Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
File: b5jR-Z44M-9AHUY0juyLdSCIxV0.mft (raw, json)
Hash identifier: R0FP+WQGKQvyHV/hJ5Fpq+nDXTZOrSijA82gjr9Rsoo=
Subject key identifier: CC:07:1E:18:F3:7F:F3:D2:63:2C:B4:FC:00:DA:D5:19:1B:15:95:5F
Authority key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
Certificate issuer: /CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Certificate serial: 019A71B847B0837BCB0AA035793A65F2F98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: AK8oH-hdcdWqkx1j19Sg4WRGU6k.roa (hash: UL0wVMMPQ6seHx9+E4jjcivFpYmeRRoPs0aDR4HKrBk=)
2: WtT0iRRNWOEnnJNbpojOaIceMDQ.roa (hash: GuNBmImvmC1qMkMAYPrdjYcM0SGHFORb2IyKWp/uvJM=)
3: b5jR-Z44M-9AHUY0juyLdSCIxV0.crl (hash: 3JRBqJBOpVuHBK37aJ/rPSvSseTWr6trJq4B1GS+DR0=)
4: j7Ttn2BWFaDhab7ZDneYB8Izk6w.roa (hash: k9js+BE4RFtwEtbQ/V0azAY+xGWrWmclJFMU8tYRWW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:47:b0:83:7b:cb:0a:a0:35:79:3a:65:f2:f9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=cc071e18f37ff3d2632cb4fc00dad5191b15955f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:66:98:e9:ff:1b:98:cd:d0:32:b6:40:65:
93:a8:98:6a:d2:81:26:d7:65:fb:ef:37:d3:1c:8d:
5a:4b:b0:5c:a3:14:ac:60:b5:c5:ee:d5:42:32:0a:
fb:3a:7b:18:d9:06:b4:23:d6:35:d2:a4:51:3f:12:
46:29:f3:52:a1:3a:17:a3:1b:87:5b:19:d2:87:63:
fa:0b:a7:b1:60:a0:4c:9e:b3:57:16:85:cb:28:01:
1b:c9:0d:e2:bb:18:f7:23:e9:06:3c:8a:38:98:00:
70:6a:36:4f:25:a0:88:64:b4:7e:ca:2c:fa:a1:bf:
3e:28:80:de:0e:18:50:53:42:b5:bc:c9:52:4a:5e:
7d:ea:9f:e3:55:57:9e:b5:1f:73:7a:f9:9f:d7:93:
12:62:8b:2f:bb:13:80:51:65:a1:36:a1:f6:a7:81:
05:c7:af:3c:24:3b:18:ad:a8:b4:cd:f3:2e:41:21:
16:4a:c6:7b:a6:62:09:2d:a3:b3:7a:a8:3d:df:34:
bb:aa:e9:42:60:12:74:26:c3:53:46:04:84:34:1e:
ae:46:89:33:68:49:a4:fb:0e:30:bd:6a:e1:d6:90:
9c:4c:de:fd:55:f8:66:81:b6:16:03:c4:d5:50:c1:
5b:47:83:f8:1c:e3:be:15:e4:2d:d2:ad:57:1a:f4:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:07:1E:18:F3:7F:F3:D2:63:2C:B4:FC:00:DA:D5:19:1B:15:95:5F
X509v3 Authority Key Identifier:
keyid:6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:88:73:3d:ae:9c:b6:52:95:16:a4:99:b8:fc:27:57:05:9a:
bd:2c:74:1d:e5:71:01:fb:17:fa:15:c9:d2:b9:0c:61:3e:f2:
6d:01:7b:5b:00:ec:a6:37:33:24:71:a3:ad:d8:c1:0a:c0:aa:
a0:88:16:66:37:d9:c1:9a:ea:ec:bd:75:a0:da:29:69:0d:bc:
96:a3:e8:23:22:39:19:81:1f:62:83:00:34:bc:0f:6a:02:34:
17:64:23:0d:0e:07:60:37:bf:15:23:26:32:b5:f0:d7:62:01:
03:72:68:31:3f:26:38:4e:5e:d1:3f:5c:32:37:ea:af:56:c3:
c0:b8:5e:52:a9:44:06:3e:c1:e9:7a:c7:73:57:10:f9:44:2e:
a4:75:8e:b2:62:eb:16:30:25:6e:b1:68:72:2e:a8:f6:a9:2e:
d6:05:6e:5b:c4:f5:94:4f:57:d0:f0:f7:2d:6a:fa:1c:42:ab:
cc:6c:6f:f2:3c:91:5b:42:52:7c:74:52:44:d5:2a:2e:d6:4b:
97:7e:5f:d4:65:48:27:4d:fa:ad:94:44:98:cd:fb:fe:5b:fd:
62:0c:90:c4:5d:a5:8b:a5:24:b0:d8:3c:20:0a:90:d7:8e:75:
e7:47:7b:7c:72:cd:be:f2:8e:28:51:c6:68:88:36:26:1e:e4:
00:6b:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:55 2025 by rpki-client