Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: b06Ioy47oBwa8KYWWz1TDfcstP/ozz7MBPfad1jum/U=
Subject key identifier: C5:65:3E:2E:60:E9:A4:D4:D7:E8:A2:EA:42:88:E7:74:AD:A8:30:6E
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 01987C775320BD412EFFDB0B6241EC121E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 0D6A
Signing time: Tue 05 Aug 2025 23:00:51 +0000
Manifest this update: Tue 05 Aug 2025 23:00:51 +0000
Manifest next update: Wed 06 Aug 2025 23:00:51 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: 2zW9sgASlWOfAFHWIN41LtMxs6I2bhePwFJWDdphJbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:53:20:bd:41:2e:ff:db:0b:62:41:ec:12:1e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Aug 5 23:00:51 2025 GMT
Not After : Aug 6 23:00:51 2025 GMT
Subject: CN=c5653e2e60e9a4d4d7e8a2ea4288e774ada8306e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:51:40:d3:63:13:8c:e2:51:45:01:b6:6d:
fd:3c:1d:75:ab:86:19:eb:78:f8:95:5b:f7:e0:b2:
72:8e:20:05:20:8c:6d:bc:2f:25:41:ec:e4:83:32:
cf:66:ae:b2:bf:94:7e:f0:43:4e:62:a9:94:dd:21:
8b:bb:77:c9:55:92:8b:d2:58:2c:9f:09:14:9c:34:
98:cd:07:ff:eb:75:d4:29:61:ac:4a:e9:b0:d7:85:
14:74:fa:76:47:9f:c2:83:4e:92:cc:1b:1f:29:0a:
1e:37:54:50:31:5c:80:98:4b:83:e8:6c:cd:94:82:
9d:22:1f:d8:d8:10:e3:59:3b:00:bb:87:be:98:c6:
1a:83:22:40:13:04:fe:79:2b:90:cb:0e:3d:d9:32:
4c:3e:22:29:66:37:0f:1d:1a:68:e6:56:2f:36:0b:
22:78:37:af:6a:bd:ac:37:b9:48:63:84:c7:68:22:
51:1f:b4:70:13:81:ba:08:eb:5a:b6:d3:30:b2:24:
e1:6e:06:62:36:69:fe:f9:87:e1:15:57:1a:92:2a:
79:90:e2:91:03:9b:21:39:e3:5c:a8:c4:bd:96:9a:
85:65:2c:38:f3:36:92:7c:8f:06:6b:f2:c9:bc:9c:
d4:37:b7:21:09:18:a0:8e:0a:74:be:fd:87:58:e0:
6d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:65:3E:2E:60:E9:A4:D4:D7:E8:A2:EA:42:88:E7:74:AD:A8:30:6E
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b9:ff:cc:89:d5:89:12:e0:19:94:1e:ae:2a:c1:15:37:a2:
b9:bc:7d:4b:ef:53:be:1b:7e:50:c8:5c:60:0a:44:7e:58:06:
28:40:5d:c2:1a:64:4e:8f:6d:17:11:74:4c:33:de:92:33:94:
97:87:1b:46:1b:85:63:22:03:da:0d:c9:cc:34:63:81:25:2b:
18:d6:bc:f2:2f:b0:76:69:0a:e3:c1:28:db:93:18:04:2b:5c:
dc:e5:72:1c:b4:1e:e8:25:82:6d:29:1d:b6:11:82:5b:fc:4e:
58:4c:47:7e:bd:ab:78:16:75:b7:f5:06:96:c5:06:45:7a:d9:
01:0e:6a:35:0d:3f:c8:a7:56:7e:8c:af:6a:6f:d4:bb:ed:a1:
22:48:b8:60:90:83:24:5b:52:7e:74:5c:5f:a4:82:82:63:a3:
cd:41:db:68:87:9b:90:37:25:84:23:6e:d5:da:92:3f:3f:3c:
37:d6:34:dd:16:6b:e4:50:ca:57:7d:1b:56:64:93:f5:d8:6f:
6a:5c:2f:89:1b:37:48:b3:38:74:8b:f4:6b:ca:e5:20:61:39:
20:be:3d:37:96:4c:65:5e:c5:c4:b6:f0:c8:5e:e3:c7:1e:30:
6a:a6:6e:2e:33:86:e9:ad:9b:2a:64:2e:03:bc:c6:34:0e:9c:
91:24:91:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:23 2025 by rpki-client