Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File: B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier: eZ75FRBNTz61L0qjzhvK1VoL/xJorNtsP/ugraCEjOc=
Subject key identifier: 84:60:62:E8:DF:5A:F2:A5:42:99:2F:93:AC:14:DA:BC:96:69:FC:4F
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer: /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial: 0199FBEB35D5FB68350CE592D0BA46BF423A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number: 0DA2
Signing time: Sun 19 Oct 2025 10:01:59 +0000
Manifest this update: Sun 19 Oct 2025 10:01:59 +0000
Manifest next update: Mon 20 Oct 2025 10:01:59 +0000
Files and hashes: 1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: 0gf6U9WiLFcqVIhSht9qNZlIpw+Z4OE46z7w7v9PmHo=)
2: uMgXGnHJtpBZxUTOGcmdbVM1Ujg.roa (hash: 5kchvjwGIIWYfh1jo1LFwohMp5GRmL3D2YFjaqIXFeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:35:d5:fb:68:35:0c:e5:92:d0:ba:46:bf:42:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Validity
Not Before: Oct 19 10:01:59 2025 GMT
Not After : Oct 20 10:01:59 2025 GMT
Subject: CN=846062e8df5af2a542992f93ac14dabc9669fc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:65:69:a2:17:d8:c5:c7:9a:59:40:72:8b:
93:11:b6:98:40:a9:1f:02:6f:c3:9e:13:9e:8b:14:
3a:51:3d:b9:54:12:96:c5:90:b0:0c:0d:a2:a6:7a:
7d:09:83:b6:41:60:c4:be:a0:d9:27:d3:72:07:cb:
82:20:c0:3e:56:c0:32:37:94:47:ec:bd:17:9b:54:
12:62:f6:2f:f1:2f:87:6d:af:b2:e3:39:0c:69:b3:
d7:0a:14:c2:9b:5c:56:15:cb:20:ed:72:a1:c3:f8:
63:c3:81:20:75:d4:14:8f:77:8b:e1:0b:6d:68:e3:
e5:e7:35:88:79:9b:03:b3:8a:bc:6e:f3:fe:d8:8b:
03:34:5f:30:75:3f:4b:17:93:2c:ab:8d:87:c3:af:
0c:79:1d:0b:8c:13:96:b7:59:8c:fb:72:a8:6b:d4:
55:43:94:8c:02:f4:e1:1b:85:b7:4f:a8:26:d8:21:
82:e6:c4:12:a6:82:36:e3:7f:7e:ea:74:7c:35:ee:
1e:3f:16:44:2f:7a:be:16:3a:28:2a:50:ba:ec:5a:
ed:1c:6e:8c:ae:8d:e1:7e:6f:da:48:56:f4:29:4b:
54:a0:d1:5f:4e:af:32:1a:36:f1:07:13:89:25:bb:
18:30:8d:98:19:49:65:58:a7:c9:13:40:c8:9e:47:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:60:62:E8:DF:5A:F2:A5:42:99:2F:93:AC:14:DA:BC:96:69:FC:4F
X509v3 Authority Key Identifier:
keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0f:d1:c9:db:de:b7:8b:e0:94:40:f4:94:82:0d:0a:11:76:
ac:24:46:9a:32:fc:20:55:24:5e:a1:6e:51:b8:02:63:f6:48:
62:fd:eb:a5:37:44:37:f3:79:8e:ca:c0:44:a2:f2:0c:a8:92:
ab:64:7b:f7:7d:f4:47:c2:18:3b:6e:21:c1:e3:ce:53:7c:68:
11:80:ed:10:3d:26:6a:b4:3b:ad:dc:31:22:67:2f:9b:a9:26:
34:b1:dd:a7:1a:77:1b:fa:f0:38:8d:8e:53:9a:3d:e3:b1:bf:
df:c5:fd:f9:18:d6:4b:8d:50:67:a0:df:42:fb:83:fb:d2:6d:
27:46:8b:08:31:37:f9:c9:af:81:a6:71:74:b4:4a:f0:13:87:
dc:9f:71:d0:70:4e:cb:fe:7e:c2:7c:71:3d:3e:34:ed:25:69:
be:32:4d:a1:2c:f9:92:17:8d:25:41:57:dd:9a:7c:ab:02:f9:
c7:8c:86:f7:7b:35:60:30:84:50:d9:26:fe:02:8c:b2:8e:66:
c9:b3:fe:16:f9:bc:64:44:68:22:56:78:76:fe:6e:46:54:68:
fa:0b:75:c3:a3:67:5c:1a:d2:16:b0:e4:83:c6:13:8c:84:27:
75:51:64:e4:5e:3d:22:b0:34:89:0a:fc:da:92:cf:b3:95:3d:
e2:c2:c1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:51 2025 by rpki-client