Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
File: b5RYfBGZosPfQBl7GfNlDGF94UU.mft (raw, json)
Hash identifier: Hw5HiIob8mWR8OdYu3KnEsALnPlnsSKepnxaL4tqHpE=
Subject key identifier: 1D:5E:E1:38:81:7A:A6:23:E6:BC:13:27:AD:E0:9C:4A:7C:AE:F1:A3
Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145
Certificate serial: 019874871DCC5DA3A886CADA5D0EB45CB88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
Manifest number: 0138
Signing time: Mon 04 Aug 2025 10:01:08 +0000
Manifest this update: Mon 04 Aug 2025 10:01:08 +0000
Manifest next update: Tue 05 Aug 2025 10:01:08 +0000
Files and hashes: 1: b5RYfBGZosPfQBl7GfNlDGF94UU.crl (hash: qmQzIxZ9XFl3Y0Zvfj7T45az5uuVuJnfUK2SKz4gNE0=)
2: ePKBy3s7DCa8LCYPrDuLad8LQds.roa (hash: IOfYTJhGS5ceI6YMnArvR/xLdlNTNiNsJ5hdFLFW72Q=)
3: xTCv3RXSZS1iTavCUS9l9JR_D5E.roa (hash: A3hLBLSXg8J7g4DoDdWC6smLJPKHGcfSEfHqAmRLjjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:1d:cc:5d:a3:a8:86:ca:da:5d:0e:b4:5c:b8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145
Validity
Not Before: Aug 4 10:01:08 2025 GMT
Not After : Aug 5 10:01:08 2025 GMT
Subject: CN=1d5ee138817aa623e6bc1327ade09c4a7caef1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:e2:96:cc:67:1d:1e:82:d7:f8:51:65:e2:
d0:17:6d:db:5c:09:0b:3f:8e:59:9f:72:c4:53:f5:
51:f3:65:02:72:67:8a:b6:00:4c:ad:1e:bb:04:af:
a2:0c:85:74:0b:66:68:6b:62:15:05:c1:34:96:57:
cd:a6:3d:e7:f2:bb:36:02:a0:44:00:a7:76:f0:a6:
50:5c:d4:d0:8c:86:ca:98:a9:c6:3a:a3:05:7c:92:
38:e7:c4:ff:17:6e:02:99:67:1e:ff:09:bf:24:6b:
f2:71:a7:ea:be:0f:38:79:f0:18:f7:11:18:76:13:
9e:79:33:86:c0:8f:ce:74:d0:8f:07:5f:5b:e8:d5:
b2:ea:33:bc:49:5c:11:e0:ff:35:fb:9a:83:e3:b5:
bb:f0:70:a2:d2:61:73:a7:5e:f6:68:bc:cd:29:d8:
67:da:cb:0d:1c:d6:13:ff:90:8f:3d:ae:bd:89:c6:
fe:dc:a4:1c:ce:65:22:64:55:dc:aa:44:56:20:01:
0f:db:c0:c9:c1:d2:9e:e2:12:05:a2:20:a3:69:fc:
ea:05:4b:8c:3b:9a:31:39:9f:2e:60:97:ba:46:b9:
7a:5a:86:32:b8:4e:55:a8:6e:7b:9b:d4:5b:39:cd:
f2:ea:0f:96:00:26:b5:14:22:f5:34:77:80:7c:99:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5E:E1:38:81:7A:A6:23:E6:BC:13:27:AD:E0:9C:4A:7C:AE:F1:A3
X509v3 Authority Key Identifier:
keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fd:8f:73:12:ea:a9:e2:3d:2d:27:bb:19:f3:2b:86:54:96:
87:39:aa:bc:b3:ec:e7:d5:3a:ba:0a:8c:68:63:70:de:12:04:
cf:e5:07:a3:e0:90:54:75:e6:87:8f:e1:84:1e:bf:8a:a7:6d:
49:b0:58:5b:8d:5b:7b:8d:37:10:a1:ea:82:86:48:3d:44:fe:
6a:ac:2d:1d:80:9c:1f:12:8e:1c:4f:14:50:49:91:c2:2c:11:
be:75:0d:96:ca:c3:f9:8a:5a:1a:b8:5a:cb:ac:e2:c8:1b:d2:
dd:89:f9:ef:68:44:d0:f9:ac:5e:56:35:48:63:15:24:99:b0:
17:2f:1a:f9:62:d0:b3:56:54:cd:48:d2:d3:7a:76:0a:61:7a:
36:1f:ba:38:ab:5e:70:b9:37:6b:52:79:79:95:96:29:8e:ff:
c6:0a:04:4c:f5:25:1b:e5:37:3d:31:b3:58:5b:71:97:ab:20:
ef:e8:80:66:33:d4:53:bf:76:cc:2d:9c:2a:8f:34:13:34:32:
de:ae:af:79:3b:78:fa:5e:f2:28:86:ed:e3:cf:e1:fb:d0:fe:
f1:6d:3f:35:bb:bc:19:a5:f3:55:47:bc:1e:78:2d:c9:4c:0c:
6c:3b:e0:a6:a9:9b:83:18:51:59:cc:7d:e1:52:82:9a:f1:93:
08:6c:af:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hx3MXaOohsraXQ60XLiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOTQ1ODdjMTE5OWEyYzNkZjQwMTk3YjE5ZjM2NTBjNjE3
ZGUxNDUwHhcNMjUwODA0MTAwMTA4WhcNMjUwODA1MTAwMTA4WjAzMTEwLwYDVQQD
EygxZDVlZTEzODgxN2FhNjIzZTZiYzEzMjdhZGUwOWM0YTdjYWVmMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYvilsxnHR6C1/hRZeLQF23bXAkL
P45Zn3LEU/VR82UCcmeKtgBMrR67BK+iDIV0C2Zoa2IVBcE0llfNpj3n8rs2AqBE
AKd28KZQXNTQjIbKmKnGOqMFfJI458T/F24CmWce/wm/JGvycafqvg84efAY9xEY
dhOeeTOGwI/OdNCPB19b6NWy6jO8SVwR4P81+5qD47W78HCi0mFzp172aLzNKdhn
2ssNHNYT/5CPPa69icb+3KQczmUiZFXcqkRWIAEP28DJwdKe4hIFoiCjafzqBUuM
O5oxOZ8uYJe6Rrl6WoYyuE5VqG57m9RbOc3y6g+WACa1FCL1NHeAfJnu2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1e4TiBeqYj5rwTJ63gnEp8rvGjMB8GA1UdIwQY
MBaAFG+UWHwRmaLD30AZexnzZQxhfeFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVSWWZCR1pvc1BmUUJsN0dmTmxER0Y5NFVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wYzE0ZGItODYyMC00OTk2LWFmYWUt
YjljZjQwMDk0NjQwLzEvYjVSWWZCR1pvc1BmUUJsN0dmTmxER0Y5NFVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wYzE0ZGItODYyMC00OTk2LWFmYWUtYjljZjQwMDk0NjQw
LzEvYjVSWWZCR1pvc1BmUUJsN0dmTmxER0Y5NFVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjv2PcxLq
qeI9LSe7GfMrhlSWhzmqvLPs59U6ugqMaGNw3hIEz+UHo+CQVHXmh4/hhB6/iqdt
SbBYW41be403EKHqgoZIPUT+aqwtHYCcHxKOHE8UUEmRwiwRvnUNlsrD+YpaGrha
y6ziyBvS3Yn572hE0PmsXlY1SGMVJJmwFy8a+WLQs1ZUzUjS03p2CmF6Nh+6OKte
cLk3a1J5eZWWKY7/xgoETPUlG+U3PTGzWFtxl6sg7+iAZjPUU792zC2cKo80EzQy
3q6veTt4+l7yKIbt48/h+9D+8W0/Nbu8GaXzVUe8HngtyUwMbDvgpqmbgxhRWcx9
4VKCmvGTCGyvzw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:38 2025 by rpki-client