Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
File: f3c03-oSBldBLqhn3bx7hNEyv3g.mft (raw, json)
Hash identifier: 5U6WjN1ejEz0aUgwcHPJWpzFzEtEdBRA795EX//ulAE=
Subject key identifier: BB:45:52:A9:42:EA:1F:F5:44:EA:76:16:BC:88:F8:46:D7:AF:16:F2
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Certificate issuer: /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial: 01988920F55C1B7CA37358E5C32DB18AC568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
Manifest number: 0ECF
Signing time: Fri 08 Aug 2025 10:01:35 +0000
Manifest this update: Fri 08 Aug 2025 10:01:35 +0000
Manifest next update: Sat 09 Aug 2025 10:01:35 +0000
Files and hashes: 1: 8Nz7pWuGzKddMGUQDfHKd23vSsc.roa (hash: 0Zij1MsWucwtgl3mjLbhutBq2eFIXVXGt5jqt0MvUbY=)
2: f3c03-oSBldBLqhn3bx7hNEyv3g.crl (hash: wDMOUAjTHUOHrPudv7ZFYhtOBOTij0PVu7lTZzAdbQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:f5:5c:1b:7c:a3:73:58:e5:c3:2d:b1:8a:c5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Validity
Not Before: Aug 8 10:01:35 2025 GMT
Not After : Aug 9 10:01:35 2025 GMT
Subject: CN=bb4552a942ea1ff544ea7616bc88f846d7af16f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:68:e5:1d:a5:55:97:92:6d:6c:35:76:fb:96:
ae:de:45:65:0e:68:c9:37:bb:2c:23:55:c4:81:21:
80:31:9f:22:37:fc:44:e8:e3:64:60:a7:3e:0b:fb:
d3:4a:f2:98:33:da:bd:14:5e:61:f6:07:97:cf:b1:
4d:5c:e9:ba:1d:72:58:45:c2:a1:fb:85:d0:6a:f2:
66:b7:e2:91:e0:e6:dd:f1:a7:d9:05:2a:a9:ed:e3:
bf:a5:c2:a4:de:ff:71:3e:08:f7:47:5b:9c:1f:36:
31:aa:da:1f:b8:eb:4b:ab:3c:1a:2e:3d:f9:4f:c3:
6a:3f:a3:44:75:c4:f7:14:13:b9:17:42:8d:d0:b4:
ce:9a:e2:6b:e8:32:7b:28:87:6b:e2:f5:3c:96:8d:
aa:d7:61:1a:38:d2:f2:6f:fc:ca:7f:53:dc:18:fd:
f5:3a:aa:63:1b:80:d3:d9:10:41:78:89:f2:ad:f5:
2a:4f:bd:73:ef:93:14:6f:2f:c0:8f:bc:df:7c:36:
e5:88:5c:e1:f4:76:96:a2:9c:f4:89:22:d9:df:c8:
45:a1:e4:ed:2e:d4:f6:d8:ea:7d:c6:ee:a9:43:18:
0d:52:41:b3:fe:bd:91:cd:86:14:b5:76:cf:5b:f8:
1b:d7:fb:80:43:20:ec:12:ad:96:dd:dd:2f:9a:43:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:45:52:A9:42:EA:1F:F5:44:EA:76:16:BC:88:F8:46:D7:AF:16:F2
X509v3 Authority Key Identifier:
keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1b:67:dc:6d:c1:73:df:48:f7:e0:d1:05:57:f5:15:d7:0a:
9c:6f:e9:10:5a:98:d8:b3:17:ac:4c:4a:6a:12:21:db:8a:aa:
92:72:99:48:71:1f:15:47:10:da:3f:49:0a:72:f7:08:8b:97:
f3:c1:b4:56:75:41:5a:09:a9:cc:81:ce:e2:81:54:1f:4d:af:
3a:a8:cd:c3:e4:4f:7c:6d:2b:de:b7:14:2b:77:30:93:90:60:
53:ad:6c:68:ee:a8:3d:d9:b3:ff:6f:21:d4:c6:60:03:31:1f:
6f:78:ef:57:5b:9f:5d:a4:74:42:4e:84:4a:20:01:3a:85:38:
5d:66:ed:60:86:a6:b9:da:19:fd:53:43:e2:9a:6c:71:24:ec:
e5:81:1a:56:e2:60:79:3b:a2:f4:62:f5:38:55:b0:ca:3c:3b:
61:fc:ed:16:38:9b:14:14:d3:b7:51:0f:f2:5d:1d:0a:a1:c5:
34:d9:13:fe:d8:62:60:70:ee:ac:25:57:de:b2:89:09:1c:0c:
af:66:83:2c:11:c5:63:19:6f:4e:c6:1c:6e:48:72:a6:c1:9c:
d1:93:bb:67:17:98:97:54:48:f6:29:07:84:f9:66:2e:8d:de:
9b:79:89:1e:12:fb:8a:84:b5:9a:a8:18:42:d1:0c:ca:11:6f:
d0:8c:22:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:33:02 2025 by rpki-client