Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
File: b5RYfBGZosPfQBl7GfNlDGF94UU.mft (raw, json)
Hash identifier: ZE1gYs8TEjNhiv5bxZVRE7hKk5AoZ0NQ8GKf+ehT0cc=
Subject key identifier: F6:8A:AE:9C:08:9B:1B:B4:08:12:54:71:60:7D:CA:2C:A8:EE:1B:E4
Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145
Certificate serial: 0198D7060537BE2A92D01BF79218F4E57FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
Manifest number: 016B
Signing time: Sat 23 Aug 2025 13:02:32 +0000
Manifest this update: Sat 23 Aug 2025 13:02:32 +0000
Manifest next update: Sun 24 Aug 2025 13:02:32 +0000
Files and hashes: 1: b5RYfBGZosPfQBl7GfNlDGF94UU.crl (hash: vgkWsAmEvdii9ZxftGQZWOUOAlHMzjbrV//NT4B4MLI=)
2: ePKBy3s7DCa8LCYPrDuLad8LQds.roa (hash: IOfYTJhGS5ceI6YMnArvR/xLdlNTNiNsJ5hdFLFW72Q=)
3: xTCv3RXSZS1iTavCUS9l9JR_D5E.roa (hash: A3hLBLSXg8J7g4DoDdWC6smLJPKHGcfSEfHqAmRLjjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:05:37:be:2a:92:d0:1b:f7:92:18:f4:e5:7f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145
Validity
Not Before: Aug 23 13:02:32 2025 GMT
Not After : Aug 24 13:02:32 2025 GMT
Subject: CN=f68aae9c089b1bb408125471607dca2ca8ee1be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:e4:2d:d1:8f:58:4a:b4:0b:90:be:29:c9:
ef:41:3d:74:e2:d6:20:4d:0c:10:e1:0a:9b:60:ee:
67:1e:fe:61:1f:fd:35:00:c8:a5:cd:6c:76:a9:72:
bd:ea:72:f2:cb:11:50:0d:05:dc:a7:eb:fc:7e:6a:
18:c5:ef:66:71:92:4d:11:5a:b6:d0:53:a3:f9:c1:
d6:39:ab:2f:14:a2:f1:dd:56:c2:02:9a:e2:9e:dc:
80:25:58:b3:27:81:ce:46:99:d4:7e:a3:86:45:09:
14:55:c4:b7:74:86:79:6e:85:5e:2f:b7:17:7f:b5:
8b:41:c5:a4:5c:c1:8e:89:19:32:90:7c:20:a0:26:
ce:d9:7f:57:1e:58:0e:57:c8:c4:db:af:92:5d:aa:
68:c1:d4:1e:7d:f0:52:7b:27:20:ae:e6:96:e7:f1:
c6:cc:85:37:5e:aa:72:7f:23:e9:dc:9b:2d:e2:82:
24:85:59:ea:74:a4:66:91:d0:fe:97:17:22:9b:d1:
92:3f:01:48:e2:bf:ab:20:1d:85:67:52:8e:98:58:
64:be:94:29:27:f7:23:b9:0f:fa:93:5e:b9:d1:1c:
79:45:a5:01:a2:b9:04:49:17:6c:52:e5:fa:91:9d:
11:2f:38:18:b8:c0:95:10:dc:90:8e:c8:a6:46:a4:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8A:AE:9C:08:9B:1B:B4:08:12:54:71:60:7D:CA:2C:A8:EE:1B:E4
X509v3 Authority Key Identifier:
keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c7:02:36:a2:a9:6e:ad:86:c0:d0:a6:10:19:c3:03:3c:ff:
99:e5:9a:36:c6:fc:13:b8:1d:88:ae:e6:da:81:39:60:b1:93:
34:ca:b2:a1:33:c9:2e:84:86:1e:fd:54:5b:56:99:b4:5f:31:
52:1f:a4:84:56:d4:23:8e:14:04:ba:21:b4:68:6e:9a:24:a1:
d9:1a:30:09:be:9f:25:2c:73:de:5d:14:92:19:19:78:0c:c6:
49:cc:74:3b:a1:45:9d:fc:b3:40:f0:19:f1:d5:62:bf:38:a3:
a8:37:19:2e:6c:99:96:fe:02:36:f5:0c:ae:d6:37:8f:ee:e4:
8e:8f:42:98:e1:ae:cb:cb:20:0a:00:97:92:e3:3e:00:17:67:
15:6c:f7:42:28:f1:1a:36:fb:1f:8f:9b:e7:6c:00:b4:13:cf:
d7:08:ae:cd:1e:cd:07:57:88:e3:1d:4c:5f:26:f7:ec:24:c6:
ad:82:54:ee:6b:b2:c6:73:64:f9:03:e8:ee:06:95:e0:f9:45:
0e:32:78:7f:8e:5f:fe:69:7a:aa:fd:1e:48:b8:e7:a6:15:96:
52:75:88:6b:e8:be:24:67:8b:8e:92:ea:c4:0e:9a:f7:a1:77:
ae:d3:07:04:4e:a6:93:17:d0:f2:bf:aa:aa:b7:94:b4:57:f3:
ee:b6:83:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:19 2025 by rpki-client