Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: j/tJfymsaoRgS1jRm9ynb9lWpJ22xmgpzcWFydVtxr0=
Subject key identifier: 77:30:48:BF:55:6D:BD:C9:E1:AA:92:25:1C:DE:6E:28:64:61:28:5F
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 019845882D3F01E784273F0F7B1DF21A1C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 07:00:09 +0000
Manifest this update: Sat 26 Jul 2025 07:00:09 +0000
Manifest next update: Sun 27 Jul 2025 07:00:09 +0000
Files and hashes: 1: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: pPvRH5NGL/XthtRtZ6mRJn+FM0Bv8AzclMduXQfDcUg=)
2: LM4PEm0ffK75EUFTgpXPbuoAKZ8.roa (hash: d7gyd2tIHJ6HJ/7vl5EHNlkX+eVBttxlbWWHGFZ3xxQ=)
3: _w36PBooYvePauBkPOTldD_qNZc.roa (hash: hpJoX8luKbQz9GDhdRpg1rk5Zn+lxQz5UWYQbVjTs1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:2d:3f:01:e7:84:27:3f:0f:7b:1d:f2:1a:1c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Jul 26 07:00:09 2025 GMT
Not After : Jul 27 07:00:09 2025 GMT
Subject: CN=773048bf556dbdc9e1aa92251cde6e286461285f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a4:f8:5d:e6:43:6e:03:34:07:b4:1a:92:4b:
13:34:3e:70:e9:d3:ee:03:a2:19:f6:57:2c:f3:6b:
3f:45:f5:c4:ca:0d:81:d6:33:76:20:52:17:d8:fd:
e0:e9:4a:8a:80:95:22:d6:62:4b:2b:ae:40:69:e9:
e4:9a:5c:6d:7e:c1:54:17:6d:b9:7d:ad:a8:35:d4:
f8:e0:bb:4a:8b:1d:54:54:6c:34:37:de:5a:ee:36:
f1:d5:39:10:94:12:7f:a0:8c:92:d2:f0:73:75:80:
5e:ea:33:4c:f7:ad:b3:fe:9a:eb:79:78:06:f6:2f:
9f:8c:6f:23:25:23:56:0e:8f:5e:0d:e3:33:cb:5a:
87:5d:7c:88:f4:4c:25:72:78:29:97:a3:12:f1:9a:
13:87:93:2e:67:b4:3c:30:7e:49:89:92:c5:82:c7:
8b:e4:74:fe:c4:43:c7:e5:0c:97:d7:21:be:d3:89:
6b:34:3d:1f:4b:6e:11:a6:2e:34:53:a2:80:af:3b:
4c:cb:e9:7e:1d:57:ff:72:f7:fa:27:c7:e9:5d:6f:
79:84:6c:ba:8b:66:57:56:62:13:1d:5a:1b:f5:08:
a0:68:36:89:54:4e:aa:ab:3f:d8:69:86:83:0a:d6:
0c:74:8d:8a:82:bb:43:70:69:1f:07:98:82:dd:a0:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:30:48:BF:55:6D:BD:C9:E1:AA:92:25:1C:DE:6E:28:64:61:28:5F
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3f:de:85:d0:e9:e0:ad:11:04:45:5b:61:65:24:61:9a:9a:
9a:30:43:b1:be:d4:30:58:f5:18:a2:ee:00:8c:12:3b:6e:55:
8c:1c:f7:71:04:67:3e:4b:97:4e:e6:7a:63:10:cf:1e:cc:c3:
ca:fe:1d:7b:9e:1a:80:94:89:7a:4a:68:ac:02:dc:3f:14:05:
4b:dc:bc:8d:bb:7a:e2:5c:b9:e4:61:1f:65:dc:4e:85:1c:6e:
87:a7:1c:bf:9a:de:ab:a1:a2:8c:7b:51:e1:19:18:4a:24:39:
db:cd:5a:3f:cd:9c:a8:06:5b:bf:cb:13:07:57:6e:b5:98:e0:
5e:af:92:b6:ad:de:34:5f:20:2f:e5:b1:90:d5:5f:50:33:e2:
f9:3b:6a:4b:97:12:03:ad:db:0a:f1:37:00:f0:20:fc:8e:85:
22:a0:6a:2c:b7:34:94:77:5a:8e:2a:ae:24:99:a6:76:e3:a6:
a9:35:52:ff:a4:9f:06:eb:43:5b:d7:f5:5a:d3:f9:82:33:b4:
54:60:49:37:5c:d0:f7:bd:31:75:70:0a:2c:0d:54:82:7f:f2:
c2:89:9d:e3:9b:4b:0d:b1:1f:49:16:6d:8d:70:80:37:54:10:
27:77:d4:be:98:b8:f2:fd:ec:4f:a5:cf:a7:7e:cf:f8:e9:52:
36:af:22:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiC0/AeeEJz8Pex3yGhw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTc2Mjc1NTQ3Yjc1ZGYyYjA0YzRmOWIyOTFjMDcxMGM1
MDc3NDAwHhcNMjUwNzI2MDcwMDA5WhcNMjUwNzI3MDcwMDA5WjAzMTEwLwYDVQQD
Eyg3NzMwNDhiZjU1NmRiZGM5ZTFhYTkyMjUxY2RlNmUyODY0NjEyODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KT4XeZDbgM0B7QakksTND5w6dPu
A6IZ9lcs82s/RfXEyg2B1jN2IFIX2P3g6UqKgJUi1mJLK65AaenkmlxtfsFUF225
fa2oNdT44LtKix1UVGw0N95a7jbx1TkQlBJ/oIyS0vBzdYBe6jNM962z/prreXgG
9i+fjG8jJSNWDo9eDeMzy1qHXXyI9Ewlcngpl6MS8ZoTh5MuZ7Q8MH5JiZLFgseL
5HT+xEPH5QyX1yG+04lrND0fS24Rpi40U6KArztMy+l+HVf/cvf6J8fpXW95hGy6
i2ZXVmITHVob9QigaDaJVE6qqz/YaYaDCtYMdI2KgrtDcGkfB5iC3aAspQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcwSL9Vbb3J4aqSJRzebihkYShfMB8GA1UdIwQY
MBaAFCuXYnVUe3XfKwTE+bKRwHEMUHdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgt
ZDViMGY5MWQ5N2MyLzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgtZDViMGY5MWQ5N2My
LzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEART/ehdDp
4K0RBEVbYWUkYZqamjBDsb7UMFj1GKLuAIwSO25VjBz3cQRnPkuXTuZ6YxDPHszD
yv4de54agJSJekporALcPxQFS9y8jbt64ly55GEfZdxOhRxuh6ccv5req6GijHtR
4RkYSiQ5281aP82cqAZbv8sTB1dutZjgXq+Stq3eNF8gL+WxkNVfUDPi+TtqS5cS
A63bCvE3APAg/I6FIqBqLLc0lHdajiquJJmmduOmqTVS/6SfButDW9f1WtP5gjO0
VGBJN1zQ970xdXAKLA1Ugn/ywomd45tLDbEfSRZtjXCAN1QQJ3fUvpi48v3sT6XP
p37P+OlSNq8iCQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:51 2025 by rpki-client