Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
File: K5X2grxtV338PBDs7icYOB_uOyM.mft (raw, json)
Hash identifier: 8/Zzcf3PvepjewdfHJTuAeo7PtLjMZbeMyskFRj4E+w=
Subject key identifier: 5B:31:31:DC:83:5B:77:78:28:1B:4D:76:4B:93:D7:85:41:15:9F:7B
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial: 0197B6A0E131F90ED0D8AF24132459725685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:26 +0000
Manifest this update: Sat 28 Jun 2025 13:01:26 +0000
Manifest next update: Sun 29 Jun 2025 13:01:26 +0000
Files and hashes: 1: IRjrM71OJM5QObnZgNNrFRUyuDg.roa (hash: KDXjEC5+jgnVgR7YLpm66IF8Y8cfv8DKQxOxQp+OnTk=)
2: K5X2grxtV338PBDs7icYOB_uOyM.crl (hash: 9X5Xztq+V3+0pdZ0yVesyWZZOk563TsaJj+FQJZdjik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e1:31:f9:0e:d0:d8:af:24:13:24:59:72:56:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Validity
Not Before: Jun 28 13:01:26 2025 GMT
Not After : Jun 29 13:01:26 2025 GMT
Subject: CN=5b3131dc835b7778281b4d764b93d78541159f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fc:e0:07:8b:70:41:63:23:14:35:e5:7f:5c:
fb:54:c2:d1:7f:4e:e2:25:e5:27:c8:c1:02:80:be:
33:18:60:bf:7b:60:30:55:90:3c:5c:de:75:6e:0a:
ff:86:15:02:59:d8:1c:ee:a1:bb:db:19:97:06:d3:
61:1d:9d:25:e5:2f:c8:48:4e:16:ef:18:14:d7:66:
09:2b:c0:97:46:68:5f:da:91:f9:db:7c:98:66:2b:
ec:eb:5c:16:83:64:97:87:1a:58:5c:85:36:dc:9b:
e1:ee:02:57:91:24:e1:2c:82:55:a5:93:75:82:93:
ae:e8:d1:46:72:13:59:c1:ef:9b:28:4d:c4:e0:dd:
47:27:dd:9d:2d:87:11:25:2e:90:fe:b6:5a:0c:86:
03:de:a3:45:5e:a3:2c:5b:de:0d:b8:a8:5f:7e:60:
50:05:2b:eb:7a:78:b1:2e:b4:f1:4a:05:fa:8c:e6:
7c:f7:51:b4:92:26:79:86:37:77:c3:fb:4b:1e:13:
77:2f:68:43:f3:c3:dc:3b:f2:bf:e8:13:c8:e7:e8:
55:2b:03:b5:51:fe:f4:ba:46:33:eb:c2:8e:c1:ff:
ef:6e:99:1b:86:ee:eb:04:4b:6c:46:30:f5:fa:d5:
7a:d0:d9:0d:86:96:52:1c:6e:7e:e8:99:af:d6:c0:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:31:31:DC:83:5B:77:78:28:1B:4D:76:4B:93:D7:85:41:15:9F:7B
X509v3 Authority Key Identifier:
keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b6:50:50:90:77:f4:01:ff:f6:37:3e:76:fc:c5:36:c5:52:
d0:4a:5a:15:f9:e5:1a:10:a1:a9:b2:e3:93:a8:48:30:ca:d4:
1f:d6:bf:c4:14:d4:b1:d6:90:1b:2a:82:64:95:19:c5:36:ac:
87:73:e2:c5:4e:0c:e2:e8:aa:20:ce:45:55:0e:8a:6e:81:cd:
df:82:c7:31:82:dc:0c:8f:e8:bd:1c:15:6f:df:ae:13:f4:60:
88:ad:90:06:2a:5d:87:73:ac:83:fe:0e:2c:b8:7a:02:81:60:
5c:6d:64:2d:ea:c9:33:e4:e0:1d:4b:ef:c1:36:fc:b7:32:ed:
62:22:22:91:d4:38:ea:b2:8b:57:f6:43:b6:3b:56:96:9c:29:
c0:8a:95:e5:bc:8e:74:f4:b1:28:6f:5e:e7:81:82:27:d9:47:
3e:72:26:89:ac:e6:42:a4:26:a9:d6:6a:21:2b:92:7d:ee:a4:
66:ac:9a:dd:b1:f4:21:bf:71:d7:b8:cb:3a:18:8a:b3:6a:e0:
c0:e1:60:10:2b:1c:b2:9b:3c:5f:17:ce:2c:96:78:4d:96:58:
7e:94:59:4e:ba:4c:25:3f:de:32:52:53:f6:38:38:a0:8b:97:
49:ad:7a:f2:c5:4a:df:86:b3:e4:9a:3b:4c:d0:6e:c2:98:53:
2b:f3:a2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:29 2025 by rpki-client