Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
File: B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft (raw, json)
Hash identifier: 8Z7Q3AnO3lJtHdgbH5CI9fvDSVPNazdaxpYlb03gr9Q=
Subject key identifier: 85:52:64:0F:54:0B:F0:2A:35:1B:B5:B8:B6:97:3D:64:5D:5B:32:2D
Authority key identifier: 07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56
Certificate issuer: /CN=07730862dfb740166df453fb6e9c8508af5d9c56
Certificate serial: 0199FC58C4B3CECAB2D1B2617DBE1A8DA4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
Manifest number: 1494
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl (hash: XDkjdn8jmUNBARQSwcaIl42iaVjwyqIoE+lcZQRL9Ns=)
2: z09mXVSXSd7UAacEzfV20oFsmYY.roa (hash: 1yRcdJ+SBO6uBICs/lRiYWbJ7McXCDERo9p2CuxM7s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c4:b3:ce:ca:b2:d1:b2:61:7d:be:1a:8d:a4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07730862dfb740166df453fb6e9c8508af5d9c56
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=8552640f540bf02a351bb5b8b6973d645d5b322d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:7c:f4:26:06:b8:09:e8:91:5d:df:78:89:
4d:00:64:93:45:9b:34:f0:62:06:19:fb:6d:f7:77:
07:ae:34:64:52:a6:b9:5a:f9:13:87:d6:1d:89:f1:
b9:3a:76:c3:22:ef:0a:e4:2a:5b:92:da:14:af:f4:
ef:d0:b8:c0:f3:a9:18:26:b1:43:05:1d:51:71:ef:
46:b3:0d:f1:19:ea:9e:4f:03:f3:86:4a:75:2d:fb:
d3:96:a6:34:3c:27:f1:85:ba:03:80:26:3d:f2:77:
4b:03:0a:c8:ef:50:82:ab:ca:03:4a:eb:be:5f:b8:
29:e3:02:19:bb:70:eb:96:37:51:aa:2b:89:df:c2:
75:7a:b2:b8:90:d0:4e:fc:20:f4:70:d7:6e:73:97:
a5:bd:c6:64:c5:26:c7:c7:75:5c:ae:ec:19:2f:d0:
5a:f0:c6:47:1a:45:2a:d2:21:88:0a:26:44:8b:91:
24:5e:ac:65:90:96:1e:23:29:f8:ea:3f:c1:d1:64:
ca:e8:f2:c9:74:d5:73:7e:86:81:e7:a9:46:d8:3c:
fd:23:ed:1f:69:7d:72:1d:21:4f:f7:c4:2c:ed:0c:
f1:86:a6:b1:10:47:c6:b9:ed:87:c6:8d:4b:6c:a7:
59:37:87:79:8b:f2:20:08:a1:20:99:a0:dc:a9:d6:
c2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:52:64:0F:54:0B:F0:2A:35:1B:B5:B8:B6:97:3D:64:5D:5B:32:2D
X509v3 Authority Key Identifier:
keyid:07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f9:90:c8:a9:d6:e2:b1:0e:3b:ee:41:b8:c5:26:f7:fc:0b:
e8:c6:6f:f6:1f:3b:59:39:90:c7:ba:a7:7b:e3:0f:e3:96:3a:
45:11:b6:54:20:d2:9b:f5:51:72:d6:02:ae:ee:cf:46:20:0c:
22:f8:83:38:eb:dd:5b:43:34:a0:7a:f9:7c:b7:13:f4:28:92:
fb:51:cc:7f:86:84:3c:40:7f:6b:92:fe:e0:c4:0f:4f:a0:09:
11:83:a4:f6:71:66:44:b6:ab:6b:dc:c8:ed:6f:dc:1a:92:a9:
2d:27:72:de:54:8f:d5:31:25:87:3f:c4:d4:45:05:16:35:03:
ae:7f:67:7d:17:76:95:80:64:8d:1d:11:f1:87:40:8b:7c:e0:
cb:f4:51:02:e0:c0:78:2c:90:fd:e8:49:45:24:79:62:f2:44:
41:02:ce:7f:04:44:18:b2:38:1a:7c:e1:c6:e3:6f:e7:95:84:
2f:72:ef:ef:09:38:68:6d:ec:91:ed:3c:55:5b:81:59:7f:b0:
a6:53:29:a6:04:d0:01:b4:2a:ee:19:da:0a:bc:f8:db:25:2e:
1c:c8:7d:5e:1c:14:1d:6c:2e:5d:31:d4:51:81:d2:ff:75:63:
51:32:09:42:e6:be:62:3f:c2:19:3d:f6:f4:b9:e8:05:d2:46:
15:09:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:05 2025 by rpki-client