Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier: ZHyDODzgnxp087r/aUa1poqjDxKJ/iBw8r26ytZeKNg=
Subject key identifier: BB:91:FF:51:1D:34:83:D0:09:D1:97:D5:5D:6E:A7:3B:5B:FD:09:33
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 019873E2321CBA29F460C8B265173D46D9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 07:01:00 +0000
Manifest this update: Mon 04 Aug 2025 07:01:00 +0000
Manifest next update: Tue 05 Aug 2025 07:01:00 +0000
Files and hashes: 1: JlKwrg5m2lqERiKY6JmlhVBin6Y.roa (hash: BkRh9N3Osfkv0XYuGUi4VGfe9yFTNu672Q4bahAacS8=)
2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: s0SFEw2wFT5w7SfwGJWxKBYk0kqoLFQyIHejhbmJ66Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:32:1c:ba:29:f4:60:c8:b2:65:17:3d:46:d9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: Aug 4 07:01:00 2025 GMT
Not After : Aug 5 07:01:00 2025 GMT
Subject: CN=bb91ff511d3483d009d197d55d6ea73b5bfd0933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:73:a1:00:dd:e2:e8:a1:25:d3:fb:b3:4d:
18:de:38:82:46:76:c8:e3:9e:6b:20:ec:40:b8:36:
82:b5:f4:00:3f:53:15:12:49:c2:47:ae:7e:9a:b1:
eb:da:a6:f8:15:10:3c:e1:c3:0c:96:b0:62:8a:7b:
0a:23:92:b8:53:36:6f:1d:d7:3a:ba:0f:55:ca:a1:
7e:88:9f:89:3c:37:52:74:21:36:42:70:db:29:8e:
75:33:30:77:9d:aa:61:94:74:7b:7f:29:9f:03:1a:
2d:58:ef:18:c3:c7:df:81:eb:0f:af:08:81:01:79:
a4:df:62:ac:f9:4a:2f:ab:2c:59:c3:de:a0:d0:13:
b1:8c:5e:ed:f7:d8:c2:17:e2:b4:e3:42:84:e6:ee:
e9:3a:78:27:61:c3:fb:72:60:53:78:26:84:88:f1:
9e:ef:af:86:8e:09:92:27:7d:c2:6f:2f:69:bb:ae:
7c:ef:90:46:c0:12:6e:4b:f4:8b:36:a1:ba:4b:34:
ae:f1:7b:a8:bb:4a:46:8f:d9:12:13:ae:73:f3:41:
fa:36:aa:e0:67:b0:b4:e4:1b:ec:23:6e:72:d2:06:
6a:8c:a8:47:df:9f:fb:54:c0:7a:4a:96:db:44:8c:
17:72:c5:19:90:85:1d:30:2e:45:11:24:a7:73:8c:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:91:FF:51:1D:34:83:D0:09:D1:97:D5:5D:6E:A7:3B:5B:FD:09:33
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:1a:3d:f5:d6:41:e2:03:3c:bb:f5:bc:aa:fe:f6:98:15:01:
7a:be:a9:8d:ce:06:a7:ae:72:d4:37:90:51:14:54:10:52:a4:
5e:cc:8d:cd:31:a2:72:86:b4:ea:c0:b6:8e:e6:e6:3a:95:72:
2c:54:c7:82:d3:98:de:39:32:26:3b:37:88:fb:5c:05:2b:fa:
8d:46:18:65:ba:62:d3:7c:e4:e7:a7:92:bb:93:96:56:51:84:
fd:61:21:e4:a7:52:31:cb:e6:b0:18:3b:bb:c9:00:c7:fc:09:
19:dc:9b:1d:b1:ad:a9:50:cb:17:ed:86:50:17:b6:2f:bc:e1:
e7:95:75:bc:4a:c3:09:61:47:c8:3a:29:cf:d1:2a:a9:90:66:
fa:a3:d9:30:09:5e:d4:6d:48:23:de:f8:ed:94:4c:58:fa:06:
0f:5b:f9:b8:ba:12:49:f6:30:31:ce:c6:fa:f6:b0:94:b3:62:
5c:04:b6:c1:87:33:71:c0:a0:71:4e:86:2d:c2:86:61:4d:d9:
5d:e3:67:6e:eb:e6:fb:e4:5a:06:2c:f7:3e:4b:4a:24:73:53:
77:ce:2e:6a:99:f3:c6:a9:5f:ef:45:0c:a8:9f:b4:df:3f:50:
29:7a:44:77:d4:4e:84:4b:8b:62:38:e9:11:88:84:2f:3b:d1:
f4:67:70:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:05 2025 by rpki-client