Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: MUhPyjk58yCzlxW2C2U7OPQPlzREhNei1s3fpOV/iLA=
Subject key identifier: F8:D1:FD:83:79:15:44:F5:D3:30:2A:CF:84:D3:4A:82:7C:12:44:F3
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 019921E7AA4027C253CE675E849798119E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 1394
Signing time: Sun 07 Sep 2025 02:00:54 +0000
Manifest this update: Sun 07 Sep 2025 02:00:54 +0000
Manifest next update: Mon 08 Sep 2025 02:00:54 +0000
Files and hashes: 1: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: uex+NP1BJW5MmB27q1ax5SnCnA0PiunGop5LFVBWE6Y=)
2: S3W2ppn5lk20Aj8MVEUOEbDf3k4.roa (hash: R7kQC03lqKwuWWDRl2P6LnNUl2gU+UQxb/V3srvulwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:aa:40:27:c2:53:ce:67:5e:84:97:98:11:9e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Sep 7 02:00:54 2025 GMT
Not After : Sep 8 02:00:54 2025 GMT
Subject: CN=f8d1fd83791544f5d3302acf84d34a827c1244f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:60:9f:52:15:dd:ea:47:ef:01:68:f3:cb:
39:bc:9b:67:04:69:0a:77:7a:2d:aa:96:96:78:d5:
27:a0:c5:a5:49:45:ce:44:4c:31:b3:b4:23:2c:d7:
90:dc:86:2e:ed:52:e4:17:42:9a:73:05:44:58:9f:
63:97:c7:a1:aa:ec:4b:19:91:85:21:e9:9f:b5:5d:
ee:30:52:48:28:24:e3:b8:7b:cf:79:fe:03:dd:5f:
70:ef:a5:9b:9e:d8:5a:7d:b8:4b:8c:94:28:46:5d:
c9:83:6f:6a:3b:6c:99:ef:31:4a:00:e9:34:92:55:
43:d5:f5:c7:98:a3:9d:3f:2d:9a:fd:d2:f3:e9:73:
3f:c3:e5:3a:87:b0:da:38:d8:0e:69:aa:90:23:a5:
73:ab:8b:de:71:a5:4d:80:57:3a:7a:1d:99:75:ae:
9a:de:1a:ea:99:a8:8e:10:48:d7:00:31:aa:9b:3a:
b5:9b:21:57:72:89:b4:2b:cc:e8:f0:77:a0:ce:06:
a5:2c:3d:71:7c:b9:4a:20:13:7f:bb:ed:3d:1c:c1:
e5:94:af:f3:7f:7c:88:e8:d3:37:e2:5b:78:f6:34:
cd:74:73:6b:05:98:35:70:52:28:98:64:52:6c:da:
af:fe:8b:03:c5:cf:a7:b0:ce:d8:45:55:5a:64:99:
3e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D1:FD:83:79:15:44:F5:D3:30:2A:CF:84:D3:4A:82:7C:12:44:F3
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:22:33:4d:56:5f:d3:e9:5d:e2:2f:98:81:f0:85:fa:f5:ca:
12:2a:d2:4e:61:3e:2a:4f:2b:e8:31:28:d3:b8:c7:37:e3:5c:
ba:67:09:60:87:87:15:79:de:d7:85:95:e0:fa:61:81:78:fd:
02:b4:78:82:32:3a:0a:7c:08:ea:6f:80:8f:1e:56:ea:d8:a1:
db:48:71:48:59:17:7e:cd:49:0e:76:76:c9:b5:1b:ca:a4:7e:
01:28:31:f9:4e:f3:15:21:0e:b0:83:40:9b:60:22:6a:b8:c7:
ea:23:a2:23:1b:d4:78:03:da:0a:50:f4:47:29:e3:37:b8:97:
a5:0e:1a:fb:81:9d:2e:56:65:59:46:3b:af:6c:b8:5e:a1:cd:
22:6e:6c:c1:36:a2:30:17:f3:8f:ee:c7:98:7b:5d:8b:cf:cc:
00:81:a1:72:99:df:ff:5b:c0:bb:73:41:a8:36:d7:f1:76:72:
12:00:9b:da:d1:96:e3:07:65:ce:b5:e4:0f:6a:89:11:6f:63:
29:7d:45:ef:3c:75:c1:9f:c2:9a:b7:c7:1b:55:92:0a:d5:13:
f7:a0:e4:4c:9e:df:cd:85:4b:f2:b1:ca:90:e0:b5:78:d9:53:
08:d0:20:54:06:17:f3:45:a8:e3:11:64:bd:00:21:9c:cb:2f:
6f:5a:11:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:48 2025 by rpki-client