Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
File: b5RYfBGZosPfQBl7GfNlDGF94UU.mft (raw, json)
Hash identifier: Mxw0R+9A2ZL2gUCkbpLelTrK5/wqRPnZkjJN6iFp7iI=
Subject key identifier: B1:B7:83:CE:53:F8:4D:3F:AE:31:0E:65:AA:13:AF:CA:DF:A5:AB:4E
Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145
Certificate serial: 01974931329C2CA6CFD6FD8C5C6AD356E73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
Manifest number: 9D
Signing time: Sat 07 Jun 2025 07:00:50 +0000
Manifest this update: Sat 07 Jun 2025 07:00:50 +0000
Manifest next update: Sun 08 Jun 2025 07:00:50 +0000
Files and hashes: 1: b5RYfBGZosPfQBl7GfNlDGF94UU.crl (hash: aY4Lr6QUNRsa2ib98fBQhF6sN9YxbxeFbTHQyHoWKzY=)
2: ePKBy3s7DCa8LCYPrDuLad8LQds.roa (hash: IOfYTJhGS5ceI6YMnArvR/xLdlNTNiNsJ5hdFLFW72Q=)
3: xTCv3RXSZS1iTavCUS9l9JR_D5E.roa (hash: A3hLBLSXg8J7g4DoDdWC6smLJPKHGcfSEfHqAmRLjjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:32:9c:2c:a6:cf:d6:fd:8c:5c:6a:d3:56:e7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145
Validity
Not Before: Jun 7 07:00:50 2025 GMT
Not After : Jun 8 07:00:50 2025 GMT
Subject: CN=b1b783ce53f84d3fae310e65aa13afcadfa5ab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ec:ec:20:6f:05:5f:1f:1e:70:34:08:c0:63:
54:2b:97:9d:e6:d9:3d:2a:5e:5a:fe:4d:49:22:4b:
a8:a8:61:fd:4f:f0:1f:86:ed:02:6f:ea:15:53:df:
86:1d:ed:7d:51:23:c9:04:0a:36:57:d5:b2:c8:dd:
2c:ba:06:5e:eb:c7:c2:82:e4:4b:86:e2:ba:17:7d:
db:c3:f8:42:13:59:89:5b:8b:5e:77:3c:b4:4d:97:
4d:b8:b1:79:b0:53:b2:3f:ac:ae:c9:af:93:8c:08:
89:cd:a4:3b:35:a5:ac:62:97:95:ea:e3:47:b4:20:
5a:07:d6:c6:62:46:41:5a:1e:a3:07:58:a2:7d:c9:
e6:be:96:8b:0a:58:16:73:62:24:4f:35:1c:50:da:
be:4a:39:c4:f5:8a:2e:46:72:e4:b4:43:98:12:4a:
92:68:c3:11:53:92:d7:c5:ec:40:40:87:e0:f0:37:
57:f8:e2:00:fb:14:9e:6b:9a:06:92:d2:43:4d:2d:
93:e6:c1:87:7d:eb:22:70:0e:84:03:16:10:5f:1c:
df:61:1a:ac:c1:84:b7:c5:43:2a:e2:c0:8d:11:03:
1a:f6:55:35:d5:a5:7e:9d:1b:5e:ea:81:54:91:5f:
52:1b:24:4e:de:2c:d1:97:06:3e:a3:23:d9:99:95:
1e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B7:83:CE:53:F8:4D:3F:AE:31:0E:65:AA:13:AF:CA:DF:A5:AB:4E
X509v3 Authority Key Identifier:
keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d9:c6:8f:a2:d5:46:3b:33:dc:3b:e3:a1:82:9e:b4:10:d1:
a5:09:69:35:0a:d7:94:df:27:91:f5:36:bf:50:3d:69:6c:cf:
55:ee:50:b4:11:73:50:d9:ef:03:59:48:28:4d:dc:e0:56:d6:
8f:b9:7c:ae:fb:e6:4a:ef:59:67:2d:54:19:ab:ef:d2:f4:af:
fe:78:59:17:0b:13:3a:99:2e:a6:7a:f2:a2:4d:ee:57:eb:25:
4b:bf:ba:a3:bd:51:a1:dd:94:e1:55:80:41:4e:78:cd:a3:30:
33:89:12:c8:a6:c7:e4:78:ae:d3:89:cc:36:1d:6b:45:22:22:
77:2a:7d:32:55:2a:4a:76:60:ce:52:11:b3:f6:57:cc:50:cf:
ab:23:fb:8f:b8:15:b0:6b:47:4b:1a:11:1e:b0:21:00:b1:06:
5c:74:99:f1:3f:ae:f2:03:f0:39:57:67:6b:bc:5f:18:23:7c:
73:fe:b6:53:4a:4d:0c:66:ee:43:10:c5:41:64:bf:f2:3f:a8:
7e:99:0e:61:47:6e:26:14:69:43:d0:5f:65:b5:19:3e:8c:d4:
ec:77:f6:bc:88:e3:49:97:20:39:6c:be:cf:b6:c5:d4:e8:56:
00:42:1e:f4:e5:71:d8:6d:1c:a1:74:53:37:de:ac:bb:72:72:
22:49:c1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:14 2025 by rpki-client