Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier: 0/YDOJ8r+qJDbiZ91XMe2kmW5DyiQ0RXcYZ/HfD/7Mw=
Subject key identifier: 32:09:21:41:B1:1C:D1:84:74:98:AD:5E:CB:5A:60:CC:B9:0E:B9:D6
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 0197730987CA7F81FB99C63B22C0D8E0A9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number: 12C9
Signing time: Sun 15 Jun 2025 10:01:33 +0000
Manifest this update: Sun 15 Jun 2025 10:01:33 +0000
Manifest next update: Mon 16 Jun 2025 10:01:33 +0000
Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: vOb/OHv0Hl4wcxX+RngotNWAWhPlSOG13RALYdENhcs=)
2: wCDrJf6K3N6SQxouZVxxkGAndwU.roa (hash: RDCOaghInO75GT81gEgSeMeIYDUyZ4Fou/t1PYJdixY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:09:87:ca:7f:81:fb:99:c6:3b:22:c0:d8:e0:a9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: Jun 15 10:01:33 2025 GMT
Not After : Jun 16 10:01:33 2025 GMT
Subject: CN=32092141b11cd1847498ad5ecb5a60ccb90eb9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:27:d4:b9:79:34:a0:01:ba:4e:bf:f9:a6:
9e:d1:76:27:b8:28:0e:51:8d:61:3e:f1:cf:0c:4e:
d7:85:8d:94:87:40:c7:12:50:bc:53:9f:6b:0b:c9:
9e:e4:10:88:da:4b:47:1e:64:66:31:11:ee:d1:75:
98:00:d1:2f:f1:7c:62:1f:d6:a4:17:39:3b:ab:3d:
e3:1a:0f:56:41:36:9a:91:bf:62:f5:f0:5b:72:e6:
24:a0:96:0c:6a:9a:6a:c4:08:d7:40:4c:ab:73:0e:
ed:5d:19:ac:8c:7f:8f:72:ea:a8:e8:1c:3e:91:7a:
b7:4c:cc:b6:2b:d6:8a:84:5b:48:66:60:0e:7f:a3:
78:7e:7c:ae:a9:b4:f4:df:8a:b8:81:a5:7d:7f:46:
48:0e:46:e2:49:0b:74:5f:ea:88:d9:28:3d:57:7e:
36:2d:84:16:ec:8a:f4:e8:1e:4f:95:cb:35:51:bf:
dd:31:d5:6e:eb:4a:d5:c6:38:fc:31:32:bf:08:cc:
1f:da:d0:2d:56:8f:1b:b7:65:76:9b:04:a0:e8:5c:
c2:5d:d3:63:db:da:e2:db:73:33:84:92:ca:6d:21:
1a:89:29:54:1b:35:3d:f5:c8:0b:e9:6b:ba:4a:84:
c4:2c:9c:ec:2a:91:96:eb:bc:a6:16:69:fa:dd:cd:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:09:21:41:B1:1C:D1:84:74:98:AD:5E:CB:5A:60:CC:B9:0E:B9:D6
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d0:6d:cc:d1:e9:ca:ee:ed:8b:75:31:19:a0:3d:3d:91:20:
80:7f:82:c6:67:4e:6e:0a:a2:65:78:66:18:fa:86:ad:3d:89:
bc:3e:4f:08:a0:5b:2b:97:c6:f0:57:6c:26:88:0a:2b:51:13:
bc:39:04:6f:47:e4:fc:c1:4e:82:d9:6b:1e:5f:41:2f:a9:73:
13:e9:f2:e6:92:17:fb:76:d1:be:7e:e6:da:84:cb:61:0a:a5:
c5:0f:ea:5b:78:bd:83:f0:02:24:a0:4a:62:61:f1:d7:f2:da:
3f:6a:ad:21:30:e5:e5:fc:e8:28:de:eb:99:8c:92:8b:8b:43:
06:8b:48:8b:99:40:29:19:8c:3c:6b:85:af:d0:ae:38:ea:9c:
3b:8c:1b:20:3c:23:49:3b:d5:77:9e:77:d4:7d:be:9a:b8:90:
f0:f3:8d:0f:49:3d:53:5b:0b:2c:a5:39:7b:37:ef:30:22:52:
76:e8:e3:4f:1e:14:68:b7:70:12:a6:2f:de:2c:d9:22:fc:c2:
64:14:99:8e:33:2b:ef:2d:87:9a:86:2d:d7:98:c4:c0:6f:40:
b8:54:0e:44:c5:47:f4:98:41:70:10:9b:ea:2f:90:30:db:6f:
14:ff:af:a2:00:3c:3f:4c:13:19:7b:cc:0c:a6:46:6d:2e:93:
27:ef:78:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzCYfKf4H7mcY7IsDY4Km8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzczZWIzZDMwNzk0ZDIyZDc1Y2Q4NzJiOTFhM2JhODQ4
ODQyZDcwHhcNMjUwNjE1MTAwMTMzWhcNMjUwNjE2MTAwMTMzWjAzMTEwLwYDVQQD
EygzMjA5MjE0MWIxMWNkMTg0NzQ5OGFkNWVjYjVhNjBjY2I5MGViOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMcn1Ll5NKABuk6/+aae0XYnuCgO
UY1hPvHPDE7XhY2Uh0DHElC8U59rC8me5BCI2ktHHmRmMRHu0XWYANEv8XxiH9ak
Fzk7qz3jGg9WQTaakb9i9fBbcuYkoJYMappqxAjXQEyrcw7tXRmsjH+Pcuqo6Bw+
kXq3TMy2K9aKhFtIZmAOf6N4fnyuqbT034q4gaV9f0ZIDkbiSQt0X+qI2Sg9V342
LYQW7Ir06B5Plcs1Ub/dMdVu60rVxjj8MTK/CMwf2tAtVo8bt2V2mwSg6FzCXdNj
29ri23MzhJLKbSEaiSlUGzU99cgL6Wu6SoTELJzsKpGW67ymFmn63c3GkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIJIUGxHNGEdJitXstaYMy5DrnWMB8GA1UdIwQY
MBaAFG93PrPTB5TSLXXNhyuRo7qEiELXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yNGQ3OWQtMTc2Ni00MDQ1LTlkMjQt
NmEwYmFlYjIzMzZlLzEvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yNGQ3OWQtMTc2Ni00MDQ1LTlkMjQtNmEwYmFlYjIzMzZl
LzEvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9BtzNHp
yu7ti3UxGaA9PZEggH+CxmdObgqiZXhmGPqGrT2JvD5PCKBbK5fG8FdsJogKK1ET
vDkEb0fk/MFOgtlrHl9BL6lzE+ny5pIX+3bRvn7m2oTLYQqlxQ/qW3i9g/ACJKBK
YmHx1/LaP2qtITDl5fzoKN7rmYySi4tDBotIi5lAKRmMPGuFr9CuOOqcO4wbIDwj
STvVd5531H2+mriQ8POND0k9U1sLLKU5ezfvMCJSdujjTx4UaLdwEqYv3izZIvzC
ZBSZjjMr7y2HmoYt15jEwG9AuFQORMVH9JhBcBCb6i+QMNtvFP+vogA8P0wTGXvM
DKZGbS6TJ+94/Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:24:40 2025 by rpki-client