Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
File: b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft (raw, json)
Hash identifier: UYt4KQUJqC1nAuXieuyP7pNgMYN7mjiudU4sjtrVdkI=
Subject key identifier: 49:54:29:60:B9:C2:15:D3:35:A8:B0:2A:6A:C9:3C:4C:44:7D:06:41
Authority key identifier: 6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
Certificate issuer: /CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Certificate serial: 0197B7B31B000650A260B7C8F55B52945EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
Manifest number: 0CAB
Signing time: Sat 28 Jun 2025 18:00:57 +0000
Manifest this update: Sat 28 Jun 2025 18:00:57 +0000
Manifest next update: Sun 29 Jun 2025 18:00:57 +0000
Files and hashes: 1: XWsgGaUk-tCex2rEANvQhHC_vUw.roa (hash: 4qgfJUiMzzdt5fICZLGjB/iCgpPLmmWKoci9oWUf3cw=)
2: b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl (hash: h/VeomwOfnQFSepvRLvicVaJAiIqCnQqP3ITm13tKgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:1b:00:06:50:a2:60:b7:c8:f5:5b:52:94:5e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Validity
Not Before: Jun 28 18:00:57 2025 GMT
Not After : Jun 29 18:00:57 2025 GMT
Subject: CN=49542960b9c215d335a8b02a6ac93c4c447d0641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:df:17:6b:3e:38:49:f8:3a:85:0d:dd:07:
f7:0a:c5:10:86:dd:59:1e:f2:40:ea:a4:69:e5:35:
b5:3b:55:44:ee:50:b3:7a:c3:54:03:89:25:df:e5:
56:72:67:37:45:cc:18:02:48:13:b1:7b:e5:0b:8a:
66:d8:57:d4:cd:26:72:c9:b8:54:91:54:48:2a:b2:
7e:99:bb:06:f7:a8:65:76:6e:8f:24:d4:41:ee:f6:
53:f5:aa:97:cc:bf:db:d2:05:62:07:71:81:5d:42:
6d:d6:b3:38:98:2a:70:05:a0:00:7f:9c:f0:73:a2:
53:04:24:5d:e4:39:c0:38:74:8a:b9:30:a1:c8:3b:
da:78:da:32:81:94:21:4b:75:d2:89:84:c9:b5:c8:
fa:2f:50:16:bf:27:94:79:28:6b:e7:16:5a:ac:d2:
92:6b:f9:a7:ab:ad:8a:77:1b:7b:e3:45:c0:8a:82:
34:4e:77:fe:e3:25:cc:da:5c:b4:36:b4:c0:e9:cb:
86:a1:b1:4d:b5:49:75:80:cc:bd:c5:0c:24:7f:e5:
ab:fc:3b:a4:87:05:5d:ec:c8:9d:d4:49:b4:95:3b:
2f:10:3b:84:5d:47:a6:25:fd:60:69:29:6b:6c:30:
5a:74:76:b7:79:88:d9:88:72:fe:d3:53:c3:cf:e1:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:29:60:B9:C2:15:D3:35:A8:B0:2A:6A:C9:3C:4C:44:7D:06:41
X509v3 Authority Key Identifier:
keyid:6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bb:b0:a9:fe:d5:ae:f9:19:52:72:03:1c:ce:87:fe:cc:50:
86:15:ad:e7:c6:7b:7a:24:2f:b6:97:3b:98:e1:81:7a:2f:29:
58:b6:7d:77:b1:9e:38:ad:3f:c8:4d:e4:e7:68:2d:9a:9c:90:
a2:8b:ba:f6:88:a6:76:fb:fd:9e:a7:21:fb:c9:b0:23:42:c0:
65:7e:29:9f:2e:9a:07:61:d7:20:88:32:2a:1d:75:71:a4:b7:
37:0b:e8:fd:11:6c:0a:d2:13:74:36:53:aa:5d:f1:1e:73:d6:
87:19:30:5a:48:34:41:ac:77:eb:58:70:30:39:b7:01:6a:5f:
44:8e:26:33:5c:7e:39:57:15:01:3f:1b:fe:f9:56:63:06:79:
76:e6:1d:58:b2:8f:47:b8:62:9b:f9:53:77:1f:20:70:3e:45:
fe:9c:66:68:7f:61:f9:29:22:ad:b4:9d:56:7c:52:02:39:f7:
b9:59:27:96:c6:43:42:0c:60:7f:ed:a6:09:e3:13:41:65:c7:
ae:c5:ef:af:29:66:ea:69:71:39:83:84:6b:12:d1:7f:02:b0:
ac:82:f7:f7:5a:66:9a:44:4b:22:53:2e:f0:0c:97:60:5a:5f:
71:e2:9f:78:0e:ed:ee:3c:14:98:18:7d:bb:a4:9e:13:df:41:
ed:82:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:24 2025 by rpki-client