Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier: GPM8tLli6wQepRdn5wn7dpLpyc4OOQtUF1apUW8h4+k=
Subject key identifier: EA:B7:FA:2F:E4:42:3D:D1:02:D6:28:2E:F8:22:B5:08:64:34:0A:20
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 01977640CB10CB4A4DC0578170D35BD54DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number: 1526
Signing time: Mon 16 Jun 2025 01:00:46 +0000
Manifest this update: Mon 16 Jun 2025 01:00:46 +0000
Manifest next update: Tue 17 Jun 2025 01:00:46 +0000
Files and hashes: 1: NVJ94OZbevHGEGJPauO8yOgu7g0.roa (hash: zV1VLUJ6QJt3I76otxCqQp6X0KRlaXT/XwLt7w+Duqc=)
2: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: zCZCqH9shueJ/CuejEivUazzatQWVmWpQTag76Yxh1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:40:cb:10:cb:4a:4d:c0:57:81:70:d3:5b:d5:4d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Jun 16 01:00:46 2025 GMT
Not After : Jun 17 01:00:46 2025 GMT
Subject: CN=eab7fa2fe4423dd102d6282ef822b50864340a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:cc:7b:90:20:3f:4e:7a:6b:d0:3b:3e:e9:
cd:b1:df:37:81:b9:f5:4e:1d:f6:d3:b2:62:29:c0:
90:27:aa:89:97:43:e0:a0:37:ad:12:a0:e4:7e:9d:
89:44:69:64:db:1b:4f:f8:d8:0b:30:73:49:63:22:
56:d5:44:67:33:a5:0f:e4:07:1f:9c:ec:a9:7c:af:
15:ca:91:13:07:81:c5:55:f6:9d:30:f0:e3:f7:cd:
10:91:3b:cf:0e:55:7f:0d:64:b5:6f:37:a8:bf:47:
d1:f6:cb:50:b1:d1:fe:5f:c1:9f:3a:41:2f:2b:66:
be:33:61:6e:27:0d:9d:bb:64:56:e0:83:01:06:7e:
41:db:e8:25:2a:53:53:f2:8f:58:04:f8:82:4c:61:
a4:40:e4:9e:f1:d9:0e:e5:15:e5:e2:6f:ff:c3:3e:
b6:bd:b8:07:e1:43:49:93:73:ae:83:df:33:5a:a4:
df:c3:3c:3f:df:f2:9f:6d:45:f6:b9:e2:ea:c9:1b:
c7:e2:ba:7e:23:79:50:67:2c:d8:30:df:12:82:e6:
bd:15:67:f4:68:c6:c9:0f:ec:34:e0:1d:d7:ee:22:
c8:a0:ff:98:27:56:a5:89:82:fb:bb:8e:d5:dd:f3:
56:13:ea:5d:6a:af:48:27:5e:eb:b2:29:6d:e7:c6:
9d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B7:FA:2F:E4:42:3D:D1:02:D6:28:2E:F8:22:B5:08:64:34:0A:20
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:70:59:33:55:5a:e0:59:28:6b:65:50:91:12:ca:f4:9f:99:
c6:2c:1e:82:83:9f:08:a7:d1:f2:12:37:bf:c1:b2:d8:96:b7:
2c:67:60:c6:eb:7d:97:f5:98:05:dc:54:c7:cc:1b:ca:a6:03:
a5:01:60:5c:80:ed:23:86:23:da:7b:9c:cd:64:dc:8e:8a:ee:
fa:4e:20:8a:88:73:b2:5c:d4:4b:60:9c:84:68:09:a2:23:f2:
fa:be:fe:28:78:8b:98:72:45:16:81:ac:18:ab:fb:30:33:1a:
6f:3a:5d:7f:62:04:97:0b:c2:0c:d0:66:1a:f5:a9:e7:a9:d6:
69:f3:cc:56:98:2d:82:a0:88:8e:3a:34:b7:9d:24:71:be:65:
6f:b6:39:42:fe:68:ee:28:2b:75:ec:3f:4c:b3:7f:7d:c2:fc:
d0:90:ba:23:0a:f1:cf:c4:03:58:be:d7:23:51:a4:cc:0a:28:
39:e9:a6:73:8e:ff:ab:92:0d:36:ec:c2:94:b2:b6:c3:71:6e:
74:b3:cf:b1:fd:40:c4:b6:3d:99:b6:42:43:6f:49:39:b4:84:
86:94:6a:eb:06:03:97:3f:7a:ed:f7:2d:72:42:b1:52:4a:31:
32:dc:35:4b:3b:55:5d:06:0b:c7:d2:7d:32:6d:75:15:5b:c9:
23:20:7b:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd2QMsQy0pNwFeBcNNb1U3jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmN2ZjZWE0ZjdmY2Q3YmQ4MWRkNTk4MTUzZGQ2ZWU1YjEy
ZTQ3ZGYwHhcNMjUwNjE2MDEwMDQ2WhcNMjUwNjE3MDEwMDQ2WjAzMTEwLwYDVQQD
EyhlYWI3ZmEyZmU0NDIzZGQxMDJkNjI4MmVmODIyYjUwODY0MzQwYTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3vMe5AgP056a9A7PunNsd83gbn1
Th3207JiKcCQJ6qJl0PgoDetEqDkfp2JRGlk2xtP+NgLMHNJYyJW1URnM6UP5Acf
nOypfK8VypETB4HFVfadMPDj980QkTvPDlV/DWS1bzeov0fR9stQsdH+X8GfOkEv
K2a+M2FuJw2du2RW4IMBBn5B2+glKlNT8o9YBPiCTGGkQOSe8dkO5RXl4m//wz62
vbgH4UNJk3Oug98zWqTfwzw/3/KfbUX2ueLqyRvH4rp+I3lQZyzYMN8Sgua9FWf0
aMbJD+w04B3X7iLIoP+YJ1aliYL7u47V3fNWE+pdaq9IJ17rsilt58adgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOq3+i/kQj3RAtYoLvgitQhkNAogMB8GA1UdIwQY
MBaAFG9/zqT3/Ne9gd1ZgVPdbuWxLkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTct
ZWY1MThiNGI0NjNmLzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTctZWY1MThiNGI0NjNm
LzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanBZM1Va
4Fkoa2VQkRLK9J+ZxiwegoOfCKfR8hI3v8Gy2Ja3LGdgxut9l/WYBdxUx8wbyqYD
pQFgXIDtI4Yj2nuczWTcjoru+k4giohzslzUS2CchGgJoiPy+r7+KHiLmHJFFoGs
GKv7MDMabzpdf2IElwvCDNBmGvWp56nWafPMVpgtgqCIjjo0t50kcb5lb7Y5Qv5o
7igrdew/TLN/fcL80JC6Iwrxz8QDWL7XI1GkzAooOemmc47/q5INNuzClLK2w3Fu
dLPPsf1AxLY9mbZCQ29JObSEhpRq6wYDlz967fctckKxUkoxMtw1SztVXQYLx9J9
Mm11FVvJIyB7Rg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:04:13 2025 by rpki-client