Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier: dBnKKiNlZxaH1+UEf3DGlzVZjANG5D0gnwx+eBI3c04=
Subject key identifier: 52:EB:E1:0B:14:B9:E2:C0:01:B8:E9:16:FC:66:9B:E1:23:98:08:A9
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 0197B7EA4F0FECE8C0A885599B4FDF9B53DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 19:01:15 +0000
Manifest this update: Sat 28 Jun 2025 19:01:15 +0000
Manifest next update: Sun 29 Jun 2025 19:01:15 +0000
Files and hashes: 1: NVJ94OZbevHGEGJPauO8yOgu7g0.roa (hash: zV1VLUJ6QJt3I76otxCqQp6X0KRlaXT/XwLt7w+Duqc=)
2: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: zNp04dRgRPPzqyyJTwGH5bZLkSaoaPn7TsE9Le44OHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4f:0f:ec:e8:c0:a8:85:59:9b:4f:df:9b:53:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Jun 28 19:01:15 2025 GMT
Not After : Jun 29 19:01:15 2025 GMT
Subject: CN=52ebe10b14b9e2c001b8e916fc669be1239808a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1d:aa:c2:0a:a2:91:87:25:1e:df:a2:d8:2c:
cb:0c:e7:6d:8e:d7:93:c1:8d:a0:cf:29:5f:8d:ec:
c8:4d:f2:f6:1f:0c:a2:06:a4:79:31:85:d1:61:97:
67:34:8a:ea:87:38:55:1b:a4:54:e2:04:d3:4f:6d:
11:61:67:a2:85:52:f3:7b:44:f1:6d:a9:cf:4e:ce:
6c:90:61:eb:ef:eb:6a:41:44:6d:09:a9:fe:58:d4:
37:f1:be:bf:48:2b:90:f5:27:24:e2:e1:2e:d5:c3:
c9:ef:85:97:f3:a0:87:91:f2:89:3c:de:23:1d:e9:
d2:d4:f9:cc:9c:7a:cb:f8:b8:b6:72:31:0f:a0:ce:
32:07:da:b6:c3:da:6a:14:fe:aa:64:28:e7:ab:ef:
27:5b:99:96:83:c4:99:ae:70:bd:5a:8c:65:e6:53:
ef:f0:d2:76:2f:cd:b4:78:44:5e:c7:df:15:a8:28:
3e:12:97:b1:93:e6:0f:7d:e0:92:04:8e:72:03:ca:
44:94:ec:37:b5:bf:b0:fe:24:cf:4c:52:0f:bc:17:
06:80:c0:51:41:1c:b2:31:96:70:88:ce:11:55:92:
f4:cf:55:c1:ef:5a:76:77:02:5b:b9:ff:a9:69:03:
96:2f:f9:dc:d4:60:27:03:25:1a:dd:bb:81:c0:8a:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EB:E1:0B:14:B9:E2:C0:01:B8:E9:16:FC:66:9B:E1:23:98:08:A9
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:60:3d:ba:b4:87:0e:61:d6:f0:f9:ef:2b:dd:f3:ac:0a:46:
9e:cd:7d:39:13:10:94:d8:65:48:49:46:a1:4f:6f:60:7f:05:
19:fa:1e:ba:8f:83:8a:6d:50:26:16:59:fe:08:05:1a:51:3a:
1b:dd:e9:69:05:d8:f5:79:d8:b1:cc:f1:47:3a:63:35:c4:18:
7c:60:69:39:43:7e:31:53:fd:33:4a:34:ab:8f:04:fe:cd:a0:
9f:d4:47:d0:f1:f7:87:bd:ea:91:51:be:c6:a5:e2:3f:13:b9:
13:3c:59:b0:a2:27:4c:b8:0f:60:3f:0c:1f:cb:6a:e3:6f:6a:
19:0e:69:18:44:00:1a:a4:26:0c:c3:30:01:85:17:2b:af:d7:
4f:10:32:07:4c:85:fe:1f:ce:0f:91:1e:09:90:be:bc:09:ef:
a2:c4:6b:b7:6e:45:27:f4:af:88:63:75:2b:2f:3f:73:d4:d4:
ef:33:05:3d:be:7f:bb:ba:5b:74:ab:11:38:50:b8:54:5b:6c:
30:e7:ab:99:c6:9a:13:08:31:ee:ef:0d:e7:73:31:dd:36:bb:
63:65:53:6b:04:a1:5a:1f:a5:59:1d:22:ff:6a:c3:de:f7:07:
97:a0:54:37:40:50:1f:bb:7a:54:ca:69:b8:f5:38:c1:6b:43:
79:b9:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:21 2025 by rpki-client