Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
File: K5rePBkSeLKqitdnQu673v5yheY.mft (raw, json)
Hash identifier: vME7bXk2CF5rNe8aWKWFdiTXVArr9ApA1W2DOrn/c2w=
Subject key identifier: 86:10:12:19:FB:DE:60:D2:D2:F3:D8:E2:40:21:3A:5C:E9:1D:50:63
Authority key identifier: 2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
Certificate issuer: /CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Certificate serial: 01974855964AF73F50E9DB334EBB32B0F227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 03:00:57 +0000
Manifest this update: Sat 07 Jun 2025 03:00:57 +0000
Manifest next update: Sun 08 Jun 2025 03:00:57 +0000
Files and hashes: 1: K5rePBkSeLKqitdnQu673v5yheY.crl (hash: u8P4KAaydph6wAhA6MMzmt1CAPXYw5SsskIyLA1Ql8k=)
2: qG28szwgzKPw-jxxXZAb6g2XGqU.roa (hash: izxZJRDh1PNPhAdwizTZ+zNrbkp/H2QNfLC0QfnH8sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:96:4a:f7:3f:50:e9:db:33:4e:bb:32:b0:f2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Validity
Not Before: Jun 7 03:00:57 2025 GMT
Not After : Jun 8 03:00:57 2025 GMT
Subject: CN=86101219fbde60d2d2f3d8e240213a5ce91d5063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:d9:ed:df:ad:b6:76:5e:c5:ab:d1:01:0e:
b4:00:77:60:84:29:49:48:e0:6c:4c:40:0a:d6:82:
c1:bb:80:7c:cb:2f:aa:70:33:e8:c9:f5:6f:0f:dc:
63:c3:de:91:21:5f:5f:f5:0c:fc:be:31:70:42:1f:
ae:0c:1e:c0:0f:b0:59:0b:6b:2a:b3:71:83:88:ab:
59:ea:2a:d5:e2:87:ac:24:cd:91:6b:bc:9f:59:8c:
c4:cb:df:cf:c4:de:e2:9b:b3:49:cd:e0:cc:88:a1:
51:95:a9:4e:5b:62:b1:0a:57:2c:d2:4f:8d:f7:33:
d6:7a:b9:8f:ac:3e:4b:bf:3f:0f:1d:90:35:b1:5e:
36:0f:ad:88:f2:74:26:34:a8:c9:35:6c:0d:fd:57:
b1:4b:ff:b7:a4:0b:54:19:6b:2c:00:df:53:24:2c:
a4:cb:9b:28:60:23:8a:97:df:2d:87:9b:f7:94:eb:
97:fd:fb:20:fd:7c:a3:67:71:d3:20:84:21:bd:8c:
c1:68:ff:ba:10:7e:d1:9c:d0:20:4d:c3:c4:37:55:
d5:bd:31:f7:00:32:21:23:a6:c9:f8:05:2c:c0:b4:
2e:82:8d:2d:53:f3:13:b6:3b:21:13:57:c2:d3:85:
68:c9:06:1b:81:56:6e:0f:fc:f8:f5:a0:bb:f4:1b:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:10:12:19:FB:DE:60:D2:D2:F3:D8:E2:40:21:3A:5C:E9:1D:50:63
X509v3 Authority Key Identifier:
keyid:2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c8:ad:77:14:cf:a9:8f:41:6f:e5:ba:92:3b:fc:69:fa:b2:
50:89:66:35:82:a1:38:ac:40:b0:58:2f:a8:3c:db:12:40:d2:
41:0e:51:75:1e:c9:54:ac:2b:d1:17:46:d1:10:85:78:82:17:
35:ad:06:d1:2a:00:7b:5f:e9:93:64:09:83:11:74:f6:ee:d4:
af:3e:48:5f:17:6b:34:a3:40:88:47:09:bc:f3:27:d1:33:27:
ad:e5:2c:25:fc:02:75:5a:f0:fa:80:b2:fa:b6:c7:be:2b:80:
49:71:1c:f7:20:ac:b7:f1:4b:e3:7f:e8:49:0d:f2:51:67:5f:
83:fe:e6:35:1c:5e:e4:39:9a:17:98:07:e9:75:f4:00:ad:80:
2e:c1:6a:ad:89:af:32:d2:2c:c6:e2:37:8c:47:9d:13:ad:92:
8e:f7:20:d2:8a:12:8e:83:67:4c:16:de:b5:e4:94:55:f2:9d:
7b:8e:83:e9:92:6d:9c:4c:bc:ec:18:b0:36:8c:81:e7:5c:80:
73:6e:94:f6:d9:b8:11:83:76:72:ec:5c:e3:0b:47:66:4f:1b:
dc:b4:5d:b0:c4:03:7a:b6:35:91:14:99:ed:e2:b5:c0:f9:4a:
37:fe:80:f7:19:46:7e:4e:a2:5b:89:dd:80:b2:2e:2f:79:92:
e7:19:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:43:53 2025 by rpki-client