Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: 3nMwT0yRGwfAaA2waTyyLgxFXQUz0lmrthIGyhv0WeM=
Subject key identifier: EB:A3:AA:99:24:B5:8C:D6:61:CC:B2:CF:15:70:06:06:0E:90:0F:58
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 0199FC217E5BD38CB1825A7693396C6C7789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 1405
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: WtzDmPwNGA1aMSmA7PGAIfWCRcTmtXSxbCbah7Ll3rM=)
2: S3W2ppn5lk20Aj8MVEUOEbDf3k4.roa (hash: R7kQC03lqKwuWWDRl2P6LnNUl2gU+UQxb/V3srvulwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7e:5b:d3:8c:b1:82:5a:76:93:39:6c:6c:77:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=eba3aa9924b58cd661ccb2cf157006060e900f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:35:13:fe:e9:60:7a:09:8a:2e:99:33:03:
37:62:1f:70:3d:75:5b:6d:29:0d:17:f9:09:00:c3:
21:c2:3d:c7:c8:ec:9b:88:ea:71:99:87:ce:27:9e:
57:4a:f8:62:0f:16:4f:4f:2e:9d:63:83:74:d3:3d:
4a:89:23:5d:7b:fa:7a:6a:6d:8f:fe:44:06:29:7a:
98:86:fa:19:73:bd:6b:37:b0:fb:78:96:b5:a8:0f:
1d:3e:5c:00:65:4b:94:6e:93:8c:49:c6:77:2d:60:
8d:2c:87:29:75:a2:bf:9b:10:ee:16:d2:b7:76:07:
39:49:df:7c:77:8d:e5:4d:93:3c:92:c7:dc:18:20:
68:de:0e:6c:5b:ec:38:92:56:89:f7:1b:61:e0:9c:
8a:fb:db:19:6c:78:9d:b2:a4:ca:2a:77:b0:ad:9b:
6b:c1:2b:a7:0d:e5:c2:88:cb:24:af:36:b9:dd:95:
6e:43:ae:65:32:bf:ac:ee:04:94:35:b8:5b:49:56:
51:40:5a:ae:01:b6:e4:38:13:20:83:4f:37:57:55:
58:96:94:cf:be:df:0d:f0:bb:f6:e9:55:59:bc:b3:
e8:8e:70:1a:b5:d3:a2:54:78:83:e8:53:40:07:ad:
a0:61:1f:65:7a:0c:27:d3:64:55:67:8c:46:4f:84:
20:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A3:AA:99:24:B5:8C:D6:61:CC:B2:CF:15:70:06:06:0E:90:0F:58
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7a:7a:ee:1c:01:e0:89:29:84:75:b6:52:0e:d4:7b:1c:c3:
89:67:67:06:68:90:42:1c:8f:67:17:c2:c7:e8:dc:1d:6b:e5:
64:54:14:57:90:a8:5e:73:91:60:61:4f:51:81:09:72:25:c8:
d3:ba:5e:88:29:f5:55:ca:1e:15:b8:75:0b:99:ad:47:28:a1:
4d:d4:8d:1e:cb:60:d0:b2:d7:58:b2:b4:a2:17:19:b2:12:f8:
2a:63:28:20:ca:8d:f3:1c:a2:61:a7:61:aa:e2:71:05:45:7c:
ef:39:cb:59:c7:52:39:a5:cb:39:ce:83:2f:34:f0:1c:86:5d:
1f:b0:a9:78:ce:56:38:64:6f:36:a8:7a:bb:0f:46:3c:8f:f1:
18:f0:1f:f1:31:72:2d:95:5b:3b:ac:65:28:90:f3:89:9d:94:
66:ce:c4:bb:de:56:00:0a:46:7a:58:aa:30:4f:d8:d1:ff:b7:
37:ce:9c:ac:c7:ea:4a:fc:40:11:c4:16:86:93:a6:0f:44:36:
1c:db:87:1a:a0:40:b7:a4:43:e7:6b:52:ce:df:04:67:e0:bd:
5d:9c:ad:bb:63:d3:86:e5:b8:52:6d:d0:6a:ce:68:92:30:5c:
bf:bd:f5:ca:12:da:5c:df:ee:31:f9:2b:e0:e3:f7:e9:e2:d6:
62:99:4b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:03 2025 by rpki-client