Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: EnLN4T5qJ5E6E7s0BhYtimD8LuMgzTJj/JW3SQYl3bc=
Subject key identifier: 27:00:75:DD:12:CF:FE:5D:48:65:AE:3C:18:8A:98:91:A6:76:00:ED
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 019A4D3CCFE89DD4FC4EE00CB80FECEE6F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 142F
Signing time: Tue 04 Nov 2025 05:00:22 +0000
Manifest this update: Tue 04 Nov 2025 05:00:22 +0000
Manifest next update: Wed 05 Nov 2025 05:00:22 +0000
Files and hashes: 1: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: cizNBJ4mF7usI4pbAKp1JRepH9J4zrCXUZvRbYoyw00=)
2: S3W2ppn5lk20Aj8MVEUOEbDf3k4.roa (hash: R7kQC03lqKwuWWDRl2P6LnNUl2gU+UQxb/V3srvulwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:cf:e8:9d:d4:fc:4e:e0:0c:b8:0f:ec:ee:6f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Nov 4 05:00:22 2025 GMT
Not After : Nov 5 05:00:22 2025 GMT
Subject: CN=270075dd12cffe5d4865ae3c188a9891a67600ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a4:17:27:bb:13:ff:e4:a6:2f:df:04:e9:06:
9e:8d:d3:de:47:8d:2b:dc:11:48:c8:04:4c:8b:09:
9e:9a:13:95:75:ce:08:33:61:eb:6f:60:f3:f5:56:
f7:59:0b:70:13:5e:2d:0c:14:c4:0a:dc:98:ca:b6:
c5:ab:0f:f5:07:e3:b7:79:84:53:da:55:0e:80:f1:
c2:c1:89:bc:87:09:74:6e:a8:42:24:2f:c9:57:b9:
a9:68:ec:9d:59:a0:de:9a:f9:d8:6a:06:20:57:0e:
07:a1:65:69:2d:50:38:22:b7:cc:fc:45:0f:04:e5:
42:27:30:c4:8c:15:9f:f1:e7:71:80:03:82:b1:d2:
40:67:c3:a9:33:6c:bf:81:08:67:e3:bc:5c:9b:50:
5f:7b:72:db:0b:5b:12:f8:c2:97:c0:c8:cb:b9:7e:
da:7d:9f:4e:9a:6a:5c:57:26:68:96:00:2b:66:f0:
42:52:18:47:b8:1c:1a:0d:f0:83:d0:5b:d2:d0:a2:
6d:d3:30:3a:52:3a:c2:ab:a6:f3:e9:a7:26:cd:ea:
8f:c7:27:82:8f:8a:70:1a:c5:dc:df:ba:af:63:37:
63:6e:9f:57:6c:2a:09:94:2e:95:b0:a3:5c:eb:f4:
66:f0:16:b4:15:9a:f1:97:74:7f:21:90:8d:77:ef:
2b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:00:75:DD:12:CF:FE:5D:48:65:AE:3C:18:8A:98:91:A6:76:00:ED
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:07:76:71:e5:fd:6a:2b:96:dc:d9:a9:20:ae:02:72:34:96:
30:40:65:19:00:5e:9c:92:78:89:ea:4e:ad:f8:21:ea:b3:62:
cb:ef:17:f2:36:74:e1:82:d7:1b:7c:be:39:ce:6f:bb:db:6f:
97:2a:1c:76:e1:74:d4:bd:62:12:20:33:dc:51:bf:c4:80:a2:
67:9b:1a:dd:68:e7:8b:4a:10:4f:8b:db:be:c9:58:7d:b4:e5:
fc:b2:93:65:04:a2:5e:91:72:51:97:a9:ba:36:49:ce:14:2f:
63:bb:40:f0:46:e3:d9:db:66:81:bb:99:12:9b:48:4d:1a:ec:
5c:4b:08:de:0c:24:95:b8:62:2d:34:57:e2:4d:5b:1d:b8:78:
23:9d:63:d1:37:d6:13:6c:35:2a:95:4c:41:e4:b9:6a:c8:4f:
e9:fe:b3:f7:0c:b2:bc:47:d8:4e:2e:b4:83:ea:5a:8f:89:4c:
4f:54:cd:ca:ab:71:63:dc:72:fe:ec:19:87:79:b1:0d:2d:41:
a3:20:9d:b4:ad:dd:2d:34:73:8b:45:03:7e:05:77:e7:53:06:
e1:af:5c:1d:b3:69:28:21:2f:33:16:88:f9:cb:f6:6d:33:89:
55:d5:a2:3c:fa:a4:db:b0:1c:2f:78:fa:a8:2e:be:09:6e:a4:
15:2b:ba:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:39 2025 by rpki-client