Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json)
Hash identifier: zo6E/Y9/pb77uHxYS4o5nI7fAqZ8QcEbZsFnUAF3biM=
Subject key identifier: BD:E3:2F:C1:01:87:A0:03:CC:72:B4:72:A1:6C:CC:F3:F4:20:3C:B1
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 019882B073C811F85EAA8DD41A8E0850BF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
Manifest number: 1624
Signing time: Thu 07 Aug 2025 04:00:58 +0000
Manifest this update: Thu 07 Aug 2025 04:00:58 +0000
Manifest next update: Fri 08 Aug 2025 04:00:58 +0000
Files and hashes: 1: Gvj6G0DPkkSLihnA46d1N0vjphQ.roa (hash: pbCy8dJvrT76LkZMMvrrN/iJW8bsTC8bBcjdgpqACVI=)
2: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: GgwSDdLpTjr1L3y6+0wqEqLU6qrPHlfnND8Leqra35I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:73:c8:11:f8:5e:aa:8d:d4:1a:8e:08:50:bf:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Aug 7 04:00:58 2025 GMT
Not After : Aug 8 04:00:58 2025 GMT
Subject: CN=bde32fc10187a003cc72b472a16cccf3f4203cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:c2:d7:62:f5:b6:97:f1:c4:ac:bc:62:23:
52:d1:b0:28:ee:9c:7d:bc:89:81:98:fd:64:cb:8e:
b8:4c:19:aa:68:1b:ee:ab:54:a7:4c:d5:c2:99:20:
3d:4e:97:0b:85:9f:a7:14:84:ef:63:4d:fd:64:b1:
94:2a:98:74:9f:23:38:73:bb:8e:1f:51:d4:a2:6a:
af:fe:23:49:d5:7e:6a:6b:54:f6:2e:0f:0c:96:2d:
ec:3c:32:14:dd:f4:97:50:f4:6d:4b:7a:00:df:50:
11:13:c8:67:59:39:6a:eb:22:5e:85:46:56:98:0c:
98:3b:3a:f8:ef:fe:1b:77:89:08:0b:04:6d:47:d8:
92:b8:66:ae:d2:f3:a7:b3:37:58:f7:30:b2:99:ad:
80:bf:8b:b6:9e:e8:7b:17:21:4e:93:aa:de:8e:c6:
1c:8d:fa:c2:66:52:54:e1:62:5e:d0:7f:ea:f4:29:
84:dc:4d:c1:d4:6b:38:d9:a9:96:27:7f:9d:ee:04:
76:3b:91:92:63:f9:50:60:c6:c2:3a:6e:55:eb:f4:
f9:0e:4f:b7:ab:cd:dc:b2:42:09:87:91:ce:ad:d5:
88:3d:a6:13:a6:72:6d:2a:65:ed:4d:ee:7c:a5:87:
5b:b6:47:2b:21:5b:76:84:ee:7f:e1:6a:7e:d5:53:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E3:2F:C1:01:87:A0:03:CC:72:B4:72:A1:6C:CC:F3:F4:20:3C:B1
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1a:72:f3:e1:c9:79:b1:69:17:0e:68:48:d4:89:76:27:1e:
01:3b:3d:1a:e5:3a:39:bf:1b:3a:b4:d1:c1:b0:51:70:fb:5b:
3c:55:74:fe:50:ae:36:91:63:08:e7:88:f3:97:c8:06:cc:eb:
b2:b8:c3:fb:2f:2c:19:fd:3a:44:f1:b9:e8:c7:b8:90:51:bb:
a9:43:cf:4d:7a:95:ee:dc:50:d4:64:76:98:28:01:a3:65:9e:
6d:f2:a6:73:50:e0:7c:ad:af:16:cd:18:71:bc:2c:28:a4:fe:
b3:21:21:f0:29:2d:c1:74:64:57:dc:08:fc:7e:ce:fb:1c:20:
ee:31:dc:63:ac:45:dd:92:b6:bd:79:2e:29:0f:65:9f:dc:e5:
82:ae:fc:31:55:d4:df:e9:68:88:2d:aa:34:07:45:96:b5:6b:
0a:89:92:1d:a4:f8:65:ef:8c:27:e6:d5:65:97:e2:1e:8c:b7:
bc:6b:28:3e:5d:03:c4:58:63:fb:51:12:ce:8e:50:f1:99:79:
99:fa:14:09:0e:33:c5:87:e4:89:b4:83:2e:a8:01:75:52:63:
37:e0:e6:cb:36:82:04:0c:c9:b3:38:05:39:bd:ba:a7:0d:7c:
8f:2c:05:93:00:27:8f:f0:51:98:51:c8:0e:bc:70:4b:b1:58:
76:ca:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:12:24 2025 by rpki-client