Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
File: b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft (raw, json)
Hash identifier: StipKDBgz0ve7i1fbKdemeqoueP8VXShpZ+4rdqciMo=
Subject key identifier: 69:10:10:66:1D:2D:75:FD:E3:B1:86:17:17:56:AC:06:EB:B7:DD:8D
Authority key identifier: 6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
Certificate issuer: /CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Certificate serial: 0198D583A228885B23BF0DCBF473BA641ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
Manifest number: 0D3F
Signing time: Sat 23 Aug 2025 06:00:30 +0000
Manifest this update: Sat 23 Aug 2025 06:00:30 +0000
Manifest next update: Sun 24 Aug 2025 06:00:30 +0000
Files and hashes: 1: XWsgGaUk-tCex2rEANvQhHC_vUw.roa (hash: 4qgfJUiMzzdt5fICZLGjB/iCgpPLmmWKoci9oWUf3cw=)
2: b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl (hash: ltl+NW3a5HmhV8sFxevj/O/DziUGHz+wfGQs17v7xVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a2:28:88:5b:23:bf:0d:cb:f4:73:ba:64:1a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Validity
Not Before: Aug 23 06:00:30 2025 GMT
Not After : Aug 24 06:00:30 2025 GMT
Subject: CN=691010661d2d75fde3b186171756ac06ebb7dd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:06:c9:75:81:52:44:55:bd:e3:1a:d4:ec:5b:
d3:23:8a:4e:3a:25:87:f5:69:23:d8:b1:52:17:0e:
9f:6b:ec:44:ab:71:5a:d8:75:04:2d:25:bf:db:97:
b1:18:65:a5:d5:e0:8e:fc:d0:01:6b:d1:49:51:22:
7e:5a:25:20:46:e5:4e:1f:66:e4:ae:3c:d2:94:e9:
95:b3:25:15:e7:eb:b3:a3:3f:46:9b:12:7b:4d:b4:
80:0c:0d:ca:f1:c8:49:06:97:2d:4e:e9:a0:98:1b:
f2:80:ef:26:8f:65:a6:d9:4f:6c:c8:7b:1f:5a:74:
ba:bc:d4:e7:89:25:da:9b:61:4b:7b:35:01:f7:82:
be:32:23:f2:88:4c:3d:7d:38:3d:e0:c1:e3:2b:67:
5f:04:a0:5b:91:2d:20:7c:22:f6:97:57:c7:b4:9d:
5b:f0:a1:9a:bc:2e:df:02:a4:11:85:57:7f:83:d1:
27:84:77:61:04:16:98:46:77:42:b9:f3:28:03:1d:
c7:37:0d:90:7a:7e:70:57:f1:9f:76:8c:9a:86:1d:
95:0b:e9:53:76:90:5b:e3:71:51:0e:a5:08:95:6e:
a4:13:b9:ea:d5:12:05:4b:38:1d:b0:e2:95:bb:ad:
d4:d4:3a:ce:a4:f3:00:dc:0d:a1:bd:9a:26:0d:15:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:10:10:66:1D:2D:75:FD:E3:B1:86:17:17:56:AC:06:EB:B7:DD:8D
X509v3 Authority Key Identifier:
keyid:6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:49:7e:fc:ff:9d:b0:c8:59:7a:a1:1f:3f:ec:8a:51:9d:5a:
b9:8f:a2:93:6d:aa:ac:65:66:02:12:2d:b0:26:ea:29:5b:8e:
ec:ab:e6:e3:81:57:9e:87:62:4f:c9:4e:4b:b4:a2:2c:c6:54:
f5:9e:90:be:ab:69:ad:d4:bd:39:bf:f5:8e:89:86:d4:c0:e7:
c3:f6:9c:cc:ca:cb:6f:0f:cf:84:a1:37:a7:dd:f1:df:a2:56:
36:72:60:bf:ec:4d:80:b2:ec:be:2c:ea:bd:0c:aa:f2:a6:5e:
40:73:aa:86:81:bf:e7:28:c8:45:91:3e:d5:d7:b9:e5:73:7c:
35:10:19:40:d9:be:b1:8b:23:7e:88:5f:0e:96:24:2c:77:4f:
70:ae:2c:d1:1d:07:5a:fe:88:38:34:3a:6a:6e:ec:cb:f3:01:
be:f7:47:48:81:1d:e5:1a:3b:46:4e:07:a5:96:49:9a:66:f7:
db:ab:99:8e:ed:20:1c:b5:b3:65:63:36:74:38:04:08:24:76:
8f:68:c8:58:2e:1d:73:8e:c1:fa:d1:a4:bb:9d:54:2e:b1:6a:
ad:13:5d:c7:79:cd:8a:87:c3:a6:e7:38:1d:ca:62:02:73:9f:
f5:6b:32:4a:23:7a:0b:ae:2f:01:86:68:8b:f0:28:92:2e:e8:
7d:5e:1d:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg6IoiFsjvw3L9HO6ZBq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzliNThhM2JmYTM4YmU5MDkzNmMzMTRmMTRiMGQ5YzM1
OWFjYzEwHhcNMjUwODIzMDYwMDMwWhcNMjUwODI0MDYwMDMwWjAzMTEwLwYDVQQD
Eyg2OTEwMTA2NjFkMmQ3NWZkZTNiMTg2MTcxNzU2YWMwNmViYjdkZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQbJdYFSRFW94xrU7FvTI4pOOiWH
9Wkj2LFSFw6fa+xEq3Fa2HUELSW/25exGGWl1eCO/NABa9FJUSJ+WiUgRuVOH2bk
rjzSlOmVsyUV5+uzoz9GmxJ7TbSADA3K8chJBpctTumgmBvygO8mj2Wm2U9syHsf
WnS6vNTniSXam2FLezUB94K+MiPyiEw9fTg94MHjK2dfBKBbkS0gfCL2l1fHtJ1b
8KGavC7fAqQRhVd/g9EnhHdhBBaYRndCufMoAx3HNw2Qen5wV/Gfdoyahh2VC+lT
dpBb43FRDqUIlW6kE7nq1RIFSzgdsOKVu63U1DrOpPMA3A2hvZomDRXWTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkQEGYdLXX947GGFxdWrAbrt92NMB8GA1UdIwQY
MBaAFG95tYo7+ji+kJNsMU8UsNnDWazBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNtMWlqdjZPTDZRazJ3eFR4U3cyY05ack1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zN2ExMzQtNGM0OC00YjVhLWI0NDMt
NTJkOTgyZDIxZGZmLzEvYjNtMWlqdjZPTDZRazJ3eFR4U3cyY05ack1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zN2ExMzQtNGM0OC00YjVhLWI0NDMtNTJkOTgyZDIxZGZm
LzEvYjNtMWlqdjZPTDZRazJ3eFR4U3cyY05ack1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkl+/P+d
sMhZeqEfP+yKUZ1auY+ik22qrGVmAhItsCbqKVuO7Kvm44FXnodiT8lOS7SiLMZU
9Z6QvqtprdS9Ob/1jomG1MDnw/aczMrLbw/PhKE3p93x36JWNnJgv+xNgLLsvizq
vQyq8qZeQHOqhoG/5yjIRZE+1de55XN8NRAZQNm+sYsjfohfDpYkLHdPcK4s0R0H
Wv6IODQ6am7sy/MBvvdHSIEd5Ro7Rk4HpZZJmmb326uZju0gHLWzZWM2dDgECCR2
j2jIWC4dc47B+tGku51ULrFqrRNdx3nNiofDpuc4HcpiAnOf9WsySiN6C64vAYZo
i/Aoki7ofV4diQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:57 2025 by rpki-client