Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier: bYhLbV1ETbCQv9Tpat34nwvnpjDFsTnNKiaNHE2/ASI=
Subject key identifier: 70:61:38:19:E9:5B:84:CD:06:99:1B:54:5C:9B:98:DA:B1:DF:6C:43
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 0197B6D7579FD2C1A8A589B3564B4B2E401B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number: 0CDB
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: RsvrMdiMW9TMMy+SzebZUz5pekl751tb2K5GzZEeEgE=)
2: uMaOUumndZxKeHpsLiDjyBlhUEc.roa (hash: Vgb/fd+KM9R/ibiYhniBySYsrSRU1XkwhrI3i4xQXFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:57:9f:d2:c1:a8:a5:89:b3:56:4b:4b:2e:40:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=70613819e95b84cd06991b545c9b98dab1df6c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:53:3f:43:a5:82:67:e7:71:57:e0:e0:1f:
30:be:e5:60:5a:76:32:43:84:22:4a:9a:a5:68:a1:
d2:7f:bb:a0:82:a5:d4:73:b4:60:1f:f2:e5:f0:83:
3d:08:a6:cd:9d:4e:0a:a1:49:3f:fa:24:d8:a5:70:
95:9c:83:7c:ce:9b:2c:e1:83:20:b8:79:e2:0c:3d:
0a:e9:3c:0b:a8:e3:94:50:92:c5:84:a8:c2:99:2d:
ed:39:8c:84:02:3d:cf:f4:58:6e:66:c5:02:18:9b:
f7:f0:a1:74:68:10:a8:68:e0:19:6c:96:fd:bb:b8:
5e:16:6d:ed:cd:f0:22:9e:2a:6f:50:fc:76:4f:fc:
ff:07:c1:ec:f9:ad:f4:3e:72:62:e0:6e:29:9d:5a:
6b:4a:3e:18:e2:e7:e5:59:b3:bc:48:fa:84:5a:e3:
d7:a9:47:80:29:95:26:7c:fe:30:73:9b:26:f8:be:
90:af:34:f2:3e:7e:20:4e:c8:0f:ee:6b:e9:0a:54:
73:98:50:5d:dc:be:bf:25:31:98:00:94:e4:ab:bb:
7e:34:fc:eb:1a:ff:e8:64:c7:d8:48:1b:79:83:de:
87:e7:9e:67:a7:58:d4:a9:a5:33:e7:8f:8f:21:ff:
59:26:be:c3:15:fb:29:fb:e5:f8:ac:7e:64:ab:55:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:61:38:19:E9:5B:84:CD:06:99:1B:54:5C:9B:98:DA:B1:DF:6C:43
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fe:72:1d:80:10:64:9b:06:4d:5f:75:75:ca:c6:7a:09:41:
46:b8:e5:cd:13:9f:84:d0:07:ba:e5:47:32:ec:11:3a:d9:f0:
47:06:19:69:9c:01:eb:44:fd:92:f7:2c:3b:31:74:8f:98:6b:
f4:13:56:39:cb:12:76:24:dc:f6:3b:08:bb:6e:11:37:5d:35:
fa:a7:f0:5d:5c:2a:9d:a5:b0:43:6d:f5:48:0e:27:76:8d:d6:
1e:c8:d7:15:bb:ee:cc:c3:1e:65:1c:74:ba:a4:aa:9c:8c:d5:
1e:ab:b0:e4:bf:e0:35:8c:09:ad:b7:24:fb:59:56:1e:97:80:
a6:fb:cd:32:c4:cc:c6:19:fc:39:81:55:0d:f4:c1:aa:3b:66:
c5:29:b4:e6:26:7b:f1:ec:d4:3c:f3:5d:1f:4d:b3:09:ba:b1:
d8:79:f7:3b:4b:2a:a5:61:54:84:3b:c8:b2:d7:fc:7b:ea:20:
09:e8:a9:57:e0:a5:62:8c:33:06:b6:b9:9a:8e:5b:09:37:49:
f2:7b:1b:ac:4e:bd:e6:27:b0:53:11:ab:67:1f:e1:d9:8c:b5:
90:16:e7:d4:9e:4e:f2:5b:86:0d:8b:ae:8e:91:a5:ba:d5:3a:
a6:fa:1d:12:bf:70:f0:9b:ca:a4:16:72:f3:b4:34:ed:74:0c:
45:35:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:16:20 2025 by rpki-client