Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
File: b5RYfBGZosPfQBl7GfNlDGF94UU.mft (raw, json)
Hash identifier: 0KZZXU7bLDFLqFBtXqGyYNiXdAM4IqlDm9oDQa0P/KA=
Subject key identifier: E8:79:06:2F:AE:DD:2C:07:21:E0:90:5C:B4:3B:88:76:81:63:69:67
Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145
Certificate serial: 019A5564777343C1449EDFC5E960D34E0EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
Manifest number: 0231
Signing time: Wed 05 Nov 2025 19:00:38 +0000
Manifest this update: Wed 05 Nov 2025 19:00:38 +0000
Manifest next update: Thu 06 Nov 2025 19:00:38 +0000
Files and hashes: 1: b5RYfBGZosPfQBl7GfNlDGF94UU.crl (hash: adpD8UrayUjraqRmWUsMaGwxZFNTYG52Gx8BGx7S0LE=)
2: ePKBy3s7DCa8LCYPrDuLad8LQds.roa (hash: IOfYTJhGS5ceI6YMnArvR/xLdlNTNiNsJ5hdFLFW72Q=)
3: xTCv3RXSZS1iTavCUS9l9JR_D5E.roa (hash: A3hLBLSXg8J7g4DoDdWC6smLJPKHGcfSEfHqAmRLjjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:77:73:43:c1:44:9e:df:c5:e9:60:d3:4e:0e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145
Validity
Not Before: Nov 5 19:00:38 2025 GMT
Not After : Nov 6 19:00:38 2025 GMT
Subject: CN=e879062faedd2c0721e0905cb43b887681636967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:ec:59:cd:41:12:ef:d1:47:88:62:7a:1d:
4e:38:1f:94:41:61:5b:8a:1d:98:06:82:f1:b5:96:
71:6a:60:47:2c:b2:56:b4:66:b7:9b:00:4e:9b:0d:
7a:b4:40:ed:d9:79:e7:e8:a7:22:a8:5f:1d:47:60:
fb:fa:50:28:0d:a6:39:e3:fa:39:56:5d:d2:e2:c3:
81:03:be:2a:63:55:34:68:8c:48:43:ee:dc:5c:07:
6b:2a:1a:5b:51:11:4c:bf:27:67:87:b6:2a:5b:0b:
71:35:64:60:e2:c4:15:0d:bf:a5:d1:a5:2f:74:5c:
45:91:72:08:54:0b:a5:81:a3:2f:53:dd:92:57:f3:
ba:5c:e6:1d:6f:8e:36:3d:83:f4:5c:df:93:4c:03:
3d:af:99:4b:15:3e:5b:1f:69:bb:7a:6f:86:7d:aa:
8b:8a:90:0d:1c:cd:12:f0:20:1e:a6:f6:62:89:ac:
65:57:af:f5:72:c3:b4:ae:52:c2:a8:33:ba:91:61:
fe:34:94:ce:cf:dc:b9:7c:c1:de:3b:83:43:8a:2e:
a2:6a:7f:73:a9:a8:07:76:c0:bc:8f:98:ea:d4:fe:
74:1d:76:64:e4:8f:d1:17:22:d5:a5:8e:6c:70:0e:
24:87:e6:b6:28:57:8c:84:73:19:12:a0:9d:6c:ec:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:79:06:2F:AE:DD:2C:07:21:E0:90:5C:B4:3B:88:76:81:63:69:67
X509v3 Authority Key Identifier:
keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:41:57:83:e7:a8:2c:8e:30:a3:85:2f:85:c9:fc:45:e0:19:
70:df:f2:f6:e2:ae:cf:59:20:2e:4b:dc:e1:27:6d:e1:d5:97:
36:0b:9a:24:00:37:5b:03:46:98:66:f7:42:2e:72:74:61:e2:
53:62:95:59:41:7b:42:5e:72:d6:d4:e3:c9:f5:7b:c5:f6:b2:
50:cc:bd:82:bb:3d:35:f5:2d:8f:7d:67:42:8c:9e:cb:36:34:
e0:2b:db:94:9f:23:7d:da:1b:66:e6:d1:81:44:95:d4:39:6d:
18:a8:38:7b:c7:5a:07:b5:d9:55:2e:2f:6f:02:3a:77:c4:f8:
ca:42:36:52:92:59:16:5a:a5:f2:1e:09:c5:d8:4e:19:aa:e6:
f7:a2:3c:65:06:f5:0d:23:36:25:c2:9b:92:3c:bb:00:8a:1d:
cf:33:5c:5f:37:27:9d:e6:e6:1e:70:5e:74:56:2c:b5:3d:6b:
86:cf:a4:c5:c2:fd:18:fa:9b:b2:3b:75:e7:17:5b:77:9c:25:
e6:44:78:e6:ac:19:2c:21:aa:b1:31:f2:6a:42:0e:43:b1:b4:
a9:8f:1a:67:fb:2f:a6:4b:ed:15:fa:5b:d9:37:30:01:60:9a:
6b:90:8f:e3:7d:9f:06:7d:b6:7b:0a:82:8b:09:c8:da:a2:d1:
ef:9e:65:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:50:25 2025 by rpki-client