Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier: EFJlY8Vh6350Ns4HgF+3jRLquHPQ+qRDVKume2jqcOc=
Subject key identifier: FD:84:21:6E:44:17:72:F8:EE:31:2C:0E:7F:72:8E:28:66:11:2F:83
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 0199FE1048EAA082E1D5BF7C030F0905F593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number: 0E09
Signing time: Sun 19 Oct 2025 20:01:44 +0000
Manifest this update: Sun 19 Oct 2025 20:01:44 +0000
Manifest next update: Mon 20 Oct 2025 20:01:44 +0000
Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: 0ZxxbGX+UoH4tpV3uKsPU/GeFtGJe0niYsh/UhUsRNc=)
2: uMaOUumndZxKeHpsLiDjyBlhUEc.roa (hash: Vgb/fd+KM9R/ibiYhniBySYsrSRU1XkwhrI3i4xQXFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:48:ea:a0:82:e1:d5:bf:7c:03:0f:09:05:f5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Oct 19 20:01:44 2025 GMT
Not After : Oct 20 20:01:44 2025 GMT
Subject: CN=fd84216e441772f8ee312c0e7f728e2866112f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:3c:fd:17:09:52:de:b5:36:55:cf:8f:4b:
8b:e4:99:83:ec:48:ac:57:f1:91:43:a0:21:71:99:
3b:77:4e:52:20:87:8e:01:ea:98:2d:ae:e1:5d:bf:
86:61:b0:1c:ca:9b:82:87:d9:52:3d:13:e8:ea:1e:
ce:e3:d8:1c:1d:2b:c2:f2:9a:6a:3a:e1:5a:26:e9:
01:87:7f:19:93:15:3b:35:07:53:ef:23:80:79:cf:
9b:ba:a0:e9:76:81:03:88:27:60:ae:d3:0d:d4:a2:
27:96:65:ec:19:52:ff:2b:ce:f3:2d:e0:ac:85:44:
91:3d:91:ff:74:85:ae:4e:db:2d:cc:1c:85:61:50:
d9:48:24:73:ea:d7:2e:41:e7:0e:ae:c2:e1:5a:99:
f9:3d:c4:ac:cf:6c:0e:ac:b5:7d:41:2d:97:37:84:
eb:83:16:4a:27:f4:00:1b:3b:04:ca:ed:29:6b:77:
ff:e5:b2:2f:69:96:d4:7a:0e:7f:94:65:e6:27:d8:
12:f2:f7:c9:09:a8:e6:e4:c7:69:24:a1:8c:5d:59:
8d:36:d8:4a:c8:04:88:b5:8e:c5:a1:ab:15:c1:93:
f5:10:a7:67:93:2b:9f:9a:77:28:c9:05:93:f7:c6:
38:dd:da:66:6a:9f:0e:a1:c9:39:10:4e:ba:7a:17:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:84:21:6E:44:17:72:F8:EE:31:2C:0E:7F:72:8E:28:66:11:2F:83
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:be:6d:2c:e0:8f:db:85:76:c0:24:62:d7:0d:7f:9c:44:55:
d8:1c:a6:26:ce:0c:f7:b3:05:e4:9b:1b:bd:0a:7c:ba:b6:1e:
7c:de:51:61:9d:8b:48:35:8c:2c:4e:5b:2b:58:32:7f:26:42:
eb:db:6c:b0:f9:c1:fe:86:3f:00:a8:27:29:6f:8e:fc:0f:be:
a1:97:12:e4:51:76:60:55:b9:7c:52:ba:e9:e8:97:7c:b2:be:
4a:2d:ea:bc:3b:41:40:a6:6f:55:cb:50:e6:da:f5:e2:88:07:
ba:17:0d:aa:99:77:bc:36:00:2a:08:de:08:26:2d:f2:f3:84:
12:62:61:d9:7b:f0:d0:35:80:15:06:d7:b9:15:46:12:5a:3c:
98:ee:3d:f0:9d:15:99:47:7f:22:e5:94:22:74:12:c8:10:22:
3f:c7:1a:1e:53:fe:5c:e3:85:6d:d0:8f:bb:28:2d:a0:f7:f7:
71:32:ac:8c:e3:d2:9e:6c:ac:e4:55:33:ae:0e:03:c6:97:ee:
87:0e:59:5e:00:8d:fd:9a:bc:fb:a5:ee:ba:5b:25:a9:d6:de:
d9:0d:e2:32:05:9f:45:92:58:61:5b:fa:eb:fa:5f:81:62:ba:
3a:d8:d0:a5:ec:61:c0:fc:b5:e7:2c:3a:ee:71:aa:1c:2d:e2:
b1:23:29:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:13 2025 by rpki-client