Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
File: b5RYfBGZosPfQBl7GfNlDGF94UU.mft (raw, json)
Hash identifier: YDyYY7j7jFdHt6JYhbopCdpHrfPuEn+leOKog6otf30=
Subject key identifier: 30:1F:2F:FE:A2:1A:2C:94:F7:FB:65:96:FA:DE:7B:97:BA:D4:B5:EF
Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145
Certificate serial: 0199FC8F231A3A86DC20F2E679FA6B2FDD53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
Manifest number: 0203
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: b5RYfBGZosPfQBl7GfNlDGF94UU.crl (hash: RP/ZCnfMPgPo3gvq+vxOCUTe/cOBGlWxnirMWCMgILE=)
2: ePKBy3s7DCa8LCYPrDuLad8LQds.roa (hash: IOfYTJhGS5ceI6YMnArvR/xLdlNTNiNsJ5hdFLFW72Q=)
3: xTCv3RXSZS1iTavCUS9l9JR_D5E.roa (hash: A3hLBLSXg8J7g4DoDdWC6smLJPKHGcfSEfHqAmRLjjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:23:1a:3a:86:dc:20:f2:e6:79:fa:6b:2f:dd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=301f2ffea21a2c94f7fb6596fade7b97bad4b5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:b0:cb:7f:dd:85:56:de:b3:b2:12:02:20:
a8:ac:7c:e9:b9:91:23:a1:2f:19:e2:a9:27:67:f7:
74:ae:48:71:56:b0:6c:c2:36:1b:52:fa:cc:b4:4c:
98:dd:4b:4a:c7:62:5a:6f:ab:12:cf:ce:72:24:f6:
af:fd:16:70:9f:b3:d7:25:1b:e5:99:43:0e:7a:de:
5c:0c:58:17:a1:31:c7:18:5c:f3:72:be:2f:54:d3:
0c:b2:49:78:29:5b:6d:21:29:08:65:fc:29:7b:46:
9c:2b:f6:67:56:15:22:eb:57:61:a5:9d:c9:54:f4:
cd:da:f8:0e:c8:9c:7a:bb:62:78:56:13:3c:42:7a:
eb:c4:55:7a:dd:06:8d:a7:27:e9:7a:f1:11:67:42:
60:34:de:ef:90:f2:b9:f0:bc:9a:a2:14:36:f2:d9:
2b:4d:8f:23:ca:ba:eb:51:e9:bd:9d:5b:c5:68:31:
ff:ea:a1:1c:b9:7f:1c:b9:9f:d2:63:96:de:ab:70:
f4:cb:60:79:3f:d5:21:27:97:f1:18:24:15:35:23:
bd:0f:ab:9e:2a:88:ae:85:4f:ae:3a:2c:88:20:34:
df:f6:d6:a9:39:bd:0c:06:b2:d5:9b:06:fd:e3:a2:
c5:be:8e:39:cf:b7:85:c6:0a:a8:0f:c9:0a:fb:b5:
4e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1F:2F:FE:A2:1A:2C:94:F7:FB:65:96:FA:DE:7B:97:BA:D4:B5:EF
X509v3 Authority Key Identifier:
keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5a:1f:7e:26:5a:d3:a4:d2:f3:41:fe:15:b5:e5:12:6f:98:
c1:93:e5:19:ad:4d:c3:2b:49:86:da:f1:fe:1a:9d:84:ff:25:
5b:31:45:68:42:b0:6d:50:61:c0:4f:bc:ab:a8:20:b9:6f:1c:
57:99:c6:a9:d1:b5:76:69:d5:2b:7e:f5:cc:20:5d:14:c2:3f:
74:10:8f:ae:16:e0:3e:89:28:0d:b5:44:24:f6:0b:46:a2:87:
66:65:40:91:f2:6c:db:85:36:49:eb:e6:b9:0a:9c:02:f6:cb:
d3:05:99:7f:32:12:46:20:8c:fc:d7:c4:49:7c:3d:6d:1a:77:
9c:52:70:f1:78:fd:f4:f2:99:d5:66:0f:c0:83:c3:3a:4f:a9:
54:d9:a4:30:01:cb:1e:43:4d:e7:9c:54:07:23:3c:3f:34:5d:
90:4f:15:80:80:0a:b2:fb:51:5a:88:21:86:09:64:ad:1d:da:
1e:a2:d2:2d:63:7b:1b:17:5d:25:b2:15:5c:77:5e:fa:14:f0:
b7:72:be:bc:16:48:1a:25:16:eb:cb:0d:09:0d:b4:32:eb:ef:
fe:26:7f:15:83:2d:43:9e:fd:99:c4:5f:5f:4d:7f:24:70:b1:
27:df:7b:e6:68:3e:a4:a5:01:ef:68:ff:9c:1a:98:89:50:3d:
0d:2e:71:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:30 2025 by rpki-client