
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier: 7s1BcwngcGNHYcH1gc7C91FW3wZtBkiemn9s/V/Bl8I=
Subject key identifier: DD:4D:2A:C3:51:9C:1D:40:A3:01:F7:29:91:C9:95:3E:A6:B7:D0:28
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 01989336972DBF423B84FC577DC805BBE9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number: 1423
Signing time: Sun 10 Aug 2025 09:01:24 +0000
Manifest this update: Sun 10 Aug 2025 09:01:24 +0000
Manifest next update: Mon 11 Aug 2025 09:01:24 +0000
Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: Fsqu06qSsBAYt7wxmuD9PclclUkXDJonxUOfy3ccLe4=)
2: B_7Zlkd4Da3E9wFCt54W5RXpv-Y.roa (hash: t+XndUbN6Hm/lPYW31tO+vpnF3Hi5LgCuvErDr9oYwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:97:2d:bf:42:3b:84:fc:57:7d:c8:05:bb:e9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: Aug 10 09:01:24 2025 GMT
Not After : Aug 11 09:01:24 2025 GMT
Subject: CN=dd4d2ac3519c1d40a301f72991c9953ea6b7d028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:63:b2:86:a5:27:0f:ff:38:7a:56:b1:2c:
a5:4e:6c:60:3b:b7:8e:58:c8:bc:45:63:c6:3d:c4:
3b:25:ee:a5:c2:f3:79:ed:74:0a:42:d8:a6:bf:8f:
55:7d:3b:3d:7a:8c:c0:9c:b2:11:a4:6d:e7:a7:5f:
f1:a1:5a:5e:94:af:5d:43:f8:8c:b9:e2:d7:82:3b:
d8:4b:3f:b0:52:2a:fe:a3:c3:bb:e8:8f:89:27:27:
1a:e9:0b:bb:9a:a3:bf:c4:e5:96:da:c6:6d:81:e0:
5d:de:cd:43:94:22:c6:78:54:0d:9e:2e:f2:b5:47:
26:ad:af:20:31:8b:47:56:4e:b7:6d:ef:b7:e4:05:
f9:86:8d:57:45:70:6e:0e:12:76:fa:f5:c6:ca:cd:
51:ad:e9:61:a7:66:c0:71:c2:20:78:1b:3c:9b:ea:
45:00:c3:7b:c1:57:05:f1:28:0c:6f:7d:44:26:fc:
24:8e:66:a9:1d:0a:d2:f9:ae:88:3a:82:17:62:b4:
0a:97:48:68:d7:98:d6:0b:63:43:51:8b:fc:47:60:
a3:3b:16:3d:25:48:76:32:db:08:1d:cb:df:58:38:
38:2f:f7:66:a5:ee:ae:03:17:aa:31:09:3f:d0:cf:
13:d8:c6:c8:b2:ae:f6:46:31:27:81:cc:a6:a6:89:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:2A:C3:51:9C:1D:40:A3:01:F7:29:91:C9:95:3E:A6:B7:D0:28
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5c:d3:f3:3c:b9:ae:9f:a8:87:f1:78:95:85:12:23:d3:b4:
8a:e6:a4:87:d3:55:45:ac:b1:75:2b:38:37:2f:e8:af:31:98:
37:27:f7:db:90:33:66:57:8f:c5:46:77:6f:4f:9d:18:ef:9d:
2b:32:1c:45:b7:3b:7c:69:3e:fe:3f:ec:5c:42:e4:4f:4e:2f:
9a:3b:42:47:6c:b0:b9:4f:6c:a8:a6:f9:45:fc:6a:82:50:99:
1d:45:68:ac:52:38:2a:ca:55:06:06:c8:e7:60:74:75:d7:9e:
08:36:94:a3:9a:0f:47:f5:bd:cb:f1:b9:e3:6c:18:e4:54:88:
aa:3b:44:81:12:26:9e:42:18:32:19:d1:69:6a:c7:c2:74:4f:
30:5b:eb:5a:0e:21:00:b8:69:f9:4c:07:ca:04:12:e2:12:7c:
58:27:38:13:c1:36:34:b0:43:09:38:83:d7:97:e0:81:42:28:
85:7d:69:74:d8:df:fe:0c:d7:30:fa:9b:10:d0:ae:1f:8a:68:
f2:55:58:d3:a7:2f:39:38:f9:3f:25:3f:e2:73:38:9f:5e:ab:
8c:8b:47:51:d4:d6:85:8e:04:f1:7b:17:7d:eb:2d:ce:b0:12:
14:aa:88:b5:de:e7:9f:d8:2e:7b:8e:3d:62:75:4f:f6:5e:b6:
5a:c1:4c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:51 2025 by rpki-client