Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
File: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json)
Hash identifier: M7855NcWa9F4bVzdobQ+cvnLJgUtlQemRfPw6G7A97I=
Subject key identifier: 98:01:1B:C3:71:A4:1C:57:AC:4E:27:26:A8:B0:BD:8B:12:36:54:52
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Certificate issuer: /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial: 0199FEB4AE6FA354CAA8B28E4FC084640701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
Manifest number: 01AC
Signing time: Sun 19 Oct 2025 23:01:17 +0000
Manifest this update: Sun 19 Oct 2025 23:01:17 +0000
Manifest next update: Mon 20 Oct 2025 23:01:17 +0000
Files and hashes: 1: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: T7ew5+J1SG3IFa/y7QmlFK3Go6LCWR3XzvwyHdrYsRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:ae:6f:a3:54:ca:a8:b2:8e:4f:c0:84:64:07:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Validity
Not Before: Oct 19 23:01:17 2025 GMT
Not After : Oct 20 23:01:17 2025 GMT
Subject: CN=98011bc371a41c57ac4e2726a8b0bd8b12365452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:ef:b6:6a:f5:b2:42:0c:9d:e3:fc:57:95:
65:87:8c:7d:b2:6c:e5:d6:07:b0:59:01:e4:43:20:
5c:a6:15:98:a0:bc:57:73:d7:91:32:92:89:fd:ae:
48:5b:0e:18:4e:9b:a3:7d:29:64:27:1d:77:d7:fc:
e3:02:a6:4a:80:74:71:14:3d:f1:b7:66:0e:18:ea:
0e:4e:47:bb:b7:f3:e4:a4:43:0c:ed:59:33:1c:f6:
8b:47:3c:21:57:4a:e6:bb:35:70:bf:99:75:dc:a1:
a3:31:f4:52:6d:b5:14:9d:de:01:9f:2d:88:f9:9a:
7b:21:bd:cf:b0:7d:10:5b:f9:ac:1a:65:7f:18:9f:
cd:5d:65:1d:be:71:2c:b4:9e:f8:63:30:34:56:f2:
ad:6a:5e:e4:5b:07:c0:14:00:cf:6f:87:9d:3e:1f:
e1:25:38:73:a3:b5:41:ea:24:06:2e:48:30:c1:c0:
c2:02:15:0d:f4:b6:20:d9:a8:35:4c:f6:f9:6e:f0:
0f:0f:a4:e8:0e:d0:ac:4f:49:b1:69:0e:a8:bc:82:
e1:4a:12:39:8d:14:b4:df:ec:7e:0d:3d:b0:61:c9:
cf:03:d0:c9:55:c9:23:b3:de:4f:ab:f1:af:c4:8a:
28:b2:6d:4d:f4:55:0c:af:52:2d:1a:4d:ae:a7:6b:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:01:1B:C3:71:A4:1C:57:AC:4E:27:26:A8:B0:BD:8B:12:36:54:52
X509v3 Authority Key Identifier:
keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:18:55:de:de:63:df:70:ee:e7:67:76:ce:9c:69:70:59:37:
c1:79:88:3e:4d:e0:2e:e7:ce:69:08:67:3e:df:0c:79:6d:77:
66:b3:b5:f9:e7:03:66:15:a1:4b:7c:f7:7e:7e:e8:72:b2:e9:
17:e8:6e:51:54:ec:d0:10:46:da:b8:cc:37:6e:34:20:98:75:
00:e0:f7:91:e7:10:62:0c:9b:cc:c3:88:08:6c:c6:5c:32:81:
e5:5d:76:54:f6:b0:e6:a9:b5:86:fc:7a:cb:3f:6d:9b:04:81:
40:87:65:d1:b0:4f:3d:e7:9b:48:f2:7a:d6:4a:3f:bc:33:9c:
2f:fe:3a:a2:57:5d:15:16:2e:4a:fe:f4:62:20:57:f9:31:9d:
f5:aa:42:78:47:d4:f9:ca:14:6a:56:da:f9:a2:93:ef:3e:3d:
ce:66:bf:55:d6:06:25:98:fd:21:19:95:34:6c:55:37:a1:6a:
89:6b:11:f9:3a:4a:cc:49:7d:09:e4:81:43:f9:af:d8:38:7f:
46:70:e8:28:84:ab:a6:a7:16:56:e3:17:5e:79:14:35:43:bb:
b9:4b:27:76:dc:fe:e5:56:79:b5:eb:32:7f:d7:0f:ff:7d:3f:
88:6b:89:22:53:84:a2:c2:90:60:09:76:6e:d1:48:04:75:2d:
28:75:75:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:30:22 2025 by rpki-client