Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier: jubCtfVraSIxunD2niWcpzo5oLxGHfPpUuTg3OFAiKw=
Subject key identifier: 03:A6:26:C1:52:42:72:36:95:60:03:46:92:76:31:54:B5:97:F0:A2
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 0198D884AFD9E80D66A34284B54AF7FF572F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number: 0D71
Signing time: Sat 23 Aug 2025 20:00:31 +0000
Manifest this update: Sat 23 Aug 2025 20:00:31 +0000
Manifest next update: Sun 24 Aug 2025 20:00:31 +0000
Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: 3S/eBbCSrCeCiTVzCk7yF6Y99whIvl0/iBubUHXhmus=)
2: uMaOUumndZxKeHpsLiDjyBlhUEc.roa (hash: Vgb/fd+KM9R/ibiYhniBySYsrSRU1XkwhrI3i4xQXFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:af:d9:e8:0d:66:a3:42:84:b5:4a:f7:ff:57:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Aug 23 20:00:31 2025 GMT
Not After : Aug 24 20:00:31 2025 GMT
Subject: CN=03a626c1524272369560034692763154b597f0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:23:56:d4:dd:71:3f:6a:cf:90:50:75:c2:
2d:e7:c1:3a:4c:11:23:df:e7:93:fc:2f:ef:39:6a:
ec:6f:d8:5a:e4:3f:d2:1a:6d:35:f5:0f:13:b4:2e:
e3:e6:6b:8e:82:27:1f:0a:15:ca:90:94:2b:fb:30:
52:2a:d7:23:22:de:7c:b5:ed:03:97:19:40:d3:05:
c5:3b:b8:42:62:7c:77:71:ee:51:6b:0d:a1:67:0f:
24:f6:af:39:0f:14:e7:5a:ae:5c:0c:c8:26:de:9e:
6d:0f:24:0d:2d:7b:52:8f:bd:19:6f:6f:0f:17:27:
e1:61:b3:74:41:e9:0f:bd:c5:0d:76:c0:a4:22:57:
3b:bc:54:b6:5d:93:4c:a5:42:3c:39:a7:a4:a0:6c:
bd:6e:80:00:a6:75:2b:6a:ac:74:fb:15:ea:d4:fa:
57:5d:38:4f:75:2f:d5:0e:ed:64:41:72:f4:94:f3:
13:90:da:69:3d:9c:5f:c9:49:c6:d5:e4:cb:58:d3:
72:d3:20:88:20:19:63:99:df:5f:15:a4:87:5a:56:
82:7f:fd:f2:cc:3b:ce:5e:84:b6:4b:82:26:cf:5b:
33:ef:cd:9d:3a:c5:23:1c:4f:3d:67:25:29:8c:84:
c1:76:12:dd:a6:61:0c:a6:b4:a9:2c:e7:9f:43:96:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A6:26:C1:52:42:72:36:95:60:03:46:92:76:31:54:B5:97:F0:A2
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:22:d0:c9:d1:81:7a:d8:ee:be:81:da:00:47:7d:4c:5f:12:
28:5e:76:5c:3a:be:5e:e5:c2:0e:57:2e:ac:94:b3:63:8f:02:
e6:39:39:3d:45:a7:ac:80:ff:37:f8:fc:31:80:16:2e:7e:95:
39:6f:e1:14:76:07:3b:60:ef:74:78:96:01:15:03:d9:29:fd:
01:10:1c:83:4a:1a:d1:40:b4:11:90:78:6a:8b:e6:95:64:eb:
4d:61:20:70:c4:40:c4:cf:ca:10:e6:f6:94:35:d4:01:4f:22:
6b:11:fe:19:23:93:ea:92:12:4e:b4:b3:17:fb:c3:b0:e3:7c:
60:2e:ae:be:d2:00:d5:68:30:d1:23:1d:d1:18:25:ed:63:40:
e5:46:97:6c:7b:62:ac:96:63:c4:34:22:9b:23:32:f8:d9:c9:
ce:e0:66:a7:d4:da:c4:68:f6:28:97:8a:86:d4:46:5a:59:73:
ba:7c:e3:9f:84:08:5c:70:8e:39:fe:57:25:bc:02:cf:fa:61:
55:8a:b5:28:c1:71:0e:63:26:b0:31:4e:c2:50:64:71:d2:b6:
2b:6c:9c:f7:67:0b:fe:d0:cf:78:19:21:dc:51:e9:a9:ba:a4:
2d:23:60:50:9f:7a:02:f7:20:da:d0:2b:a5:69:af:07:2f:da:
69:59:2d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:53:31 2025 by rpki-client