Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier: 6rGfkZPP8zycplENLr6G9/ytntafUrdDh6cx7dZwtoM=
Subject key identifier: 3E:FF:FC:C2:B8:C8:9B:B1:D8:21:FF:F0:76:A4:8B:1E:80:9E:A5:01
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 01987ED3D22382BAA8383AB14E5877DCEEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number: 15AF
Signing time: Wed 06 Aug 2025 10:01:07 +0000
Manifest this update: Wed 06 Aug 2025 10:01:07 +0000
Manifest next update: Thu 07 Aug 2025 10:01:07 +0000
Files and hashes: 1: NVJ94OZbevHGEGJPauO8yOgu7g0.roa (hash: zV1VLUJ6QJt3I76otxCqQp6X0KRlaXT/XwLt7w+Duqc=)
2: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: BH9olIQFD54/c2Q8JBrvIqlXoJIr8McbEuck+GENlk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:d2:23:82:ba:a8:38:3a:b1:4e:58:77:dc:ee:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Aug 6 10:01:07 2025 GMT
Not After : Aug 7 10:01:07 2025 GMT
Subject: CN=3efffcc2b8c89bb1d821fff076a48b1e809ea501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:09:35:86:8f:1f:01:6e:a6:67:e8:8f:ae:
cf:19:b9:eb:78:1f:14:fa:5f:1f:45:54:23:0c:21:
ec:26:18:bd:54:e5:90:01:39:f7:01:dc:31:86:90:
e3:76:91:ca:fd:8e:f0:02:0e:8c:94:45:7b:cb:f7:
c3:9e:57:61:a0:57:52:f1:69:29:76:b4:7b:f6:1a:
b4:df:af:28:ea:55:f4:cb:81:0c:30:cf:fd:a2:bd:
4f:f5:8c:b1:0c:25:b3:05:33:0b:79:1c:e5:85:3a:
75:9a:cf:6f:ad:cb:f4:76:df:a4:10:6b:a3:b2:ed:
ae:3d:e5:10:ed:07:44:40:e6:25:9d:b8:a0:41:75:
ae:61:d3:8e:68:29:d7:6c:ad:50:52:3f:0d:40:b9:
8d:56:01:10:9f:07:5a:0d:3c:cc:d3:fd:f0:08:33:
bb:b0:81:ef:05:7b:c8:9d:25:21:b3:29:e1:17:d5:
58:a9:d2:d6:8e:24:99:60:fc:48:80:d1:3d:38:c1:
39:b9:5d:b0:23:c8:c6:39:8f:93:12:c5:d4:22:23:
83:1d:d5:72:28:4a:22:84:a1:17:e2:a3:dc:1d:e9:
8e:9f:83:21:9e:b3:2d:00:92:df:dc:4a:2a:94:7e:
a4:42:b9:ab:72:82:92:37:ae:2d:4f:03:ad:3b:5f:
f9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FF:FC:C2:B8:C8:9B:B1:D8:21:FF:F0:76:A4:8B:1E:80:9E:A5:01
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0d:46:d4:ac:9d:b1:b5:5f:c2:1c:b7:28:e1:2e:3c:fc:5c:
47:e5:46:5b:53:35:5a:34:1b:5d:6b:4d:30:d1:63:7c:4c:c4:
d1:c0:26:fd:ae:87:65:9c:18:4a:43:02:a5:d3:a1:88:bc:5b:
7b:e6:9a:88:de:86:4d:b0:0a:9e:2d:11:d5:bf:4d:43:16:4a:
db:76:ea:70:87:7e:7b:b2:ef:13:41:0f:78:a2:dc:17:74:d9:
3a:05:ca:34:bd:bd:4b:2e:7d:9d:95:ee:80:69:66:87:52:2d:
e8:e2:62:62:3c:3c:79:2f:9d:e3:bf:b3:66:f0:6f:f8:27:c5:
01:31:c0:08:3c:72:08:76:d4:a0:f5:69:01:56:0d:27:92:54:
76:a3:76:97:21:90:a7:13:13:3f:83:f0:29:f4:1e:31:74:6c:
51:cb:4f:dc:1e:bf:ec:84:d2:8f:cc:68:2c:cf:bd:e3:e5:c3:
c3:e3:d5:37:b0:bd:79:32:b4:d8:7d:3c:e9:b0:d3:1a:75:15:
27:c5:9e:23:2f:e6:15:ca:30:88:2d:4e:3c:e7:34:88:c2:3a:
38:9d:a7:e3:dd:3e:68:7c:fd:13:d7:59:8a:f9:8a:b1:34:f3:
cc:59:ca:4f:e4:6d:16:0e:72:20:9d:27:26:d0:94:b0:f6:1a:
1f:6e:06:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+09IjgrqoODqxTlh33O63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmN2ZjZWE0ZjdmY2Q3YmQ4MWRkNTk4MTUzZGQ2ZWU1YjEy
ZTQ3ZGYwHhcNMjUwODA2MTAwMTA3WhcNMjUwODA3MTAwMTA3WjAzMTEwLwYDVQQD
EygzZWZmZmNjMmI4Yzg5YmIxZDgyMWZmZjA3NmE0OGIxZTgwOWVhNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu8JNYaPHwFupmfoj67PGbnreB8U
+l8fRVQjDCHsJhi9VOWQATn3AdwxhpDjdpHK/Y7wAg6MlEV7y/fDnldhoFdS8Wkp
drR79hq0368o6lX0y4EMMM/9or1P9YyxDCWzBTMLeRzlhTp1ms9vrcv0dt+kEGuj
su2uPeUQ7QdEQOYlnbigQXWuYdOOaCnXbK1QUj8NQLmNVgEQnwdaDTzM0/3wCDO7
sIHvBXvInSUhsynhF9VYqdLWjiSZYPxIgNE9OME5uV2wI8jGOY+TEsXUIiODHdVy
KEoihKEX4qPcHemOn4MhnrMtAJLf3EoqlH6kQrmrcoKSN64tTwOtO1/5MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7//MK4yJux2CH/8Hakix6AnqUBMB8GA1UdIwQY
MBaAFG9/zqT3/Ne9gd1ZgVPdbuWxLkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTct
ZWY1MThiNGI0NjNmLzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTctZWY1MThiNGI0NjNm
LzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQ1G1Kyd
sbVfwhy3KOEuPPxcR+VGW1M1WjQbXWtNMNFjfEzE0cAm/a6HZZwYSkMCpdOhiLxb
e+aaiN6GTbAKni0R1b9NQxZK23bqcId+e7LvE0EPeKLcF3TZOgXKNL29Sy59nZXu
gGlmh1It6OJiYjw8eS+d47+zZvBv+CfFATHACDxyCHbUoPVpAVYNJ5JUdqN2lyGQ
pxMTP4PwKfQeMXRsUctP3B6/7ITSj8xoLM+94+XDw+PVN7C9eTK02H086bDTGnUV
J8WeIy/mFcowiC1OPOc0iMI6OJ2n490+aHz9E9dZivmKsTTzzFnKT+RtFg5yIJ0n
JtCUsPYaH24GYg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:19 2025 by rpki-client