Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier: aobhE7NYWKRCJ3ACim1W/hziNYoFQ0etZsh33n3G+7A=
Subject key identifier: AC:A6:2A:0A:95:4C:06:DB:14:0F:DB:D9:01:77:B1:9C:2B:CD:67:D3
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 0199FB4602062B2175608E703D5BA77E4FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 07:01:33 +0000
Manifest this update: Sun 19 Oct 2025 07:01:33 +0000
Manifest next update: Mon 20 Oct 2025 07:01:33 +0000
Files and hashes: 1: NVJ94OZbevHGEGJPauO8yOgu7g0.roa (hash: zV1VLUJ6QJt3I76otxCqQp6X0KRlaXT/XwLt7w+Duqc=)
2: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: dJUZf1lSy54p3mgSrCsBCRTjALgjHE4CZ8LNH34dn5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:02:06:2b:21:75:60:8e:70:3d:5b:a7:7e:4f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Oct 19 07:01:33 2025 GMT
Not After : Oct 20 07:01:33 2025 GMT
Subject: CN=aca62a0a954c06db140fdbd90177b19c2bcd67d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:d6:b9:9a:c7:3e:d7:d4:95:f3:5a:ab:36:
bc:ea:6f:a7:76:3d:2b:46:ca:9b:b6:26:0f:2a:a5:
71:6e:f9:e9:b8:f4:fb:a8:cc:e3:c9:e0:7b:6d:fe:
e0:16:f5:c4:ae:e8:f3:b5:ff:d4:74:21:29:fa:c5:
e3:03:93:f8:46:be:90:bc:14:ac:c2:26:17:1f:75:
33:1c:32:b1:27:c5:db:7b:79:18:cc:0b:9f:85:9a:
e7:d0:d3:82:41:66:14:8f:9e:02:b9:2c:72:13:fd:
08:e9:e2:8a:ef:f6:df:70:00:f0:a6:75:4a:14:bc:
68:0b:59:e0:32:c4:bd:59:59:e8:48:9d:97:ba:6e:
3b:36:70:d3:96:68:ef:cd:3f:0a:8c:d9:54:7c:a4:
dd:31:a8:a5:56:2d:ea:64:64:d9:1e:e7:d0:90:3e:
7f:56:55:12:17:29:82:b9:b9:5e:b6:32:5c:b4:c2:
18:68:2f:03:35:7d:3b:fa:fc:02:c8:19:e6:1a:a3:
a0:7d:7e:a1:27:e3:df:df:d4:6e:c2:38:d1:b0:6c:
7f:5c:01:39:3e:f4:e0:04:50:76:9c:04:db:64:61:
7f:54:18:02:b7:d1:18:1f:d5:3e:56:11:f4:e2:23:
88:7d:15:12:82:a0:00:bf:1f:77:ef:f9:cb:8d:72:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A6:2A:0A:95:4C:06:DB:14:0F:DB:D9:01:77:B1:9C:2B:CD:67:D3
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ef:7b:05:60:e5:9b:dc:52:b1:25:f0:ab:6e:fc:c8:dc:27:
ef:20:20:78:ce:5e:64:e0:18:27:3d:ec:48:8a:4b:dd:10:83:
04:90:bf:fc:4a:59:7d:67:24:ea:d4:ee:ba:93:1c:ab:b2:18:
ac:71:da:ba:31:ba:0f:8f:a4:eb:81:76:04:a6:be:68:59:93:
db:df:2d:47:fd:f9:92:76:34:4b:4e:b6:d4:9b:33:da:f6:7b:
0c:a4:ca:9b:1f:33:95:08:cc:86:82:52:d0:ec:fe:b8:47:0f:
af:a9:2d:7a:45:64:92:0c:eb:f6:aa:32:ba:99:eb:22:6b:02:
d2:79:bc:4c:1d:9f:b3:cc:54:12:54:a9:63:79:ef:10:25:09:
16:e7:4e:35:2d:ea:28:1c:a5:ed:dc:b5:20:c7:c6:34:08:89:
da:b5:ec:4e:6b:e3:3d:34:49:5b:a9:fe:14:65:2c:b7:08:31:
14:46:ac:14:3a:4a:88:be:7d:eb:a8:e9:35:d7:df:a5:c7:e4:
0b:d5:99:39:10:7a:a6:ca:08:42:4e:2e:47:4f:96:0b:46:93:
23:ac:db:a4:5c:1a:39:b6:d8:34:70:53:9a:c3:c8:0c:16:ac:
02:c6:b0:2f:a3:57:29:e3:58:be:27:04:ac:42:3c:1d:00:3f:
ec:ae:af:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:26 2025 by rpki-client