Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
File: K5X2grxtV338PBDs7icYOB_uOyM.mft (raw, json)
Hash identifier: i/QNJLwtd42mOaHPsc2BNpqFc5rd8mKROdKudCE2TfI=
Subject key identifier: 94:AB:D1:A8:CC:55:24:9A:5B:32:B0:BD:A0:A8:40:C8:FA:EE:F2:EF
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial: 019A71B8205F44DF0AA160395609DCA1653E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: IRjrM71OJM5QObnZgNNrFRUyuDg.roa (hash: KDXjEC5+jgnVgR7YLpm66IF8Y8cfv8DKQxOxQp+OnTk=)
2: K5X2grxtV338PBDs7icYOB_uOyM.crl (hash: t4lN4TO4wAazbti7+Hx/KyHhYsfWYQlf5UkwDIZ5rGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:20:5f:44:df:0a:a1:60:39:56:09:dc:a1:65:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=94abd1a8cc55249a5b32b0bda0a840c8faeef2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:3c:e5:8a:16:58:be:55:c8:41:a1:56:21:
9e:2a:08:dc:d3:b0:16:20:51:91:06:6e:63:30:fc:
fd:b0:68:74:dd:81:bf:12:df:7f:3f:8f:d4:15:b4:
31:0a:91:56:3f:7f:09:30:18:12:2e:13:11:20:b6:
a4:c0:78:07:dd:32:76:ac:d4:2e:75:fa:ad:d3:a9:
d7:c1:00:22:ce:cd:53:32:bc:1c:ae:ec:db:50:68:
de:2a:02:5e:91:c9:8d:ec:5c:ca:b6:c5:84:26:8f:
f6:f6:1a:f1:d1:64:ef:6f:11:7d:ca:d3:f7:9e:53:
4c:51:2f:9c:4e:87:31:f9:eb:00:5c:e1:46:32:11:
1d:03:96:dc:20:3d:2e:43:f3:69:78:90:9a:3c:29:
59:9e:61:e9:84:61:ca:b2:b9:ed:4c:cd:8f:04:17:
15:d7:f9:4c:6b:9b:96:25:e0:06:47:c7:0c:e3:a2:
3d:70:17:87:00:d0:66:65:37:c9:e6:ca:75:f4:9c:
5e:b6:38:7a:52:e1:25:22:c3:72:9d:cc:aa:e4:76:
9e:f4:d6:1b:17:fc:12:97:94:9d:04:9e:bb:3e:70:
cf:e4:2b:30:ec:56:6b:4d:5c:ca:2a:cc:56:fc:f1:
bd:5d:d4:04:a6:d8:67:0f:fb:af:5d:cb:75:9c:fe:
c6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AB:D1:A8:CC:55:24:9A:5B:32:B0:BD:A0:A8:40:C8:FA:EE:F2:EF
X509v3 Authority Key Identifier:
keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d3:b7:a1:22:47:ae:53:90:ad:27:0d:3f:0d:b1:00:52:32:
0d:db:e2:b2:ef:78:e4:26:42:6f:85:58:eb:1f:bb:1a:d9:c5:
17:cc:e4:bd:5c:04:2a:2c:ec:26:c2:a3:ff:c7:3e:90:f4:9b:
ed:df:4d:dd:98:6e:0f:af:ec:9d:c6:89:77:f4:04:b2:a6:cf:
db:2d:c9:12:5b:86:c9:04:3c:f1:e5:c8:02:f0:6f:76:3a:eb:
30:45:39:67:44:b3:e1:cc:af:3e:bf:b6:b9:4d:c7:45:fc:a8:
b5:50:57:1c:5c:c4:57:8d:72:39:27:cf:af:84:c6:9f:1e:31:
0d:bb:e8:d2:6a:d7:fa:48:53:25:eb:8d:91:ed:33:b9:a4:ef:
9d:76:cb:30:fe:61:4e:51:83:f8:49:58:55:a4:74:c9:12:aa:
c5:4f:04:28:97:0a:54:bf:7f:07:43:78:fd:76:d8:21:51:3d:
01:7e:a6:98:24:0c:23:ed:0b:17:6c:7a:50:c6:cf:01:9b:b7:
05:4f:fd:3a:27:1e:c5:9f:39:a9:43:1f:d0:60:f1:70:3a:c0:
51:77:09:2c:51:23:c3:2a:63:af:b9:d3:2f:d5:ce:dc:f8:e6:
0a:77:67:3c:ee:c8:0a:9a:a4:17:62:44:6f:ff:71:24:c6:9a:
1f:56:e4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:51 2025 by rpki-client