Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: y6AUCvwgukOBPPNBpBsKLx5ZB90xB/qATNH4Efdsp/s=
Subject key identifier: F5:3A:71:17:46:29:5A:75:90:DE:1F:12:D4:68:E7:B6:2D:FB:66:0B
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 0198D54DC04B83BC9817A40A03F79C7A0D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 0D98
Signing time: Sat 23 Aug 2025 05:01:39 +0000
Manifest this update: Sat 23 Aug 2025 05:01:39 +0000
Manifest next update: Sun 24 Aug 2025 05:01:39 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: ULzCJbfHQIjEHEz0u06ML+GgbsZYRYj4ZlZsu40gP7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c0:4b:83:bc:98:17:a4:0a:03:f7:9c:7a:0d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Aug 23 05:01:39 2025 GMT
Not After : Aug 24 05:01:39 2025 GMT
Subject: CN=f53a711746295a7590de1f12d468e7b62dfb660b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:bb:45:bb:b6:83:9c:66:d5:b2:48:1e:79:
0f:db:83:63:af:8e:92:16:b3:09:18:98:2f:cb:6d:
de:f9:59:d0:99:27:d2:8f:b8:e2:a3:79:be:f0:17:
94:ed:9d:45:b9:8c:54:27:a3:4b:6c:30:31:fe:5d:
d1:77:b7:d2:6b:7d:d3:42:2b:f4:35:0e:f3:9b:64:
c0:f5:85:0a:03:96:1e:a9:1a:b0:9a:97:c1:b7:12:
dd:77:8e:d5:fa:9c:9c:40:87:46:b2:7d:37:11:cf:
e0:c8:48:c1:42:d4:d2:10:90:ba:40:87:2e:7c:8a:
08:06:2e:e4:45:a8:57:9e:7a:b1:07:af:3a:69:b5:
12:ec:a7:d6:8a:96:51:99:7f:1b:ef:e4:b7:eb:58:
56:fa:ae:6f:a8:77:ef:1c:69:7e:93:b4:ba:7b:15:
1b:fb:e0:9c:84:32:ee:c2:ac:49:7f:15:9e:80:80:
18:3f:fc:02:23:4f:47:9a:69:97:cf:39:ae:94:02:
70:30:ce:16:8f:d5:46:67:92:d7:43:f7:be:78:bb:
f9:fb:bb:ef:62:a1:fd:82:fe:1e:6b:29:ad:ce:db:
5f:47:9b:6e:52:d4:80:32:0f:61:53:36:15:a9:d5:
ca:01:69:2f:52:13:cd:e2:46:71:ef:8f:e0:63:08:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:71:17:46:29:5A:75:90:DE:1F:12:D4:68:E7:B6:2D:FB:66:0B
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ea:3d:70:b5:fa:5f:03:d9:80:9e:b0:6a:ac:d1:b7:7f:0b:
4a:05:2c:d1:de:af:bd:25:03:3a:8a:15:de:9e:27:c3:b9:0b:
b1:f8:9d:7e:88:a3:39:e0:7f:aa:a8:61:67:37:0d:87:67:b4:
ce:40:68:d3:3e:db:53:fe:04:69:ec:d1:e0:3b:ab:b5:50:2f:
48:79:11:30:6e:fb:1f:79:a0:eb:18:f3:8b:df:61:ab:4a:2a:
8a:5a:67:fd:27:e9:b5:3a:9e:11:32:6b:02:fe:d6:11:4b:08:
6d:a2:10:d2:ad:c0:a7:fb:59:90:a9:1e:01:13:41:34:ed:c3:
50:b3:e7:fb:b5:cf:a2:25:40:74:28:1a:85:15:28:fd:d1:c0:
3e:eb:91:be:89:b5:14:de:1f:14:65:35:4a:f4:6c:80:8c:d0:
e5:5c:b2:52:f7:66:69:4f:f6:b0:c4:e5:8e:ea:7c:3f:9f:46:
d5:c5:f4:0c:6d:91:1d:86:c6:af:35:f7:ee:76:5d:07:4b:82:
41:7e:4f:24:f3:87:f6:5a:51:85:8f:d4:f3:f1:72:ea:5d:38:
56:54:d4:4f:51:5f:4c:7f:d1:ec:de:03:90:4a:be:1b:53:e0:
53:d3:24:a9:8e:5a:a4:94:f9:85:9f:32:ab:fc:47:f1:a0:51:
79:49:a9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:16 2025 by rpki-client