Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: ZpMGfOVI58masqrIjDa9UmOYjliVWt+bVNSDrUKjH/g=
Subject key identifier: BD:DD:56:97:B4:0A:98:55:5E:79:08:B3:C2:A2:5C:37:94:9C:D1:FE
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 019A4EF47799A28E0A2A5B0A83B217A09C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 0E5C
Signing time: Tue 04 Nov 2025 13:00:35 +0000
Manifest this update: Tue 04 Nov 2025 13:00:35 +0000
Manifest next update: Wed 05 Nov 2025 13:00:35 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: n1D6a0Rwhh+vBH5PAsjQ3tgB35i+NMyjTZGwrhc/ScQ=)
2: _N04c68vWF1WhXHOL5knYD5yM1Q.roa (hash: G/pN2CsDPm/52PLm2tgxp/9Fe9uuvo9jdn7HkaDsAhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:77:99:a2:8e:0a:2a:5b:0a:83:b2:17:a0:9c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Nov 4 13:00:35 2025 GMT
Not After : Nov 5 13:00:35 2025 GMT
Subject: CN=bddd5697b40a98555e7908b3c2a25c37949cd1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:0c:b6:28:bd:d5:65:48:2e:90:92:9b:d3:
f8:8c:b2:0f:22:f5:02:6a:d5:b7:ca:37:64:50:8f:
31:d3:6e:f0:fc:53:69:1b:31:7a:fe:de:7a:45:8f:
aa:28:ab:6b:92:ec:34:ff:be:b0:5c:ff:c3:93:36:
05:7c:ff:4c:37:b7:b2:88:07:be:a7:ba:ce:53:7f:
7f:14:03:c8:a1:6a:15:2c:7b:af:62:24:77:a5:36:
58:6d:94:a9:c0:14:67:b8:2b:8f:c6:e4:64:3c:e8:
d1:2a:aa:65:13:d4:6d:d7:bb:dc:f1:e4:58:fe:d0:
15:1e:b8:1d:41:7f:f0:7b:c5:5e:fb:7e:b6:0d:26:
7f:fa:a5:33:f1:ae:5d:51:2b:b1:3d:bd:ba:05:e8:
a8:7b:de:35:39:12:aa:9e:b3:dc:06:66:5f:60:e5:
75:a9:d4:25:1e:59:a0:ab:cd:73:49:e6:4d:b5:f7:
1c:ee:a5:b0:14:15:f1:29:cf:39:9c:da:0e:df:bd:
e8:52:1f:d5:c4:e9:34:0d:a1:6d:6d:6c:4e:ae:ae:
9e:ca:f7:ad:cb:0a:96:06:7a:11:a6:4e:30:c9:0d:
36:c5:cd:4f:85:75:f6:6f:a3:27:3e:7a:52:77:6b:
04:74:06:b7:05:66:5a:58:fa:1f:0b:91:56:c5:77:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DD:56:97:B4:0A:98:55:5E:79:08:B3:C2:A2:5C:37:94:9C:D1:FE
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a9:9b:27:18:8b:31:db:bc:c6:1f:b4:0b:f7:2a:40:63:13:
ac:d0:88:da:74:d6:fe:7a:1a:1e:6f:c1:7b:4f:2d:01:80:1e:
5e:27:31:8b:cb:c5:ed:68:35:b5:58:f9:6a:04:31:8d:3f:c7:
1d:8d:30:76:65:5c:dc:6b:74:9c:d2:d3:05:03:d8:80:a6:b6:
06:bb:61:9d:d5:9c:74:53:5f:fe:0f:c2:1e:ec:f5:bd:ce:c1:
fb:71:ae:84:ac:02:fd:3d:48:c0:84:60:83:07:ea:2c:aa:a3:
8b:67:a1:92:2c:3e:c2:84:52:be:de:b8:50:f1:e9:01:e2:3f:
54:b7:fa:ff:a0:f6:8f:6b:bb:79:15:b7:be:0e:bb:0a:76:96:
37:42:5c:12:a2:c4:04:4d:a6:c3:41:0b:a7:04:6d:e2:4b:ef:
72:72:ff:8f:6d:7c:f6:bf:8e:80:77:40:9b:28:40:f7:ba:04:
1a:a8:33:35:9d:fd:a0:8b:99:81:d1:67:02:49:53:fa:b4:96:
d9:6b:eb:22:82:7c:dc:a8:a4:8f:7c:85:13:0c:e0:f3:38:e1:
08:c8:e0:a6:9c:bb:0e:4e:14:1d:a5:72:98:e5:44:e4:d5:77:
98:93:9c:4d:6e:97:77:e3:5c:a3:3b:2c:a6:e4:6c:99:ce:31:
27:01:71:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:48 2025 by rpki-client