Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
File: b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft (raw, json)
Hash identifier: /6Jg8tmFiFlTlRD08Tg+eMQPPPw5PtYSaHVPE/2ENBE=
Subject key identifier: 17:E7:77:FD:AC:1D:20:0A:E2:CF:D2:26:93:52:77:82:54:E9:5D:64
Authority key identifier: 6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
Certificate issuer: /CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Certificate serial: 0199FCFD20E7F30E3DA0E082381E83575188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
Manifest number: 0DD8
Signing time: Sun 19 Oct 2025 15:01:11 +0000
Manifest this update: Sun 19 Oct 2025 15:01:11 +0000
Manifest next update: Mon 20 Oct 2025 15:01:11 +0000
Files and hashes: 1: XWsgGaUk-tCex2rEANvQhHC_vUw.roa (hash: 4qgfJUiMzzdt5fICZLGjB/iCgpPLmmWKoci9oWUf3cw=)
2: b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl (hash: SOxqyyrJrr4Rcb9JccLvhfA1ExMgqOlGiHXHeDPDu4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:20:e7:f3:0e:3d:a0:e0:82:38:1e:83:57:51:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Validity
Not Before: Oct 19 15:01:11 2025 GMT
Not After : Oct 20 15:01:11 2025 GMT
Subject: CN=17e777fdac1d200ae2cfd2269352778254e95d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:d9:31:f6:55:3d:04:56:65:d4:4b:0f:59:
0e:06:7c:a6:9e:89:95:ab:e0:a9:99:6a:0d:36:40:
6d:ba:24:9e:af:95:32:6d:f4:82:23:66:21:86:81:
99:5e:62:26:8b:10:1c:51:2b:3b:10:e9:59:89:d5:
64:b4:56:c7:48:b3:b8:4a:f5:62:f9:4f:5c:ae:44:
43:ab:dc:c1:ce:f1:58:6d:92:29:63:80:2a:1f:46:
07:d0:99:5b:ad:f8:74:ad:d6:15:5a:b5:e3:7a:9e:
2e:2b:4c:1b:6a:34:67:d2:9b:06:00:6d:3f:4a:3a:
9e:07:9f:ad:7c:c1:32:42:c4:d3:0e:22:c2:42:53:
f0:a8:63:fc:bf:5a:e9:2e:02:32:80:0e:cb:78:8b:
24:7d:57:f1:4d:93:e6:4f:9a:db:e7:7d:1e:74:70:
fc:de:cd:9c:01:42:af:4f:9b:c8:7c:30:bd:cf:1b:
72:54:8f:64:6e:b6:90:b2:9d:ad:a9:a5:5e:cb:8c:
2b:ef:0d:21:4d:8c:5c:a6:89:9f:ac:fa:d7:9d:61:
df:83:e2:70:c1:37:87:67:ff:76:9c:83:3a:a3:52:
50:66:57:91:1c:65:1f:13:bd:47:b7:40:27:ba:1e:
5d:25:c7:8b:c8:38:f0:a7:36:97:c2:0f:b2:36:b7:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E7:77:FD:AC:1D:20:0A:E2:CF:D2:26:93:52:77:82:54:E9:5D:64
X509v3 Authority Key Identifier:
keyid:6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:55:56:77:f0:2e:1b:21:48:e6:1e:b6:04:6e:1b:62:43:f9:
1e:9b:bf:8a:4a:50:4f:c5:f5:6d:ec:8e:02:05:9e:73:5f:87:
f5:83:29:3f:fb:1f:35:88:47:82:5d:59:22:18:07:45:cd:9a:
0b:53:af:4e:51:29:da:aa:3c:d1:61:d7:2a:db:f9:38:1b:ff:
55:26:84:95:e0:25:12:9f:20:52:ac:72:f8:f2:ab:9f:e2:63:
42:7f:41:79:ee:5f:29:81:c2:68:14:22:62:c2:f0:9f:ea:e3:
00:58:73:8a:57:80:fc:44:9b:ef:b9:b0:84:22:47:5f:8b:8d:
90:34:0b:25:a4:01:ca:22:51:9a:ea:9d:ea:08:0d:38:da:a4:
6e:cb:5d:cc:9e:33:35:5e:19:ce:5e:f1:7c:9e:aa:b7:88:2c:
4f:cc:ca:2a:cc:35:ab:bb:4d:1a:d0:38:ff:50:db:58:7d:fd:
29:04:42:46:81:b4:94:ab:85:66:a5:e3:39:14:d7:5d:7e:66:
46:f8:1b:e0:54:10:21:e2:fa:83:1a:4d:b6:0a:8c:13:bd:fd:
2e:71:08:2f:91:6a:d0:d7:fc:1b:51:8a:50:58:ff:9f:4f:d1:
e3:e4:8d:2c:4a:0f:14:6d:1f:c6:76:53:e7:0e:cc:a4:e6:28:
f0:e8:cc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:07 2025 by rpki-client