Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
File: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json)
Hash identifier: hXOaSvMXm0ROF0VZ7awv1+6AGGZ4pYHujuSAifdBiRQ=
Subject key identifier: C0:D7:58:37:89:33:D7:6E:D1:7C:6D:6F:80:98:42:F5:2D:A3:F5:49
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Certificate issuer: /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial: 019897804EC0F7C1E663AB6D29CDDBDEA9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
Manifest number: F2
Signing time: Mon 11 Aug 2025 05:00:24 +0000
Manifest this update: Mon 11 Aug 2025 05:00:24 +0000
Manifest next update: Tue 12 Aug 2025 05:00:24 +0000
Files and hashes: 1: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: 4TpsmpTJQgNqV02QerJjudoJrQH/Qs1aAyXPnJbvCqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:4e:c0:f7:c1:e6:63:ab:6d:29:cd:db:de:a9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Validity
Not Before: Aug 11 05:00:24 2025 GMT
Not After : Aug 12 05:00:24 2025 GMT
Subject: CN=c0d758378933d76ed17c6d6f809842f52da3f549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a1:52:31:13:38:6f:8c:db:17:78:20:6a:ac:
ca:b9:49:3c:39:3d:49:fb:1a:92:ff:dc:b1:88:74:
00:a9:d7:8a:07:70:14:e9:57:a9:f5:c3:d9:0b:27:
cb:a5:ce:38:1d:25:af:52:10:c2:44:6c:4a:bc:d8:
21:26:c4:1b:35:45:21:b2:23:20:f2:51:8d:79:9c:
ea:84:fc:5b:8b:8d:45:ba:4d:99:e1:29:c4:c5:c4:
c7:d8:ac:1d:f0:19:de:06:55:27:fb:58:d6:b8:59:
b8:1d:7b:b8:d7:67:17:77:57:0b:33:84:05:65:0d:
b4:f0:f6:01:e2:ba:a8:1c:a7:85:be:1d:3c:cf:e3:
95:0c:83:05:3c:1b:80:87:73:88:1e:16:ea:06:e3:
ac:54:34:39:b4:0d:c7:ab:42:df:aa:56:db:44:da:
26:42:bd:44:5f:6d:5a:83:b7:43:f3:df:ab:26:19:
fd:40:58:c4:38:a7:7c:83:57:da:bf:43:30:f7:a5:
5d:8f:5d:c4:f7:58:8c:d3:99:1a:e2:11:b8:78:5b:
96:bb:ba:ad:3d:5e:55:bd:75:fb:fb:4d:af:69:71:
5f:b7:9b:fe:c4:6d:b0:b6:6a:b4:28:1e:0b:40:d5:
98:05:be:47:de:1b:02:96:ff:21:69:70:8e:7e:d4:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D7:58:37:89:33:D7:6E:D1:7C:6D:6F:80:98:42:F5:2D:A3:F5:49
X509v3 Authority Key Identifier:
keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:09:ac:51:06:bb:be:2e:68:8a:f8:c8:93:2f:e8:da:16:68:
12:1f:dd:43:4b:16:0e:29:95:d2:db:93:35:27:4d:a7:79:80:
2c:00:c1:45:19:60:7f:43:98:c2:63:a5:62:49:5c:cb:d2:6f:
51:7c:0b:d2:f7:16:e2:63:2c:f5:b6:9e:78:35:18:24:f2:5e:
1e:a9:eb:27:62:70:2e:df:ff:a7:02:1d:84:65:ac:8f:f2:a6:
5f:69:61:36:9c:8d:a4:b1:f1:7c:bc:f4:79:3a:49:25:a9:99:
db:18:66:c7:b4:5f:87:27:ed:b7:73:72:1e:df:6a:62:74:03:
a3:2f:a4:11:af:fe:3b:bf:0d:bd:bb:ae:15:79:8a:1f:bd:a5:
3e:b2:fe:ad:44:69:3f:35:03:09:fe:96:6f:30:4c:8c:b3:c9:
8d:c9:0f:71:c2:c7:e6:06:1d:ee:3d:35:de:a9:0e:3f:8b:8e:
38:b8:4a:d6:48:69:9e:69:fc:a0:ee:a0:c4:a8:5d:41:e6:e1:
84:7e:de:c8:50:37:b0:ae:21:5e:a2:b5:d6:06:43:35:8a:6b:
a2:25:09:34:1b:cb:4b:5a:11:9d:1a:1c:77:b2:96:4f:4e:30:
8b:45:f5:27:fa:f0:1b:3d:b0:c6:b2:24:d3:76:6c:c9:b3:c5:
8f:49:6f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:43 2025 by rpki-client