
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File: B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier: xUYrr1Ls42Pq3rWOPy7VSvhX5B/eNDs0epLrLPlMqbY=
Subject key identifier: 96:65:2B:7B:58:60:B1:74:E2:03:9B:F5:AE:AE:EF:A5:6A:AB:F8:67
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer: /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial: 0198D65F6D19E52250D09EFE0FBE9A21A6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number: 0D0A
Signing time: Sat 23 Aug 2025 10:00:34 +0000
Manifest this update: Sat 23 Aug 2025 10:00:34 +0000
Manifest next update: Sun 24 Aug 2025 10:00:34 +0000
Files and hashes: 1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: tHkyajHGSq0rFagWsw0PW0SzK29xf46zKw42TegkQdc=)
2: uMgXGnHJtpBZxUTOGcmdbVM1Ujg.roa (hash: 5kchvjwGIIWYfh1jo1LFwohMp5GRmL3D2YFjaqIXFeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:6d:19:e5:22:50:d0:9e:fe:0f:be:9a:21:a6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Validity
Not Before: Aug 23 10:00:34 2025 GMT
Not After : Aug 24 10:00:34 2025 GMT
Subject: CN=96652b7b5860b174e2039bf5aeaeefa56aabf867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:38:0a:02:09:09:62:e5:eb:c2:07:34:6a:
a2:46:53:e0:c6:8c:3b:3e:54:7d:5f:b9:ba:18:f0:
32:f9:ae:fe:72:05:ca:9d:17:37:12:56:87:25:22:
b3:0e:e8:8b:55:92:fd:87:7e:e7:71:fc:fa:41:c9:
1d:83:bb:29:00:8f:b7:60:09:51:bc:8a:d5:41:eb:
a8:97:90:07:0a:cc:f8:0d:b4:0f:46:50:c8:ce:76:
b6:41:d1:50:06:0c:6b:b1:d6:9f:27:14:fe:15:93:
f1:5f:a1:10:71:1c:bf:7c:c4:42:1f:70:ae:6b:d5:
a0:6f:08:63:8a:00:2e:58:96:58:f7:fc:f0:31:b5:
1e:ab:4c:e0:3d:69:5c:0b:05:dc:3a:92:e1:69:d2:
10:d5:00:5c:28:73:cf:b8:3e:c2:3e:af:8c:35:ab:
0d:b9:48:8c:5f:04:cb:d9:83:e6:0b:83:a3:6e:09:
fc:3a:d2:19:db:e9:6f:54:26:17:92:9a:ad:91:f1:
da:69:30:85:a4:ce:00:33:78:89:9b:b5:70:fa:7a:
1b:5e:dc:00:2b:5b:3a:1a:19:29:82:2f:57:e4:e5:
ed:06:e6:9f:32:9d:d4:97:f6:66:d5:ec:4c:9b:cb:
6f:50:86:3c:49:5d:89:01:a9:2d:ff:d9:a1:b4:8a:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:65:2B:7B:58:60:B1:74:E2:03:9B:F5:AE:AE:EF:A5:6A:AB:F8:67
X509v3 Authority Key Identifier:
keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1f:62:2d:3b:03:df:9d:96:ff:b5:13:60:32:18:e6:1f:37:
df:ab:ae:cf:41:87:37:5b:65:fe:19:b8:59:87:46:08:e6:9f:
0a:dd:37:c7:2d:6f:c8:50:4a:b9:e8:33:50:9f:e5:d0:62:fd:
0d:8f:85:9e:3f:ae:54:d3:ee:0c:61:f9:92:71:71:09:f4:5c:
81:b3:4f:18:af:93:d7:db:5c:fb:3a:99:6f:81:2d:92:e0:96:
4b:43:bb:85:ce:eb:cd:76:fe:5f:d7:a6:ac:98:c8:fe:d6:f2:
ab:64:ed:94:f5:29:e1:78:6d:01:ba:71:c0:7a:10:24:1b:e8:
73:ac:2d:50:37:05:8b:a0:11:71:da:00:fa:e1:9e:72:32:26:
49:a5:87:fb:f9:d0:7c:fe:bc:90:dd:43:29:f3:e7:8f:77:43:
0e:58:da:3a:4d:7d:f8:b9:92:97:ba:30:93:f5:c5:a9:68:ba:
6c:87:9b:66:ae:b8:f8:ae:2f:db:a6:b0:53:f1:04:90:f2:24:
6a:7f:e2:83:ea:3c:ab:59:6c:55:39:00:39:e1:af:3c:6b:f5:
5d:98:1b:30:2e:47:5b:56:0d:0f:09:ca:83:f0:ec:68:6e:ba:
f4:de:57:7c:58:47:a5:bb:54:31:c0:50:01:ac:44:f9:87:81:
a0:76:ac:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:13 2025 by rpki-client