Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
File: b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft (raw, json)
Hash identifier: CZNPsiXA/3lHdQBkQS+9LB+P61VDZwP+G7FglKYx1uY=
Subject key identifier: 4C:74:6A:78:8A:5D:89:12:7E:FB:C8:66:AB:BA:BF:31:AF:56:DB:AB
Authority key identifier: 6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E
Certificate issuer: /CN=6f7fa37185a22944a607d9a94f9885997d851b1e
Certificate serial: 019A4DE1997F2471C861228BA0B0ACF4D6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
Manifest number: 0998
Signing time: Tue 04 Nov 2025 08:00:21 +0000
Manifest this update: Tue 04 Nov 2025 08:00:21 +0000
Manifest next update: Wed 05 Nov 2025 08:00:21 +0000
Files and hashes: 1: 7oPgYuLkR8YeCeBAjdj-EV5NcO8.roa (hash: cfjdHkH+PZdGo+DIF9TmRoRCIzPJW7XiEbCIBO7MIlM=)
2: b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl (hash: QzAP1JGbKN9cVKXDYBFhbmtk+9EyIP2XNtDqFW8d5cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:99:7f:24:71:c8:61:22:8b:a0:b0:ac:f4:d6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fa37185a22944a607d9a94f9885997d851b1e
Validity
Not Before: Nov 4 08:00:21 2025 GMT
Not After : Nov 5 08:00:21 2025 GMT
Subject: CN=4c746a788a5d89127efbc866abbabf31af56dbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:43:ee:b9:c5:7a:15:b7:5a:f6:90:a7:69:
b6:28:eb:35:b6:73:75:64:3c:b9:f9:47:91:b9:6d:
64:e8:65:e4:be:9a:6b:a8:53:02:26:dd:cb:d0:61:
b5:f9:67:2d:3a:20:ff:d3:7e:5d:3b:b4:69:dd:a7:
23:63:0b:df:16:06:6f:44:08:b5:b7:67:85:56:10:
18:7a:a8:71:48:13:5f:33:96:b6:13:74:ea:43:d0:
fe:4c:65:ab:6e:82:8d:36:80:a6:39:15:37:1c:b3:
3e:cc:e9:61:5d:51:19:5b:09:81:ff:04:eb:2c:7b:
36:41:3c:08:d8:8d:01:d2:f2:3d:9d:1b:89:e9:67:
28:7e:a7:83:1d:6a:d4:9e:f1:c0:e1:6a:76:65:87:
19:2e:4c:9f:f3:f4:34:a8:aa:ae:ef:10:78:61:6a:
e0:4e:cd:54:ff:4e:b0:b3:30:4b:71:a2:20:e0:fb:
bb:d9:cc:c4:74:08:fb:33:8f:8d:56:86:da:89:8d:
02:42:33:fc:8f:59:cd:f6:d7:20:b2:68:cd:84:34:
a8:34:92:c4:a6:05:81:e7:ef:db:c4:66:c7:e9:e7:
4d:73:cb:d2:21:31:14:cc:bc:dd:8a:27:22:cd:f1:
4f:55:5c:9c:f3:6e:ed:a4:4a:01:8c:4b:fd:e5:61:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:74:6A:78:8A:5D:89:12:7E:FB:C8:66:AB:BA:BF:31:AF:56:DB:AB
X509v3 Authority Key Identifier:
keyid:6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a4:58:74:07:df:d0:c3:4a:80:49:1e:af:27:c3:5a:b4:6f:
f3:26:1a:d2:50:f5:bc:cb:b6:8a:23:1f:e4:87:bb:31:30:4b:
d6:a9:73:df:34:14:c6:5f:db:48:ce:13:df:15:7d:77:10:34:
31:3d:5d:eb:dd:6f:40:25:4b:be:e1:37:87:62:65:01:dd:44:
23:86:70:a8:39:4c:69:83:ff:0d:f3:f7:80:25:ad:61:ed:7a:
2a:f5:c0:59:05:a2:a5:10:a9:33:c4:65:45:cb:a0:67:58:af:
e2:cf:cc:c0:90:17:0a:f9:67:b8:32:49:e7:8d:9e:c8:f3:f2:
ea:5e:47:74:12:d9:ab:98:e6:d5:e3:47:35:81:ef:1c:fd:c4:
4d:44:75:5b:1b:a1:34:13:f0:84:f2:93:a2:8e:be:75:8e:ad:
e6:f3:69:32:30:ac:9e:07:d7:5b:11:5b:70:0c:a9:51:37:b0:
1f:36:80:8a:cb:c6:d3:ed:7a:ba:ff:f8:e0:97:aa:60:7f:35:
eb:f4:3e:9c:00:29:bc:6a:a5:2d:b7:d0:cf:ae:8a:09:37:0e:
54:ea:42:d7:65:0e:79:7a:5a:0a:2a:d2:8a:20:22:84:59:19:
a0:2b:17:ba:9b:dd:76:45:c6:d2:8e:75:77:08:e2:96:47:3d:
5b:5f:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:17 2025 by rpki-client