Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
File: b5RYfBGZosPfQBl7GfNlDGF94UU.mft (raw, json)
Hash identifier: i0JxOP3wolDN2cXku3EU0VlILLqVlBYtPy6N+/aYlzU=
Subject key identifier: 67:45:21:FD:5F:D3:7B:A8:E5:69:C5:E7:C9:27:F6:78:C5:90:22:3D
Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145
Certificate serial: 01984A09BFD34151C1A23C9211CEC5E8F87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
Manifest number: 0122
Signing time: Sun 27 Jul 2025 04:00:09 +0000
Manifest this update: Sun 27 Jul 2025 04:00:09 +0000
Manifest next update: Mon 28 Jul 2025 04:00:09 +0000
Files and hashes: 1: b5RYfBGZosPfQBl7GfNlDGF94UU.crl (hash: VQK6Namz6mpL/moDh46oLMYD9q/I+2cpCLyrQN0brrU=)
2: ePKBy3s7DCa8LCYPrDuLad8LQds.roa (hash: IOfYTJhGS5ceI6YMnArvR/xLdlNTNiNsJ5hdFLFW72Q=)
3: xTCv3RXSZS1iTavCUS9l9JR_D5E.roa (hash: A3hLBLSXg8J7g4DoDdWC6smLJPKHGcfSEfHqAmRLjjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:bf:d3:41:51:c1:a2:3c:92:11:ce:c5:e8:f8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145
Validity
Not Before: Jul 27 04:00:09 2025 GMT
Not After : Jul 28 04:00:09 2025 GMT
Subject: CN=674521fd5fd37ba8e569c5e7c927f678c590223d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:97:ef:cc:87:84:dc:dd:81:48:79:29:9d:
39:0a:83:53:ee:e7:be:d9:ff:b6:6b:0a:bc:32:3c:
ab:68:b9:d1:ef:5d:bc:85:25:d6:6d:13:ea:6c:1d:
7f:bc:6d:cc:48:e9:36:6b:ca:47:2f:3b:60:45:b6:
14:32:33:f4:41:59:42:87:52:2b:7b:1f:d2:50:24:
1e:b2:19:3d:39:34:dd:79:08:88:0a:f0:9a:0a:37:
9d:1b:1c:b4:b9:99:c6:46:77:c9:78:53:91:8d:36:
62:f1:0d:c1:e7:bb:01:32:ff:1f:48:88:fb:65:29:
32:73:0b:48:63:56:4f:10:00:64:a7:87:67:4b:36:
6f:14:7f:5a:60:c2:21:99:32:a4:3c:3f:12:b9:73:
bc:ae:36:31:2e:1e:a4:2c:cb:95:77:1c:83:6d:b3:
10:bf:ef:44:47:88:b5:b5:84:df:46:95:1e:8d:77:
f7:7b:9f:da:e8:b1:a8:f0:30:cf:92:2f:bc:20:a3:
14:4b:83:03:5a:c2:76:f6:ea:75:0d:41:62:c6:a5:
67:a5:c2:cd:52:3d:c9:f0:d6:2b:40:0b:2d:45:4d:
0b:f8:c5:40:91:2f:d4:64:f0:8c:af:a1:2c:83:6a:
b5:13:bd:af:72:86:53:79:ca:c1:88:cd:c9:f8:0b:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:45:21:FD:5F:D3:7B:A8:E5:69:C5:E7:C9:27:F6:78:C5:90:22:3D
X509v3 Authority Key Identifier:
keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:98:94:74:15:76:94:37:48:f1:b9:88:2a:07:a2:42:6d:b1:
45:4f:10:4f:ee:98:c1:4a:a2:7a:f2:0e:e5:40:7a:24:9a:5e:
ae:da:bf:20:d0:2e:69:b3:51:40:a6:b3:d3:29:16:39:0a:45:
cc:23:4c:e2:14:20:15:65:d5:72:0c:d3:44:a4:f1:77:4b:60:
9e:16:ff:1d:77:2e:85:d9:46:26:69:bc:2e:77:da:42:4d:79:
db:3a:ab:32:ef:0e:f0:f9:81:a2:63:6d:7a:94:c9:18:92:51:
c4:eb:35:e5:95:40:92:73:cc:f3:6b:a4:a2:30:70:c7:fe:bd:
a6:b4:22:6d:86:72:f0:59:6d:7c:ba:b8:95:61:e5:43:85:6f:
07:f9:c2:cc:ea:b5:b1:a9:49:05:cf:9c:e3:8b:b2:07:03:77:
d3:df:26:50:35:21:d6:4a:e1:7a:a9:ee:28:61:7a:a5:57:ef:
3c:d4:8e:9a:99:8c:f3:31:e3:7c:cf:7d:95:4b:c5:67:96:71:
72:0d:91:73:0e:38:21:df:73:be:b4:a5:52:07:19:b5:ef:f4:
d1:d3:ee:cb:36:47:d2:6e:30:c8:d9:22:e3:02:1c:66:63:7f:
c4:20:5a:94:30:1d:63:ad:a1:d5:c2:c2:61:29:8a:ad:8a:41:
9e:7f:38:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:30 2025 by rpki-client