Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
File: b5RYfBGZosPfQBl7GfNlDGF94UU.mft (raw, json)
Hash identifier: B9u5OzShqAxOBckdLVw+BTqQLHyVwd7zEHvaRGwgR2Y=
Subject key identifier: 1B:B9:BF:31:C0:F7:7F:BA:39:CB:BB:CC:C0:BE:70:6C:F1:FB:0B:E8
Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145
Certificate serial: 019A725C652FA7C74C6BFD1A699DA3F2E50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
Manifest number: 0240
Signing time: Tue 11 Nov 2025 10:00:48 +0000
Manifest this update: Tue 11 Nov 2025 10:00:48 +0000
Manifest next update: Wed 12 Nov 2025 10:00:48 +0000
Files and hashes: 1: b5RYfBGZosPfQBl7GfNlDGF94UU.crl (hash: EbOxqjnR7g/9VuZJtp7kEix/eyEd9Ay9ZxBa3J1/svI=)
2: ePKBy3s7DCa8LCYPrDuLad8LQds.roa (hash: IOfYTJhGS5ceI6YMnArvR/xLdlNTNiNsJ5hdFLFW72Q=)
3: xTCv3RXSZS1iTavCUS9l9JR_D5E.roa (hash: A3hLBLSXg8J7g4DoDdWC6smLJPKHGcfSEfHqAmRLjjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:65:2f:a7:c7:4c:6b:fd:1a:69:9d:a3:f2:e5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145
Validity
Not Before: Nov 11 10:00:48 2025 GMT
Not After : Nov 12 10:00:48 2025 GMT
Subject: CN=1bb9bf31c0f77fba39cbbbccc0be706cf1fb0be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d5:ed:cf:d2:d1:0f:dc:3d:49:f1:54:53:82:
b8:9d:37:3b:c9:7d:50:0e:38:9f:fa:77:25:cb:be:
b5:b7:c4:ec:8a:6a:77:2c:ec:c9:82:21:85:08:ce:
16:d0:1b:2e:9f:84:76:70:b4:e3:9e:a2:1b:51:61:
96:ef:2f:6f:9f:0f:75:7e:40:59:cf:d2:c8:f7:ce:
1f:46:a6:43:e7:6e:20:fb:e4:9a:2b:09:1e:5d:16:
3b:df:c3:be:59:9d:05:81:53:e6:d7:bb:10:fc:0a:
9e:fa:06:44:58:fb:67:a1:ce:f1:70:e1:02:73:63:
09:05:ec:cf:11:38:f9:3c:7b:99:36:6c:a2:fb:eb:
66:e7:09:86:aa:8b:90:1f:25:4a:63:84:c1:48:12:
2b:6f:8e:a9:04:91:39:70:90:5f:55:3b:1b:c6:a0:
04:88:ef:df:cf:2e:4b:29:c2:a1:c1:11:0f:ec:2a:
80:d3:0f:97:d0:1b:d6:8c:f8:ff:c7:53:df:fd:88:
77:19:82:18:bf:36:f2:e8:2d:f2:9a:f2:d7:68:f3:
3c:e0:8b:0e:c5:81:59:a3:76:30:4d:03:b0:5d:88:
d9:0e:1d:10:d1:5b:91:b8:39:95:e9:1c:e9:e2:e1:
7c:87:cc:b3:8e:6b:1c:41:5c:01:41:00:c6:dc:17:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B9:BF:31:C0:F7:7F:BA:39:CB:BB:CC:C0:BE:70:6C:F1:FB:0B:E8
X509v3 Authority Key Identifier:
keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e8:6d:14:58:ba:54:99:45:58:d1:36:55:e6:71:e6:33:ff:
77:18:f8:e4:92:d9:b3:29:e9:ff:c6:69:70:bf:32:89:42:bf:
90:18:45:28:e4:f1:e7:24:27:0d:c4:9c:38:ed:f0:96:33:e4:
d1:d8:ca:bc:3e:9a:d8:49:56:af:d9:ba:9f:bc:db:8b:3b:99:
60:2b:4f:f2:85:1a:66:8e:b5:75:60:40:91:41:c6:ce:49:ba:
b6:a1:8b:43:dd:0a:f8:ad:15:7d:97:0a:45:cd:d8:f4:f8:fe:
c3:95:3f:5f:4c:f9:61:ea:d4:09:75:0f:58:86:31:35:d5:7d:
dd:47:40:cf:9f:2e:b1:87:54:9f:cd:11:59:89:c9:4f:14:0d:
c4:97:94:e0:e7:63:fd:52:3d:62:76:c7:ee:0d:4c:2c:49:4c:
85:85:57:8d:6f:16:c4:21:68:53:ab:07:e6:ec:32:86:b8:f3:
60:9b:0f:48:5a:2d:ca:7c:17:ef:23:c1:bc:31:1d:88:ec:4a:
bb:34:97:87:f7:86:9f:30:88:f7:32:47:d2:ba:f9:bd:d1:1b:
6d:ba:7e:c7:6b:b7:73:23:0e:5e:32:b5:c1:c3:34:d9:03:30:
70:79:99:67:55:98:3c:66:0d:d5:bf:33:36:16:17:0b:5a:26:
ff:47:ee:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:08 2025 by rpki-client