Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
File: b5NgtvWDmq_c4hzW3nY72qJr-_A.mft (raw, json)
Hash identifier: Ai2fkruI9HwJyHwJvIUYwpJtaPNoGFp7I7YjjIwK7Xs=
Subject key identifier: 03:9F:86:6D:A7:7F:88:E5:C7:C5:A7:C7:7A:95:6F:DC:77:DA:D8:E2
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Certificate issuer: /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial: 01987450D453238F4FD8A0497C16D75F3A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
Manifest number: 0A25
Signing time: Mon 04 Aug 2025 09:01:50 +0000
Manifest this update: Mon 04 Aug 2025 09:01:50 +0000
Manifest next update: Tue 05 Aug 2025 09:01:50 +0000
Files and hashes: 1: 3-lLWfL65uJnHZ2rztKfPXmI6kg.roa (hash: TNLFS3eE9Ow6yD/bR32mYv3A5v+ZXVoId2+UI7n/x9s=)
2: b5NgtvWDmq_c4hzW3nY72qJr-_A.crl (hash: SV5slQX6miS1uvU9av+8eVTc246lOZALWZiz3t3iKfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:d4:53:23:8f:4f:d8:a0:49:7c:16:d7:5f:3a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Validity
Not Before: Aug 4 09:01:50 2025 GMT
Not After : Aug 5 09:01:50 2025 GMT
Subject: CN=039f866da77f88e5c7c5a7c77a956fdc77dad8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:20:87:4d:18:d4:99:2d:ff:71:5f:10:11:
a7:85:fd:66:32:ca:a5:c0:e9:c1:ef:03:dc:10:24:
bb:83:a5:78:31:af:ac:98:f8:71:d7:20:a5:96:70:
42:4b:d1:ef:7f:66:05:fc:86:62:94:8b:2f:c5:d4:
97:32:dc:53:ef:1d:ae:39:42:73:84:a2:f7:91:d7:
9f:dd:14:dd:c4:c0:ba:08:08:89:59:a0:38:43:cb:
d3:c2:94:4d:18:e4:1c:7a:90:bc:e1:1d:19:44:a4:
44:d6:20:9e:13:9b:a7:29:4d:cb:69:f3:3e:38:25:
7a:f2:0b:55:39:36:c1:96:f2:49:2f:a8:9e:2a:db:
86:64:26:3c:6b:a0:4c:9a:ed:9e:1f:98:31:fe:64:
79:c5:61:e0:f3:04:09:04:78:51:e5:9e:6e:a8:76:
98:4b:36:e7:96:d1:79:2e:2a:cb:ed:fb:6a:24:b6:
95:45:58:c0:60:d9:d0:59:27:b4:59:88:0e:42:37:
36:40:9d:08:33:b3:1e:29:61:d2:f2:fa:d3:da:68:
f6:8e:e2:1d:e9:ad:19:85:9d:77:6d:40:ef:02:ac:
37:d6:03:45:83:14:4a:81:4f:bc:b5:24:56:99:c1:
c9:e3:3e:dc:f0:39:76:05:83:c2:2d:6d:f8:60:0c:
ec:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9F:86:6D:A7:7F:88:E5:C7:C5:A7:C7:7A:95:6F:DC:77:DA:D8:E2
X509v3 Authority Key Identifier:
keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:da:49:f6:46:c0:87:9d:d3:a3:54:4f:25:80:d6:5f:a8:8d:
60:1b:bd:8b:20:0f:4c:77:5e:ad:7b:88:01:5c:fb:ba:6e:60:
56:7a:6d:69:9d:44:9f:bc:a0:76:7b:43:a5:2d:44:2c:bf:e6:
33:f8:2e:06:bb:1d:34:39:3b:91:f3:72:6a:07:32:33:83:20:
fd:d4:88:a7:24:45:4f:5e:bf:6b:41:e0:70:a7:20:bc:c5:68:
12:bb:8c:fb:2c:89:f1:bb:d9:c3:b2:d3:0f:a5:49:26:e9:c0:
4c:eb:15:41:21:aa:08:e8:da:a3:d9:f3:b5:c4:8c:cf:4e:42:
dd:ad:06:36:61:eb:bc:3e:49:35:64:18:e7:73:b7:df:32:5f:
35:dc:dc:3e:1e:71:c8:c8:0b:43:b8:59:07:fc:97:a4:0a:ee:
1e:65:3f:01:85:d5:91:f3:3f:ed:ee:e4:16:00:66:cf:82:90:
24:7f:b2:d4:95:70:da:b4:51:1a:ff:e1:dd:da:02:6f:16:62:
42:a1:be:7c:a9:00:b9:6a:c2:e6:7e:35:45:0a:ba:2b:ec:e7:
38:3e:68:67:25:da:e0:4f:48:51:4f:6e:ac:50:fb:4b:46:92:
1c:18:0f:f1:15:28:82:ab:35:93:25:4c:92:29:23:33:8c:1c:
5e:8f:02:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:34 2025 by rpki-client