Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File: B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier: 4th3lfoH5tfEfv8cqWU6Cif0PC4rA+HYyJNmw8mb888=
Subject key identifier: 16:D3:95:0A:1A:14:B0:B9:21:4A:33:4A:8C:9D:1D:71:22:B1:22:E7
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer: /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial: 019A52D1F5DF4753F8241F2A42A8B1C50A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number: 0DCF
Signing time: Wed 05 Nov 2025 07:01:22 +0000
Manifest this update: Wed 05 Nov 2025 07:01:22 +0000
Manifest next update: Thu 06 Nov 2025 07:01:22 +0000
Files and hashes: 1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: nRIVuFsGCQKFDV9mfjCFVW5uii1WB+dSF3VALYdDEcI=)
2: uMgXGnHJtpBZxUTOGcmdbVM1Ujg.roa (hash: 5kchvjwGIIWYfh1jo1LFwohMp5GRmL3D2YFjaqIXFeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:f5:df:47:53:f8:24:1f:2a:42:a8:b1:c5:0a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Validity
Not Before: Nov 5 07:01:22 2025 GMT
Not After : Nov 6 07:01:22 2025 GMT
Subject: CN=16d3950a1a14b0b9214a334a8c9d1d7122b122e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:92:1a:cf:77:6a:2e:8b:0d:92:cf:d2:d8:af:
11:7c:75:fb:e7:1c:7d:fc:53:d7:d4:cc:f2:b2:d0:
a3:38:8b:77:72:b8:64:77:6b:43:ab:52:90:30:d8:
a3:8e:ab:dd:50:63:2e:86:93:1a:f0:8c:11:72:fe:
a9:8a:b8:82:4d:35:32:ec:e8:53:cd:0b:e2:39:ac:
7b:7b:de:02:57:b1:13:71:33:2f:74:97:37:35:11:
f9:31:50:13:5e:b9:89:db:2f:f0:a8:b3:78:31:71:
11:f8:55:94:9b:a4:3f:a2:66:81:8a:0f:21:d6:54:
8e:76:f7:0c:94:55:0d:e9:4a:a0:ec:f0:53:5b:ba:
96:2e:6c:aa:55:7e:65:13:bf:e9:62:f5:5c:27:6c:
26:2d:a6:e3:58:05:1f:c0:26:ae:55:fc:bb:88:8b:
e3:8e:b6:2a:f6:5b:3d:a7:71:19:58:ad:2f:30:ef:
6b:76:c6:ed:2c:56:26:14:3a:f9:cd:a7:c9:dd:c9:
39:cb:cf:b7:9a:2d:ce:85:5b:97:86:c4:ef:62:06:
b2:5b:82:d2:47:36:10:ae:e1:e9:1d:4c:cd:4c:50:
cf:c4:b0:64:47:94:f0:fb:9e:1a:19:de:05:6d:4b:
39:1a:27:e0:97:2a:08:c3:e6:66:b0:3a:ea:77:74:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D3:95:0A:1A:14:B0:B9:21:4A:33:4A:8C:9D:1D:71:22:B1:22:E7
X509v3 Authority Key Identifier:
keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d0:77:d9:3d:12:50:13:27:cc:83:39:f3:ef:0c:fd:0e:d7:
ea:30:6f:8d:bd:89:b5:17:62:1b:ba:c0:d8:3c:1a:22:71:d7:
16:f7:f4:2c:93:6d:d3:73:0f:bd:be:94:bb:9b:01:54:20:49:
70:fb:1f:63:a1:72:0e:1f:bd:37:ef:c5:3e:11:29:8c:4b:6c:
20:00:46:65:b3:98:ec:ac:22:2f:a6:2a:10:9b:23:a5:d6:da:
e2:06:83:f1:7d:34:58:87:eb:76:ab:a7:07:91:8a:8c:46:b3:
5a:94:42:df:cf:14:14:72:0d:74:a1:11:18:db:33:4b:a9:5b:
79:7e:fe:a7:45:2d:d2:b9:28:e7:72:40:12:df:c1:5a:21:48:
c6:69:e3:e1:f7:1c:01:67:22:03:10:66:6a:f9:35:3b:51:67:
4f:13:ec:36:a2:87:1c:56:ff:eb:b0:ae:cd:4f:ea:bf:fb:99:
18:b9:87:fc:76:ac:1d:33:1e:e4:db:6c:11:d6:45:f8:8e:0f:
3f:4a:39:1e:87:3a:72:e5:10:d3:8f:91:6a:d3:dd:50:f4:50:
62:e1:e0:b2:1d:d5:09:94:81:63:aa:65:f1:ac:ce:e6:55:51:
4a:b7:d0:4c:4e:f1:07:46:74:2c:cf:e0:9a:cb:9b:f8:8e:ab:
73:df:81:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:52:14 2025 by rpki-client