Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: ehn4RjxOxcD0rq37LY2oGDwXRCY7I1A2KdlZSDSQ+QE=
Subject key identifier: C5:62:54:5C:17:83:5A:C4:CC:BE:D6:84:85:72:18:37:43:0B:B3:20
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 0198D4A82C1CC594B9D6D07A00AA56F6BD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 136C
Signing time: Sat 23 Aug 2025 02:00:47 +0000
Manifest this update: Sat 23 Aug 2025 02:00:47 +0000
Manifest next update: Sun 24 Aug 2025 02:00:47 +0000
Files and hashes: 1: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: H/73BeMI4SqiNzbVI5oKMqtxvL/OeCvyv26kZQbzd9Q=)
2: S3W2ppn5lk20Aj8MVEUOEbDf3k4.roa (hash: R7kQC03lqKwuWWDRl2P6LnNUl2gU+UQxb/V3srvulwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2c:1c:c5:94:b9:d6:d0:7a:00:aa:56:f6:bd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Aug 23 02:00:47 2025 GMT
Not After : Aug 24 02:00:47 2025 GMT
Subject: CN=c562545c17835ac4ccbed68485721837430bb320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:dd:9b:46:c3:58:ee:4b:19:25:1a:98:32:
1e:95:c7:72:e6:66:5d:03:08:42:06:02:47:36:9b:
f7:64:7a:18:eb:5f:e9:bd:77:07:83:e9:37:b1:68:
2d:51:fc:e7:f2:76:c8:df:a0:0e:10:23:f0:60:82:
8b:0d:ed:32:11:99:17:79:55:b9:6c:a6:d3:36:d9:
20:fb:03:a8:15:50:6a:f4:38:b5:fc:41:dc:a8:40:
8c:85:bd:c8:7e:52:8e:8a:aa:56:c3:9a:cd:5c:ed:
6b:56:70:c8:b5:ad:07:14:c1:25:a2:bd:8b:07:d0:
dc:1a:2f:fb:0b:9c:4e:87:38:e7:bb:4c:b3:60:9a:
d6:25:7e:67:3f:41:fe:e4:88:d9:bc:b1:a4:e5:5f:
6a:c2:eb:e8:49:bc:78:c7:32:25:34:5d:89:a7:e8:
25:78:6f:6a:3d:3c:3e:dd:2b:18:91:26:3f:4c:ef:
d9:f2:94:83:ce:06:8c:4a:ff:0d:c5:87:ec:a1:11:
a5:c9:bb:24:2a:83:89:70:a9:65:27:67:99:50:01:
fd:5a:da:4b:27:a4:41:a3:20:16:a1:5c:a5:c7:47:
83:68:3b:ab:97:7a:8e:a1:b6:6a:bf:0d:75:b6:0a:
83:51:ea:cf:a7:a9:7d:19:7b:53:2d:44:8d:a6:8b:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:62:54:5C:17:83:5A:C4:CC:BE:D6:84:85:72:18:37:43:0B:B3:20
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b2:cf:81:be:69:c6:95:e3:82:1e:5b:be:a8:13:1d:96:8c:
d4:64:5a:1e:49:d0:d7:27:8c:bb:c8:fb:e6:ae:56:a9:39:0f:
8d:77:bf:6c:b8:2e:2a:29:1c:20:fe:6c:82:31:84:d4:b3:92:
b0:b3:1c:03:7e:16:53:7e:b1:6e:e7:32:40:47:86:c0:3a:6d:
fd:9a:6f:0e:88:60:7e:b6:f2:af:15:1f:e3:42:8f:c4:b9:8b:
2d:96:34:46:e8:19:4c:31:2f:2d:a4:f4:7e:62:21:97:98:eb:
fd:0d:5f:46:56:b4:0d:e0:01:f0:de:7d:35:bd:e1:10:d5:cf:
b9:02:74:5f:e6:d2:96:88:20:b4:74:49:b0:28:8c:7f:18:b4:
c3:26:c6:ea:0a:9c:f7:76:12:32:a4:c7:28:2c:3e:c6:9b:f2:
27:37:d0:d0:df:ee:36:f4:b8:47:65:b9:cd:86:34:96:e5:49:
a1:08:24:ef:4e:a7:ba:a5:12:8e:82:ba:85:78:a5:14:3e:88:
54:50:40:29:77:05:84:f7:f9:99:85:64:a1:a5:8a:a5:1f:ac:
75:64:cc:cc:53:0a:a3:b3:a3:da:7c:9f:ea:9a:16:f9:76:e4:
8f:f4:58:25:42:d6:6d:62:4b:d0:04:1a:32:b5:1a:06:d8:30:
87:73:29:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqCwcxZS51tB6AKpW9r2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OTRiNzAwNzA1ZTBiYWE3MzZhNWRkMDkwYWNkMWNiOTEy
YzE3MTkwHhcNMjUwODIzMDIwMDQ3WhcNMjUwODI0MDIwMDQ3WjAzMTEwLwYDVQQD
EyhjNTYyNTQ1YzE3ODM1YWM0Y2NiZWQ2ODQ4NTcyMTgzNzQzMGJiMzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA/dm0bDWO5LGSUamDIelcdy5mZd
AwhCBgJHNpv3ZHoY61/pvXcHg+k3sWgtUfzn8nbI36AOECPwYIKLDe0yEZkXeVW5
bKbTNtkg+wOoFVBq9Di1/EHcqECMhb3IflKOiqpWw5rNXO1rVnDIta0HFMElor2L
B9DcGi/7C5xOhzjnu0yzYJrWJX5nP0H+5IjZvLGk5V9qwuvoSbx4xzIlNF2Jp+gl
eG9qPTw+3SsYkSY/TO/Z8pSDzgaMSv8NxYfsoRGlybskKoOJcKllJ2eZUAH9WtpL
J6RBoyAWoVylx0eDaDurl3qOobZqvw11tgqDUerPp6l9GXtTLUSNpou5owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMViVFwXg1rEzL7WhIVyGDdDC7MgMB8GA1UdIwQY
MBaAFAeUtwBwXguqc2pd0JCs0cuRLBcZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjVTM0FIQmVDNnB6YWwzUWtLelJ5NUVzRnhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YmFjM2ItM2QwYS00MWM4LTg5MzYt
OTRlMDJjOWYxNTBjLzEvQjVTM0FIQmVDNnB6YWwzUWtLelJ5NUVzRnhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82YmFjM2ItM2QwYS00MWM4LTg5MzYtOTRlMDJjOWYxNTBj
LzEvQjVTM0FIQmVDNnB6YWwzUWtLelJ5NUVzRnhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7LPgb5p
xpXjgh5bvqgTHZaM1GRaHknQ1yeMu8j75q5WqTkPjXe/bLguKikcIP5sgjGE1LOS
sLMcA34WU36xbucyQEeGwDpt/ZpvDohgfrbyrxUf40KPxLmLLZY0RugZTDEvLaT0
fmIhl5jr/Q1fRla0DeAB8N59Nb3hENXPuQJ0X+bSloggtHRJsCiMfxi0wybG6gqc
93YSMqTHKCw+xpvyJzfQ0N/uNvS4R2W5zYY0luVJoQgk706nuqUSjoK6hXilFD6I
VFBAKXcFhPf5mYVkoaWKpR+sdWTMzFMKo7Oj2nyf6poW+Xbkj/RYJULWbWJL0AQa
MrUaBtgwh3MpjQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:26 2025 by rpki-client