Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier: s+9NQYEXzhR0Aay3KUswadGMm3NMi1q5K8B0EIDOzpc=
Subject key identifier: EC:20:8D:C1:D0:DB:03:4E:C9:6C:A1:A8:4B:DC:9E:2A:17:7A:88:11
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 019A4F2AEF07C5F7D5B7C1FA0764C753AE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number: 0E33
Signing time: Tue 04 Nov 2025 14:00:04 +0000
Manifest this update: Tue 04 Nov 2025 14:00:04 +0000
Manifest next update: Wed 05 Nov 2025 14:00:04 +0000
Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: a8rLi/kR3RHkcK76EjYRWV7qkzoOs4tUUAa0wiEGFtA=)
2: uMaOUumndZxKeHpsLiDjyBlhUEc.roa (hash: Vgb/fd+KM9R/ibiYhniBySYsrSRU1XkwhrI3i4xQXFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:ef:07:c5:f7:d5:b7:c1:fa:07:64:c7:53:ae:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Nov 4 14:00:04 2025 GMT
Not After : Nov 5 14:00:04 2025 GMT
Subject: CN=ec208dc1d0db034ec96ca1a84bdc9e2a177a8811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:66:d5:aa:64:a9:54:fb:9e:22:2f:ed:84:
90:c1:27:ca:2f:7d:d3:f6:06:75:21:09:2a:0c:45:
82:84:88:0e:42:57:96:e9:a1:09:ad:67:fb:88:95:
b7:5f:e6:13:21:1a:1d:d3:b9:fb:8a:6e:e1:51:6f:
32:7e:cf:35:79:60:6c:72:41:ab:43:10:5e:5b:7f:
dc:97:76:6e:b5:3d:97:e6:02:09:57:70:d7:44:72:
d3:ab:9c:9f:36:71:94:3b:4c:98:fb:e6:fa:ba:0b:
a2:c0:08:6f:2d:71:48:0e:1f:d8:aa:bf:75:0a:25:
ef:89:b4:fe:43:22:aa:52:cf:64:c9:3e:0a:28:b3:
0b:35:46:12:a8:c0:b7:8a:0f:c3:c5:55:61:bf:69:
db:02:b7:e9:44:76:b4:b5:4d:da:cf:e9:d1:bf:4b:
e4:b1:29:7f:e5:fc:7b:e9:d6:ce:18:d7:e0:5a:87:
f4:47:ed:00:ac:67:ed:da:c1:c5:2c:a9:a7:3c:4f:
05:37:26:ee:9c:b6:0f:bb:41:a6:f2:85:1f:69:6d:
8d:ad:16:ef:76:38:6b:d3:e3:7d:20:e4:2f:15:3d:
a2:4f:ec:6a:4d:25:5c:a9:15:54:cb:bd:d5:31:41:
2c:3d:88:77:ad:aa:66:5f:9b:26:d1:53:d7:04:8e:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:8D:C1:D0:DB:03:4E:C9:6C:A1:A8:4B:DC:9E:2A:17:7A:88:11
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:80:46:fb:97:ee:e6:f9:cc:49:37:a6:e8:1c:50:98:06:c5:
ca:0f:16:81:20:3c:1c:8e:3c:f8:fe:64:56:0f:af:b0:8d:16:
9d:31:f2:f8:8b:f4:11:c3:10:87:60:f8:06:94:60:18:67:cc:
71:04:30:e6:cf:fa:83:f9:d0:85:7d:21:c5:82:c2:7e:af:00:
27:4d:45:07:18:4e:d6:fb:f3:fb:ff:f4:35:0c:39:54:51:46:
9c:34:9d:de:2d:64:41:33:aa:86:b8:9d:0a:2b:ab:60:87:34:
41:96:67:e1:89:e5:b0:cf:6e:9b:62:2b:96:a1:40:27:3b:5e:
a6:81:74:14:9c:9c:9d:13:1d:a3:2a:cf:88:b3:71:3e:16:9a:
53:5f:75:13:a8:2b:c0:6f:c6:69:f5:28:bd:4a:11:cc:34:f8:
5d:4b:65:29:6a:c8:b0:9d:1d:8f:fe:a8:27:e3:c6:27:4d:bf:
1d:e8:6e:b3:e8:8b:84:42:fb:0d:79:90:fc:5a:49:6e:57:1e:
3b:8e:21:27:47:b6:53:75:69:ef:10:39:6b:f4:15:b4:63:f9:
98:64:6c:de:71:50:5b:b3:d1:e1:40:26:6e:c6:f1:d4:57:77:
d6:99:6b:be:19:30:83:c4:91:e4:86:d7:3e:ea:f4:2f:8d:b2:
79:bc:bd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:23 2025 by rpki-client