Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
File: K5rePBkSeLKqitdnQu673v5yheY.mft (raw, json)
Hash identifier: sCgvuqY21X31d6/tJbALbOf2GaXUXwq9dDrYQkjgndc=
Subject key identifier: 6F:60:7B:26:C8:54:2E:BF:61:0E:70:64:BD:2B:64:4A:7D:02:45:04
Authority key identifier: 2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
Certificate issuer: /CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Certificate serial: 0199239F5E7011450F963C8B7B7549498CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:01:10 +0000
Manifest this update: Sun 07 Sep 2025 10:01:10 +0000
Manifest next update: Mon 08 Sep 2025 10:01:10 +0000
Files and hashes: 1: K5rePBkSeLKqitdnQu673v5yheY.crl (hash: aXUeRVc4QEr73OzG50/RuTN1aFC82hrUm6soF/kHDks=)
2: qG28szwgzKPw-jxxXZAb6g2XGqU.roa (hash: izxZJRDh1PNPhAdwizTZ+zNrbkp/H2QNfLC0QfnH8sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:5e:70:11:45:0f:96:3c:8b:7b:75:49:49:8c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Validity
Not Before: Sep 7 10:01:10 2025 GMT
Not After : Sep 8 10:01:10 2025 GMT
Subject: CN=6f607b26c8542ebf610e7064bd2b644a7d024504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:51:f8:ef:45:90:2f:8b:52:f7:49:b4:6b:ff:
f9:63:37:62:2e:29:74:62:88:a1:da:b9:0f:f4:73:
42:cb:36:0b:59:2f:65:96:00:4a:d9:cf:2f:fa:c0:
1f:80:92:55:f1:bb:68:f5:8c:fb:4e:19:42:44:c9:
fa:d0:81:af:87:0a:9b:8f:47:91:01:e1:5f:0e:99:
9c:33:3b:82:d8:c9:a1:55:cf:5f:a5:b4:b5:e6:2e:
c3:72:7f:90:4f:67:44:25:88:7e:ac:71:ab:66:1f:
19:5d:ee:6d:43:fd:c3:23:3d:cb:12:27:08:a1:0e:
bb:50:b0:0d:d0:46:9d:fd:f5:53:31:c7:6d:d9:ad:
37:02:19:df:a9:15:8c:c5:e9:fc:40:85:eb:02:6f:
89:e4:3d:79:66:22:eb:74:f5:7a:30:bf:20:cf:ec:
0e:a2:50:f9:e2:41:31:f0:6d:15:fc:f1:cf:b0:8e:
06:1c:8a:14:12:81:13:22:82:ba:8e:57:2e:42:e4:
b9:10:66:52:50:89:70:a7:de:9c:b5:16:4d:e3:39:
68:d2:ae:0f:be:ac:3e:39:42:33:f1:18:29:2b:b4:
56:3e:67:7a:72:be:82:1d:2d:09:61:60:91:cf:52:
91:92:f2:58:16:d9:ef:91:97:29:09:7c:36:ce:82:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:60:7B:26:C8:54:2E:BF:61:0E:70:64:BD:2B:64:4A:7D:02:45:04
X509v3 Authority Key Identifier:
keyid:2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8d:02:54:96:48:6b:f2:f1:b1:ee:7c:4a:ca:f3:db:3f:1e:
fd:3b:fa:df:05:71:72:27:29:cb:6e:94:bb:50:02:a6:65:21:
97:43:b9:af:cd:4d:4e:49:e8:b1:2f:cb:93:54:12:f2:12:ec:
c5:78:e3:56:7c:8d:52:1e:b6:e0:ee:b1:5d:1f:7b:38:55:37:
b4:f1:d5:bf:a3:79:24:d1:ea:e2:8b:77:0a:03:d3:3a:88:54:
9e:84:64:5b:4b:1d:a3:a9:d3:b7:44:07:21:bf:80:8e:e3:dc:
f8:5e:c6:bf:84:fc:65:26:4e:b6:10:f3:19:e4:8d:fd:16:ad:
55:b3:b5:75:9d:bd:27:a7:a0:a1:eb:68:fc:4f:85:25:b1:b0:
a5:bc:40:79:40:6f:86:12:fe:34:3c:ca:94:18:f4:b2:db:0c:
b0:46:9f:02:b3:16:b7:d7:19:5c:5e:a0:5b:91:a6:20:90:21:
30:86:20:00:1a:89:b6:ac:18:e2:c0:c3:a2:24:31:65:4c:df:
8a:0a:a6:ed:59:e3:39:4a:3a:d6:c6:b2:b5:93:44:40:b5:74:
c2:79:24:cd:79:0c:45:78:4c:a2:9b:cc:99:8a:80:fd:ed:9b:
e6:b2:43:c6:05:dc:64:62:14:4b:a6:28:ab:32:22:e8:1d:39:
f1:7e:ec:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn15wEUUPljyLe3VJSYyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOWFkZTNjMTkxMjc4YjJhYThhZDc2NzQyZWViYmRlZmU3
Mjg1ZTYwHhcNMjUwOTA3MTAwMTEwWhcNMjUwOTA4MTAwMTEwWjAzMTEwLwYDVQQD
Eyg2ZjYwN2IyNmM4NTQyZWJmNjEwZTcwNjRiZDJiNjQ0YTdkMDI0NTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglH470WQL4tS90m0a//5YzdiLil0
Yoih2rkP9HNCyzYLWS9llgBK2c8v+sAfgJJV8bto9Yz7ThlCRMn60IGvhwqbj0eR
AeFfDpmcMzuC2MmhVc9fpbS15i7Dcn+QT2dEJYh+rHGrZh8ZXe5tQ/3DIz3LEicI
oQ67ULAN0Ead/fVTMcdt2a03AhnfqRWMxen8QIXrAm+J5D15ZiLrdPV6ML8gz+wO
olD54kEx8G0V/PHPsI4GHIoUEoETIoK6jlcuQuS5EGZSUIlwp96ctRZN4zlo0q4P
vqw+OUIz8RgpK7RWPmd6cr6CHS0JYWCRz1KRkvJYFtnvkZcpCXw2zoLKeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9geybIVC6/YQ5wZL0rZEp9AkUEMB8GA1UdIwQY
MBaAFCua3jwZEniyqorXZ0Luu97+coXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVyZVBCa1NlTEtxaXRkblF1NjczdjV5aGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wZTQyZTgtNzQ2Yy00YTNhLThkNjMt
Y2MwNTNmNmExZWU2LzEvSzVyZVBCa1NlTEtxaXRkblF1NjczdjV5aGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8wZTQyZTgtNzQ2Yy00YTNhLThkNjMtY2MwNTNmNmExZWU2
LzEvSzVyZVBCa1NlTEtxaXRkblF1NjczdjV5aGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUI0CVJZI
a/Lxse58Ssrz2z8e/Tv63wVxcicpy26Uu1ACpmUhl0O5r81NTknosS/Lk1QS8hLs
xXjjVnyNUh624O6xXR97OFU3tPHVv6N5JNHq4ot3CgPTOohUnoRkW0sdo6nTt0QH
Ib+AjuPc+F7Gv4T8ZSZOthDzGeSN/RatVbO1dZ29J6egoeto/E+FJbGwpbxAeUBv
hhL+NDzKlBj0stsMsEafArMWt9cZXF6gW5GmIJAhMIYgABqJtqwY4sDDoiQxZUzf
igqm7VnjOUo61saytZNEQLV0wnkkzXkMRXhMopvMmYqA/e2b5rJDxgXcZGIUS6Yo
qzIi6B058X7stA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:56 2025 by rpki-client