Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier: vIzBBImunykXLee9fWshVKpO5mBLf6QYurKvK91hvtc=
Subject key identifier: 85:37:97:E7:66:DE:8D:20:6B:B4:C8:04:A0:83:DE:EA:66:8A:5C:A0
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 019874190D036F04F52CE72BCCC5F13EAAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number: 0D3D
Signing time: Mon 04 Aug 2025 08:00:55 +0000
Manifest this update: Mon 04 Aug 2025 08:00:55 +0000
Manifest next update: Tue 05 Aug 2025 08:00:55 +0000
Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: jYDtHAvpX+So9BWMIGpUdooDrIFtOroZiPKd6Iu9E+4=)
2: uMaOUumndZxKeHpsLiDjyBlhUEc.roa (hash: Vgb/fd+KM9R/ibiYhniBySYsrSRU1XkwhrI3i4xQXFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:0d:03:6f:04:f5:2c:e7:2b:cc:c5:f1:3e:aa:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Aug 4 08:00:55 2025 GMT
Not After : Aug 5 08:00:55 2025 GMT
Subject: CN=853797e766de8d206bb4c804a083deea668a5ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:fc:2b:6b:a4:38:f4:97:e7:c7:c4:04:ea:
1d:93:31:f1:f7:ef:27:f8:f5:d1:bc:8a:55:c2:04:
7f:4d:87:32:f1:bc:cb:56:ed:c2:21:d9:55:92:ef:
dc:21:7a:30:76:78:7d:29:e9:96:5a:ba:48:4c:2f:
35:39:e0:f7:55:cc:9d:35:c8:5e:ff:93:8c:d6:6b:
75:85:b8:38:04:81:d6:98:3a:1c:92:78:4c:4e:56:
a9:cf:db:c5:cb:e9:d8:c3:9a:4b:99:b2:72:d3:0a:
01:ea:f3:9b:25:f8:0a:17:f9:6a:bd:1c:90:58:c3:
14:9c:b6:a9:c0:d6:9b:85:fc:9d:99:ff:92:fe:63:
9b:96:f7:f6:65:b7:7b:dc:74:c5:e9:a7:5d:da:37:
3f:bc:77:e6:b2:3d:91:4c:cf:b9:25:0e:5d:10:26:
06:6b:62:53:6a:d0:b0:4a:ea:a0:f1:4a:54:4f:18:
77:1a:8a:27:2c:fc:81:7f:6b:b8:54:4b:43:82:e9:
22:92:27:05:be:d2:7f:03:ba:db:b4:44:cb:21:9d:
34:82:6e:0d:71:36:b5:a2:e7:d8:90:fd:87:74:34:
a0:f1:7e:6f:bf:d4:bf:d3:89:80:e2:59:f3:a3:a8:
a1:8f:62:73:94:b1:65:c4:59:76:21:d8:eb:8a:59:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:37:97:E7:66:DE:8D:20:6B:B4:C8:04:A0:83:DE:EA:66:8A:5C:A0
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c5:f7:09:27:7f:e0:33:e9:ce:22:38:3c:51:be:84:0b:6e:
54:12:99:15:cc:39:c5:6f:fa:75:4d:c1:30:6e:ad:4a:ee:9a:
d1:5c:47:b6:34:6d:44:dd:cd:b2:14:34:b2:8c:0c:b8:b5:b9:
db:a8:f8:74:3d:f8:96:49:ff:c8:a0:56:cd:91:fe:78:ae:02:
7f:f4:62:da:a9:b4:51:1e:3b:3d:ba:36:2f:38:2d:0a:77:32:
aa:89:62:19:85:2c:21:17:2f:f6:a0:9a:e2:3c:d2:b9:49:66:
15:58:b7:1f:6c:a2:02:28:2c:9f:0f:81:c8:a9:0d:fc:b0:eb:
1b:d2:fb:73:8b:02:5f:3b:7b:fe:29:fb:c3:39:fd:f1:08:8f:
09:48:d9:5b:e6:97:94:23:7b:18:b4:cd:fb:36:55:77:10:98:
d6:6f:23:b4:3b:65:16:0a:58:e1:f6:0e:fb:f5:17:e4:6f:74:
5b:e3:57:40:81:d5:eb:2e:6a:fd:0c:ed:f3:83:d6:14:cc:47:
fe:f3:5b:5d:40:75:d1:fe:8c:0f:8d:01:01:e1:1c:85:a6:68:
d2:7e:80:9d:50:a0:55:68:80:fe:2d:22:5f:89:0d:aa:9d:73:
e6:bf:5e:b7:c9:96:b3:1b:bb:87:7f:61:f2:06:54:a6:d4:8e:
dc:a6:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:05 2025 by rpki-client