Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
File: bb3coKsuvouFKafJzh3W6OpVXD0.mft (raw, json)
Hash identifier: fc97U71sA5M/jER2+IUvJ+KSARof9DeS9AXvgSkrZME=
Subject key identifier: 12:1C:69:2B:2D:F9:A2:A9:49:FF:BF:56:C8:23:F8:A8:F4:0B:35:56
Authority key identifier: 6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
Certificate issuer: /CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Certificate serial: 01988B0FFDB0590B71E74B41A290F385730E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
Manifest number: 11BA
Signing time: Fri 08 Aug 2025 19:02:17 +0000
Manifest this update: Fri 08 Aug 2025 19:02:17 +0000
Manifest next update: Sat 09 Aug 2025 19:02:17 +0000
Files and hashes: 1: 3CFsdbO_NdkVNQKrJjhbIF4SBso.roa (hash: R9TEphKFrn4GbHRX9svL6mjGOOWCjifpYgOEm5Ktk3o=)
2: bb3coKsuvouFKafJzh3W6OpVXD0.crl (hash: /+jhMXMowbvuVB2RdMFD0LQCk8IFtwZWQUwzRa4vlcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:fd:b0:59:0b:71:e7:4b:41:a2:90:f3:85:73:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Validity
Not Before: Aug 8 19:02:17 2025 GMT
Not After : Aug 9 19:02:17 2025 GMT
Subject: CN=121c692b2df9a2a949ffbf56c823f8a8f40b3556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:0e:98:52:62:18:01:41:31:1d:c7:0a:35:
33:78:64:80:af:c5:27:5a:19:82:5a:40:de:90:22:
41:16:b1:50:25:ca:96:08:6c:3d:0f:68:32:85:77:
10:68:21:43:be:56:e8:e2:27:29:7f:5a:08:28:b3:
8f:08:99:e1:01:e2:0d:7f:7e:bd:c3:83:40:ab:94:
dc:22:33:7a:c8:1e:3c:ee:cc:a4:b6:a3:ec:dd:e8:
b3:e8:62:70:44:48:4d:94:39:d4:ab:9c:57:43:46:
32:58:c0:10:39:e0:5e:d4:17:5e:de:b4:ff:2e:12:
96:af:16:b3:df:4e:43:53:58:32:d2:ac:ec:06:1b:
ac:41:35:21:97:57:e8:65:e3:e1:99:a4:eb:4f:f7:
9b:4c:b7:b8:52:e8:7a:79:80:64:58:6a:17:be:c3:
54:ce:9b:2e:5d:10:92:68:7b:e6:2e:e0:94:5e:ce:
08:0a:0b:ab:ce:7b:3e:ad:51:e8:0a:33:d8:30:c3:
c2:b9:61:a3:e6:45:0b:c9:48:78:76:66:8d:bb:97:
08:c6:6b:05:89:06:ed:6a:f1:29:d6:87:69:5d:3c:
ec:7f:bd:d8:3d:1c:a6:44:8a:67:fc:a8:04:be:8e:
c3:3e:4e:49:b9:38:12:ba:b2:11:2b:48:a9:2c:54:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1C:69:2B:2D:F9:A2:A9:49:FF:BF:56:C8:23:F8:A8:F4:0B:35:56
X509v3 Authority Key Identifier:
keyid:6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bf:39:f9:67:dd:82:0e:96:7e:70:74:58:36:8d:b6:67:7d:
96:13:48:42:e1:b3:21:50:87:b7:9d:56:50:03:90:1f:e3:5e:
09:8a:ca:1d:c1:ad:0d:69:8d:46:bf:72:f6:9d:16:e6:85:9a:
a6:8c:63:54:90:f0:7f:fc:55:0c:46:a4:5b:52:7a:c1:86:b8:
f8:ac:74:f7:eb:38:35:b5:67:8d:b7:e2:e2:d7:4e:b2:30:74:
92:54:50:e3:6e:7a:31:53:69:0c:92:21:02:1a:2f:f8:30:bd:
a9:68:d4:97:74:3d:5f:eb:fa:4a:72:7a:5a:69:86:b4:79:09:
c9:4d:88:ba:f8:16:2b:9c:89:15:12:6d:84:e9:79:31:20:5e:
1c:0d:e7:44:9e:ee:5c:13:2e:36:7f:e5:1d:8c:a9:e0:5b:ec:
65:b0:c7:82:5c:3e:17:08:4f:b1:e1:d6:8c:88:4f:88:12:27:
11:f1:cb:8c:66:4c:8e:c0:00:f3:f8:65:aa:de:77:ac:b5:fc:
7c:cf:2a:5d:e3:22:2e:c4:0a:d2:67:0a:a2:77:9a:35:3e:f9:
99:79:ca:da:9c:d0:27:b2:b9:f4:4b:0b:fa:6c:99:d7:cf:cb:
8e:e3:12:7e:e4:9d:9a:29:98:4a:64:b2:6f:ff:1c:29:70:51:
7d:31:c3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:04 2025 by rpki-client