Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
File: b5RYfBGZosPfQBl7GfNlDGF94UU.mft (raw, json)
Hash identifier: 4yXrwFhHMcNM4c43xoTHgSAjQJ9GWm6l3b7DVJ9rq20=
Subject key identifier: 08:EA:8A:FC:33:CD:E6:F7:3F:1C:4E:44:09:2E:CD:DC:F0:3D:F0:28
Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145
Certificate serial: 0197B745A3125EB45421DDB8EA288348DF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
Manifest number: D6
Signing time: Sat 28 Jun 2025 16:01:23 +0000
Manifest this update: Sat 28 Jun 2025 16:01:23 +0000
Manifest next update: Sun 29 Jun 2025 16:01:23 +0000
Files and hashes: 1: b5RYfBGZosPfQBl7GfNlDGF94UU.crl (hash: 6yTSqeM6k8+UenSS6R4RkpIGijrhpZYGk3NNb7DLMkE=)
2: ePKBy3s7DCa8LCYPrDuLad8LQds.roa (hash: IOfYTJhGS5ceI6YMnArvR/xLdlNTNiNsJ5hdFLFW72Q=)
3: xTCv3RXSZS1iTavCUS9l9JR_D5E.roa (hash: A3hLBLSXg8J7g4DoDdWC6smLJPKHGcfSEfHqAmRLjjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a3:12:5e:b4:54:21:dd:b8:ea:28:83:48:df:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145
Validity
Not Before: Jun 28 16:01:23 2025 GMT
Not After : Jun 29 16:01:23 2025 GMT
Subject: CN=08ea8afc33cde6f73f1c4e44092ecddcf03df028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:15:dc:ff:a7:f3:3e:69:d0:a3:17:ce:d6:
35:08:e3:46:f9:b8:7b:31:11:88:b0:12:07:84:19:
13:1d:34:80:81:4c:b9:7a:6b:e2:68:73:9d:b1:65:
51:7d:42:f3:65:79:b6:4f:27:5b:42:76:51:13:ee:
e1:3e:a4:c5:b0:cd:08:e1:16:17:f8:77:18:b5:5f:
1d:36:61:f9:41:4f:c4:51:e1:de:e6:e1:bc:fc:32:
b3:6b:69:e1:38:51:8d:3d:29:64:8d:5a:4b:80:63:
50:60:97:a4:4d:29:d6:ec:b1:2e:09:7f:1f:43:08:
e8:c8:6b:42:b1:3c:92:3b:96:05:95:c8:ae:6d:5d:
56:a6:7d:f5:16:17:ab:e7:c5:be:9a:0c:6d:7b:0c:
3b:fb:80:4f:fd:ee:1f:c2:0d:12:23:96:51:ae:d1:
0f:7c:a4:db:1f:b7:b6:1e:4d:f5:9b:f0:a4:64:4b:
ee:a4:b4:05:9c:80:45:e9:a0:9f:e0:a1:1d:3c:4b:
9a:0d:4b:86:5e:ba:bf:67:71:72:53:b1:5f:f3:1e:
6f:b8:d8:9a:c8:3d:1a:b9:24:a5:e7:a2:f4:56:e1:
be:f7:3e:c4:1b:d1:b0:f1:77:fb:1a:69:d8:c6:bc:
c9:9d:cf:c2:ae:07:da:c4:be:46:68:c2:65:85:35:
c6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EA:8A:FC:33:CD:E6:F7:3F:1C:4E:44:09:2E:CD:DC:F0:3D:F0:28
X509v3 Authority Key Identifier:
keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:df:85:85:ba:6e:a6:1a:b8:b3:d6:2d:6c:3c:f2:5c:e3:70:
46:e6:79:8b:61:f7:76:a7:d8:16:63:62:fe:ba:12:ed:b8:cc:
c2:7b:25:2c:62:f6:8f:ae:ad:45:40:e0:48:03:6d:1c:d2:74:
58:42:96:f7:ff:ad:a2:02:b5:23:92:5d:46:ec:7e:da:69:ff:
3b:99:41:32:9b:cf:7c:2f:fb:52:0b:73:37:cc:a2:36:86:65:
37:b3:ab:49:69:c2:42:68:85:d3:fe:74:98:5b:87:d0:9c:68:
7f:f3:8e:b6:15:b8:74:43:74:d0:d9:54:12:f0:71:06:13:08:
68:57:54:fd:c0:f0:74:94:52:ad:77:69:c0:f9:67:a7:c5:c0:
ca:2c:94:c8:6b:04:67:7a:ca:67:ad:b4:5c:f6:19:05:69:e5:
25:8f:70:ba:8e:a2:dd:af:ae:99:a4:a8:e9:90:dd:1f:36:13:
f2:b0:c4:ad:6d:06:9f:2d:99:f3:1d:94:1b:bd:77:1d:af:f4:
92:dc:27:c2:b4:53:9e:53:64:54:8a:5f:76:82:4a:d7:5c:75:
73:de:14:05:8a:25:7b:da:c3:98:14:46:c2:30:73:c1:62:ff:
3f:90:d5:e8:5a:cb:2b:17:2f:b1:42:05:83:ec:7f:55:a4:5f:
ef:bc:69:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RaMSXrRUId246iiDSN+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOTQ1ODdjMTE5OWEyYzNkZjQwMTk3YjE5ZjM2NTBjNjE3
ZGUxNDUwHhcNMjUwNjI4MTYwMTIzWhcNMjUwNjI5MTYwMTIzWjAzMTEwLwYDVQQD
EygwOGVhOGFmYzMzY2RlNmY3M2YxYzRlNDQwOTJlY2RkY2YwM2RmMDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9QV3P+n8z5p0KMXztY1CONG+bh7
MRGIsBIHhBkTHTSAgUy5emviaHOdsWVRfULzZXm2TydbQnZRE+7hPqTFsM0I4RYX
+HcYtV8dNmH5QU/EUeHe5uG8/DKza2nhOFGNPSlkjVpLgGNQYJekTSnW7LEuCX8f
QwjoyGtCsTySO5YFlciubV1Wpn31Fher58W+mgxteww7+4BP/e4fwg0SI5ZRrtEP
fKTbH7e2Hk31m/CkZEvupLQFnIBF6aCf4KEdPEuaDUuGXrq/Z3FyU7Ff8x5vuNia
yD0auSSl56L0VuG+9z7EG9Gw8Xf7GmnYxrzJnc/CrgfaxL5GaMJlhTXGbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjqivwzzeb3PxxORAkuzdzwPfAoMB8GA1UdIwQY
MBaAFG+UWHwRmaLD30AZexnzZQxhfeFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVSWWZCR1pvc1BmUUJsN0dmTmxER0Y5NFVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wYzE0ZGItODYyMC00OTk2LWFmYWUt
YjljZjQwMDk0NjQwLzEvYjVSWWZCR1pvc1BmUUJsN0dmTmxER0Y5NFVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wYzE0ZGItODYyMC00OTk2LWFmYWUtYjljZjQwMDk0NjQw
LzEvYjVSWWZCR1pvc1BmUUJsN0dmTmxER0Y5NFVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9+Fhbpu
phq4s9YtbDzyXONwRuZ5i2H3dqfYFmNi/roS7bjMwnslLGL2j66tRUDgSANtHNJ0
WEKW9/+togK1I5JdRux+2mn/O5lBMpvPfC/7UgtzN8yiNoZlN7OrSWnCQmiF0/50
mFuH0Jxof/OOthW4dEN00NlUEvBxBhMIaFdU/cDwdJRSrXdpwPlnp8XAyiyUyGsE
Z3rKZ620XPYZBWnlJY9wuo6i3a+umaSo6ZDdHzYT8rDErW0Gny2Z8x2UG713Ha/0
ktwnwrRTnlNkVIpfdoJK11x1c94UBYole9rDmBRGwjBzwWL/P5DV6FrLKxcvsUIF
g+x/VaRf77xpIg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:55 2025 by rpki-client