hash: izxZJRDh1PNPhAdwizTZ+zNrbkp/H2QNfLC0QfnH8sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:69:f7:e6:6f:37:10:6f:ab:7c:b6:04:1a:00:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Validity
Not Before: Jun 28 13:00:55 2025 GMT
Not After : Jun 29 13:00:55 2025 GMT
Subject: CN=06e885fbc2ddb21503b5d630c14f7379b75d18b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:2f:3a:7c:a4:7f:4e:41:21:2a:e2:ba:3c:
5a:6c:1e:45:a7:ec:d1:39:8a:97:8a:69:fe:e8:d6:
1b:6e:a9:80:16:52:51:f1:34:e8:be:63:13:25:14:
d1:a9:fa:e8:09:58:25:79:77:c7:9d:46:62:2b:d4:
1c:be:8c:be:8c:97:d6:87:62:2d:64:60:0d:f2:9b:
5c:1d:e7:3d:39:b2:55:47:fe:21:fd:2d:7a:7b:82:
ac:99:42:b0:ba:49:90:74:ef:af:b3:8b:13:e0:9e:
10:09:e7:be:8f:09:e6:ad:34:30:f4:68:6a:d1:1f:
70:79:04:b7:cd:92:f8:c9:ce:ce:3f:87:d1:eb:9e:
30:5c:2e:e6:72:b8:c6:67:01:b7:c2:97:bf:f2:05:
6b:03:26:8a:e1:46:f3:5f:96:82:43:b8:34:68:dc:
87:a1:c7:ed:62:78:9f:a5:d6:f1:a1:ff:9f:be:1f:
0c:86:76:89:54:cb:1e:6f:4e:28:e7:c8:f9:91:a7:
ea:9a:72:ea:3d:c5:45:e6:fd:3c:28:4b:09:dd:87:
e5:41:bc:54:46:a7:07:61:6c:e8:ac:b5:bf:f0:2b:
2b:fa:99:5b:50:27:a7:5b:76:de:54:3f:2b:eb:c9:
2b:9d:bc:5d:3d:9f:2e:ca:c0:fb:18:75:23:5a:75:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E8:85:FB:C2:DD:B2:15:03:B5:D6:30:C1:4F:73:79:B7:5D:18:B4
X509v3 Authority Key Identifier:
keyid:2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b0:28:e2:6d:45:38:6f:d8:db:c2:3a:b4:5d:a9:7c:5d:ba:
d9:38:84:81:ff:8c:21:eb:f8:63:14:1a:00:a0:45:4b:56:ec:
56:65:a4:59:e4:d1:c0:d8:f1:21:e0:73:61:5a:55:a8:24:94:
c9:79:cf:73:12:fe:da:65:be:ee:36:44:51:79:9c:45:d9:b6:
20:0b:bd:60:04:c8:02:32:d2:fd:e5:2f:89:f0:8c:6b:52:27:
47:09:77:d0:0e:ca:db:fb:4c:1e:d4:7f:e3:25:84:79:df:50:
63:4e:ce:14:6b:15:df:53:67:73:56:3b:65:62:62:7e:4d:a0:
46:03:2f:38:d9:64:83:d2:c2:67:c6:15:04:77:f4:08:20:95:
2c:99:43:08:69:6f:9b:0a:ea:cb:22:70:d6:d8:ee:46:52:08:
3e:a5:62:68:a6:90:55:96:76:d7:3d:73:ab:10:e6:a1:b2:07:
f7:07:ad:49:7f:c7:7a:07:a8:59:dc:a2:c8:df:4a:5d:73:c6:
a0:37:a0:27:7d:1f:e4:8f:58:7a:d1:4a:81:ed:5a:53:08:02:
d8:a3:a2:c0:18:71:fe:79:f4:24:dc:bd:41:67:e4:16:52:f2:
ad:62:78:bc:d1:2c:45:86:8f:30:04:75:5b:f7:b2:da:aa:92:
49:dc:f8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:36 2025 by rpki-client