Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier: LK/7mYxt41+GAhFXT37r8sCGHgvsIKDuCeUDVJkrKU4=
Subject key identifier: 42:4C:20:BC:B8:F3:8D:A4:80:39:52:B5:51:56:6A:77:5A:34:C3:8D
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 019A4EF44996A19D29DE7D0302CE571C6139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number: 1444
Signing time: Tue 04 Nov 2025 13:00:23 +0000
Manifest this update: Tue 04 Nov 2025 13:00:23 +0000
Manifest next update: Wed 05 Nov 2025 13:00:23 +0000
Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: AQ1BYTAfDQcdrYw9nSSNzSgjDEx+3fJWlh6N8D/iomY=)
2: wCDrJf6K3N6SQxouZVxxkGAndwU.roa (hash: RDCOaghInO75GT81gEgSeMeIYDUyZ4Fou/t1PYJdixY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:49:96:a1:9d:29:de:7d:03:02:ce:57:1c:61:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: Nov 4 13:00:23 2025 GMT
Not After : Nov 5 13:00:23 2025 GMT
Subject: CN=424c20bcb8f38da4803952b551566a775a34c38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:f7:6c:0a:ac:4c:43:54:c7:79:3f:25:80:
fc:2b:7c:32:df:a7:f6:11:d9:c5:76:6c:91:e7:dc:
c7:8a:93:39:79:1b:b1:36:f7:da:56:68:fa:d0:18:
14:53:86:11:69:3b:b2:fb:a7:8d:4c:6d:5a:c6:5a:
45:7f:4b:a2:f6:e8:e7:e9:c7:18:eb:2a:e8:7d:0b:
71:f9:ad:0e:14:f1:10:7e:ab:8f:54:a9:af:6b:70:
7a:75:ea:79:1e:b6:25:0e:69:93:4e:95:46:43:a3:
24:ef:75:e9:c1:05:07:60:07:63:41:0a:6b:21:fa:
6c:f2:fd:61:88:53:04:ca:be:7a:9e:6e:67:f2:1e:
81:ce:ab:55:8c:92:d7:a7:fc:14:e6:c2:f3:23:5b:
ee:da:d8:98:5e:38:ec:e4:d0:da:70:95:6e:72:72:
a8:e5:6f:b1:84:cc:14:ca:5b:fd:16:98:8a:0a:62:
80:27:d5:90:2c:98:6e:91:74:4e:9e:79:58:1e:57:
47:ee:6d:ac:d9:bc:2c:15:de:3e:31:5a:9f:c7:29:
96:55:1c:cf:1f:01:6d:ab:50:6f:c1:f9:ad:8b:b0:
36:c8:5b:dc:ed:8d:1c:09:2b:cb:cb:bc:33:13:34:
98:47:29:3c:72:c7:9c:e4:cc:93:5c:a7:16:a0:87:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4C:20:BC:B8:F3:8D:A4:80:39:52:B5:51:56:6A:77:5A:34:C3:8D
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1e:4b:5f:c8:cb:ef:75:e2:e6:9a:01:3c:03:57:1d:28:b4:
6f:8e:cd:41:3f:78:99:ff:7d:14:5d:50:cc:30:e6:bd:c6:bb:
9c:7a:61:9b:89:a5:3d:08:7f:97:7d:ae:37:de:8b:38:73:86:
c9:f1:24:e6:d7:bb:30:ce:24:09:a9:be:be:35:dc:0e:c4:c8:
39:83:77:a1:43:0a:07:43:30:ed:43:3f:8d:3a:76:10:7f:d1:
2d:0a:52:28:26:25:8d:69:9e:d0:bb:24:40:9d:c3:85:b5:12:
e5:28:da:89:8f:a0:0b:bd:75:a6:72:78:f3:96:68:4d:6f:1c:
a2:c3:b7:b3:c8:3b:61:ad:7d:14:c7:9b:97:b9:fc:c1:3e:4b:
c5:49:aa:4e:d0:5b:14:03:62:cf:ce:e2:2e:64:6a:43:72:06:
66:b0:0b:82:28:82:f8:a4:31:8d:f5:69:f3:fe:f3:d1:89:25:
44:89:6f:63:bb:96:d9:ad:76:51:63:d3:93:cb:ad:b1:06:02:
f5:84:95:52:f5:16:56:9e:b5:33:90:f4:42:59:41:87:b7:9c:
51:70:7a:cb:e5:b4:8e:5b:4d:32:53:33:a5:67:fc:76:63:e8:
3c:85:54:1e:87:15:d3:de:35:22:9c:19:06:2a:a2:ce:b8:e8:
d1:e4:0d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:27 2025 by rpki-client