Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier: jiIe0eZpX93GExWlVbjXnRLPOq9YB8uEoqW4x4ogUHM=
Subject key identifier: B5:23:31:E2:71:CF:5F:3C:71:AC:40:5F:A6:07:0B:BE:8D:F3:FF:C2
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 0199FA6A74789779A8C929F5394F48B3BC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number: 14DE
Signing time: Sun 19 Oct 2025 03:01:44 +0000
Manifest this update: Sun 19 Oct 2025 03:01:44 +0000
Manifest next update: Mon 20 Oct 2025 03:01:44 +0000
Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: u0YImGObmCKw9CYYzvGxLzDLJW5rd5K7ovrq/PCY3I4=)
2: q4kKsYZfOGon2mT-Eapypp72_Ec.roa (hash: w/Ifs9Hdm+PYXiSZpAXsafh4R7xPHRN+zAgqDILsgeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:74:78:97:79:a8:c9:29:f5:39:4f:48:b3:bc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: Oct 19 03:01:44 2025 GMT
Not After : Oct 20 03:01:44 2025 GMT
Subject: CN=b52331e271cf5f3c71ac405fa6070bbe8df3ffc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d3:2f:f3:d5:cc:81:15:39:e0:ae:b7:62:8f:
6f:63:42:10:3d:43:95:b9:f9:05:b2:09:ac:2c:78:
f7:08:c2:12:71:8b:f6:d8:37:50:0a:60:a3:ca:63:
21:3b:78:8f:be:92:47:e2:16:ee:f4:de:68:a0:b6:
a0:97:03:4d:5e:c2:82:c1:10:ed:e2:b4:be:b1:e6:
99:cd:b5:03:21:ed:8c:85:85:44:dd:29:11:2b:3a:
70:a1:d2:e2:61:a6:62:a2:ed:74:ea:c2:30:fc:71:
e5:72:90:0e:4b:f6:9c:c1:af:17:7a:25:d6:b6:6a:
62:df:c0:c2:b7:31:26:c4:e9:fb:38:6f:f2:c9:fb:
dd:b1:9d:3f:82:2f:ff:71:2f:60:5b:20:99:a3:7e:
f5:6b:b6:f8:40:81:b9:89:58:dc:12:d7:e5:c9:1f:
86:7f:f7:7a:ff:68:12:66:c7:9d:f3:51:8a:c6:7f:
28:aa:6e:1a:9b:35:23:fc:ef:ca:8d:28:ec:5f:31:
93:bc:9a:85:ff:53:60:77:9d:9b:22:87:e2:05:f3:
7a:34:02:a2:5f:b6:c8:2d:c1:a8:5a:3b:ae:c3:49:
09:93:e1:68:ae:d1:d4:bb:42:92:50:25:4c:d5:9a:
24:08:8b:46:54:41:36:60:36:7a:22:ca:e8:7f:d5:
ac:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:23:31:E2:71:CF:5F:3C:71:AC:40:5F:A6:07:0B:BE:8D:F3:FF:C2
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8e:4f:e7:8a:93:41:1b:87:20:47:dc:4d:6f:00:27:95:a2:
68:71:d4:be:07:8c:b9:73:f2:51:89:a6:b1:87:fa:2c:26:f9:
73:ae:54:e5:f4:e1:99:d2:48:5f:af:04:e0:ed:6f:73:70:e2:
04:1f:50:e1:09:a3:90:0c:98:4e:9c:0a:a3:05:a6:53:c0:0a:
88:a0:9c:2c:0b:f9:0a:42:ce:84:16:f1:c6:fb:f7:b6:ee:29:
48:13:fa:74:62:6b:45:6b:1e:ac:86:d9:67:8a:17:de:f9:f4:
0a:79:e5:59:b6:c9:a5:52:34:6f:1d:39:47:3a:40:9d:a3:68:
e1:e7:24:e3:c7:e5:63:53:f2:15:b6:76:10:eb:db:e7:65:0f:
72:bd:83:ea:ef:ed:6d:ae:f9:70:a3:84:0b:25:d1:8a:87:3c:
f1:f1:59:28:3b:3f:b8:4c:1b:d2:cf:f4:65:dc:a0:84:5a:b1:
4e:6e:d8:e6:06:d8:e9:45:c5:5e:2e:db:28:51:81:ce:76:5c:
95:0b:9d:19:ab:77:a7:86:4c:4c:1d:25:9a:8a:c4:1f:fd:db:
6e:84:af:0a:a1:76:0d:d2:78:c3:c5:39:fb:79:94:5e:db:cd:
4c:32:fa:60:ac:13:50:97:5c:54:98:50:05:9e:96:89:e0:46:
09:89:17:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:52 2025 by rpki-client