Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: 6kWCxIi7XQXkyjAr5xafp0XgUpOI+EPBumthaU1fPCY=
Subject key identifier: 5D:CF:BC:82:5B:2E:08:90:54:DD:15:37:80:21:AD:14:AF:1B:2B:2B
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 01984A412C90A4AB27251275B9D0F7FF5F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 0D50
Signing time: Sun 27 Jul 2025 05:00:41 +0000
Manifest this update: Sun 27 Jul 2025 05:00:41 +0000
Manifest next update: Mon 28 Jul 2025 05:00:41 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: qAlasBKvIe7V9SU1nX32qnI6IVE2Rss+uRUrtBWg8AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:2c:90:a4:ab:27:25:12:75:b9:d0:f7:ff:5f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Jul 27 05:00:41 2025 GMT
Not After : Jul 28 05:00:41 2025 GMT
Subject: CN=5dcfbc825b2e089054dd15378021ad14af1b2b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:2c:6c:c8:e4:0e:9a:be:14:19:92:04:7c:
1a:04:b4:4c:e3:7f:e5:35:0a:67:38:2d:59:16:dc:
ae:a9:62:8c:13:56:1c:56:14:46:62:e9:a4:19:f7:
37:25:f2:ac:3c:34:a2:62:93:bc:f5:4f:62:40:ab:
dd:83:6c:b4:36:a3:cd:0f:f3:1f:eb:ab:14:59:10:
b9:92:ab:23:c1:e1:a6:b5:9f:b7:af:41:2e:45:5d:
1b:c4:29:4f:e8:82:91:92:ad:4f:d5:ae:f1:56:b9:
49:8d:dc:8a:e4:22:d7:1c:e9:b4:6e:2f:5c:67:b6:
76:2a:60:45:fd:f7:86:8b:fc:cb:e4:b9:6a:c5:be:
56:14:09:0c:b4:10:91:7a:e6:c8:10:00:fd:59:87:
7d:e1:f6:8c:d4:3b:3c:49:cb:53:1a:ea:48:7c:a7:
6a:1b:bb:a6:82:9b:e8:24:f4:e1:d4:46:64:3f:4d:
4c:8a:34:64:7f:25:79:55:a2:98:0e:7f:3f:dd:37:
79:f9:dc:2a:c7:23:66:5c:a7:3c:14:b5:9c:6e:21:
3e:96:35:43:7f:38:97:6e:0d:3d:f5:85:57:50:87:
34:d7:ef:26:11:de:ac:86:fa:1b:fe:7b:48:25:fb:
65:2c:07:10:01:8f:6c:7c:11:9f:18:b3:f2:73:97:
1c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CF:BC:82:5B:2E:08:90:54:DD:15:37:80:21:AD:14:AF:1B:2B:2B
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c3:6c:75:f5:d4:e8:f1:37:e9:f5:1e:4a:6d:2a:46:8e:8c:
f5:56:11:0c:13:de:e5:55:f5:e1:64:05:cd:77:c9:be:49:4c:
5b:1e:ce:a3:6a:ee:43:21:b1:b5:3b:a8:61:5b:ef:a7:98:82:
de:49:e6:a7:bd:4f:28:92:20:17:bf:57:58:6e:4b:36:34:80:
9b:8d:9f:1f:5a:4b:af:ce:fb:9c:81:2c:da:fd:af:37:31:b1:
bf:a5:45:aa:c5:75:6f:a7:51:41:dd:53:b6:4c:c7:6d:c8:03:
89:e9:cb:6c:39:13:90:02:eb:1e:90:b6:0e:43:24:40:7a:e9:
e9:ab:49:a4:df:8f:a4:aa:94:25:14:c7:04:84:41:aa:8d:82:
98:dd:19:b5:9c:8b:b7:5a:f5:18:90:b7:5d:94:51:e0:3c:86:
18:6b:f6:cc:30:a4:ef:a3:77:ec:25:c8:01:71:78:f0:05:97:
5c:52:73:e3:67:2e:11:ba:eb:c3:7a:25:cf:3a:4d:fa:5a:80:
42:19:1f:38:30:75:7a:08:c8:c9:a8:16:bb:21:5b:63:2d:ec:
26:a6:01:1f:85:bc:05:99:af:6d:75:f2:28:6d:1a:b0:24:4e:
32:59:23:03:65:0e:12:e1:4c:5d:2a:7e:23:65:0a:c4:49:72:
78:af:99:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:53:29 2025 by rpki-client