Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
File: bb3coKsuvouFKafJzh3W6OpVXD0.mft (raw, json)
Hash identifier: CueCFhEc8f8d3x+tcsLI0SrbfuxFbBo1LdxqrGWWvDY=
Subject key identifier: A0:31:CD:F9:73:F3:4A:28:AF:DD:1C:DC:D1:EE:0B:24:6A:46:66:35
Authority key identifier: 6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
Certificate issuer: /CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Certificate serial: 0199FDDA88892614A487C2E25971AAF56B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
Manifest number: 127A
Signing time: Sun 19 Oct 2025 19:03:01 +0000
Manifest this update: Sun 19 Oct 2025 19:03:01 +0000
Manifest next update: Mon 20 Oct 2025 19:03:01 +0000
Files and hashes: 1: 3CFsdbO_NdkVNQKrJjhbIF4SBso.roa (hash: R9TEphKFrn4GbHRX9svL6mjGOOWCjifpYgOEm5Ktk3o=)
2: bb3coKsuvouFKafJzh3W6OpVXD0.crl (hash: 9yI7htQ2sLsQ4VzjlX8W/baZt7q0KVwGscKbIKPDRog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:88:89:26:14:a4:87:c2:e2:59:71:aa:f5:6b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Validity
Not Before: Oct 19 19:03:01 2025 GMT
Not After : Oct 20 19:03:01 2025 GMT
Subject: CN=a031cdf973f34a28afdd1cdcd1ee0b246a466635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1e:0b:db:53:9a:cd:37:83:2d:e0:89:25:d9:
ba:0a:32:7f:c2:32:5d:a9:e0:8f:25:bc:78:16:b7:
bf:9a:db:24:91:71:64:b1:1a:49:9f:0d:3d:8c:4b:
a4:1a:04:99:90:b3:e5:0c:18:08:29:49:d3:08:e6:
9d:66:27:ba:16:91:7a:1c:96:4d:9d:4d:4b:8f:18:
0f:27:a8:94:dc:d2:9a:96:f1:56:bb:e7:f6:4b:e3:
ab:9b:97:de:0a:60:9a:95:e9:e1:76:c3:31:94:23:
a8:57:45:80:db:79:8e:de:c2:3f:44:4e:60:f2:cc:
10:bb:7a:c5:d5:16:c3:dc:ef:45:54:66:e9:df:46:
dc:9d:26:c1:66:b5:50:4f:5b:95:8b:67:ac:18:d3:
6a:5f:a6:16:06:a0:45:2f:20:6b:12:a3:d1:68:e4:
f1:1b:9a:57:8a:a6:09:9e:e6:08:a5:18:d5:62:31:
7e:51:78:0a:83:a6:5c:f0:77:30:d7:0c:6a:2c:b9:
ef:3b:5a:52:f0:b5:c8:83:d5:7a:d8:88:c3:73:1d:
26:4e:2b:d0:3d:ce:a5:a6:99:15:bb:06:95:b4:08:
c8:94:5d:76:73:05:8d:85:05:c7:24:c9:a2:91:ed:
ef:d6:3a:58:c2:71:f4:e6:45:d1:d6:1c:cd:c8:18:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:31:CD:F9:73:F3:4A:28:AF:DD:1C:DC:D1:EE:0B:24:6A:46:66:35
X509v3 Authority Key Identifier:
keyid:6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2f:06:9d:99:d4:f0:af:21:ba:77:03:99:2e:9b:cc:55:f0:
79:0b:e2:ac:df:31:e1:6f:4f:ed:4d:1e:7b:c3:ab:4e:bd:1e:
b7:d0:99:4c:83:56:7e:c1:9a:52:9e:91:1e:e0:cc:b3:63:5c:
c7:9b:4e:75:3b:42:0c:b4:74:0f:75:43:c9:c8:3f:63:6e:d5:
6c:11:da:e9:e1:c5:bf:90:04:a8:de:e9:9b:4d:bc:64:24:84:
31:66:6c:2f:09:1b:ea:07:83:74:25:47:e2:09:36:3f:4c:8e:
87:02:27:13:24:d6:35:d7:37:d6:52:2d:9d:33:60:76:cf:10:
a6:de:2f:1c:ad:6e:33:1a:bc:b2:67:5b:43:c7:16:af:95:a0:
af:b9:6f:a9:b1:da:cd:f2:78:a1:15:b3:45:72:8c:e8:b2:43:
7a:68:0e:50:3a:1c:28:ff:bd:a2:5c:b7:30:c0:d3:f9:96:f6:
01:2b:98:5a:5d:d7:0a:76:8a:e5:31:26:e3:4c:c5:6f:0e:fd:
6f:6a:cb:46:1e:fa:b9:a4:cb:6c:a7:69:9b:6d:68:89:88:18:
48:48:bf:0e:0c:9e:10:6c:64:e5:6b:21:fc:e5:72:d7:10:d9:
d3:97:3f:76:32:34:c1:77:ae:b8:53:2b:d2:69:05:81:ec:e0:
90:f1:af:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:18:00 2025 by rpki-client