Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier: 3dtgUqCKgHG69RlRockLgc04aPItEpJARWX/CYeZREk=
Subject key identifier: 63:B0:6B:F3:7D:22:FB:CB:3E:EC:A5:77:88:0D:66:8D:64:28:CF:7C
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 0199FBEAF7076676C0A81506B64739A9F0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number: 1419
Signing time: Sun 19 Oct 2025 10:01:43 +0000
Manifest this update: Sun 19 Oct 2025 10:01:43 +0000
Manifest next update: Mon 20 Oct 2025 10:01:43 +0000
Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: 0eGAws10KLIKdWGOfG6+P64GtP/ANbFgVVPOT01N578=)
2: wCDrJf6K3N6SQxouZVxxkGAndwU.roa (hash: RDCOaghInO75GT81gEgSeMeIYDUyZ4Fou/t1PYJdixY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f7:07:66:76:c0:a8:15:06:b6:47:39:a9:f0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: Oct 19 10:01:43 2025 GMT
Not After : Oct 20 10:01:43 2025 GMT
Subject: CN=63b06bf37d22fbcb3eeca577880d668d6428cf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:b6:3a:5e:8a:82:c2:2b:3f:e1:89:c7:1c:
94:a3:d0:67:03:c6:b0:da:04:4e:dc:0b:ac:4b:67:
58:6e:e4:d0:86:36:e8:f0:9f:2d:91:19:5f:a7:6a:
54:09:45:c3:cf:a5:6d:d5:28:2a:87:97:16:85:10:
0b:50:3a:29:ce:be:a6:83:55:8c:4b:d4:f1:10:2b:
be:1e:3e:63:41:46:25:47:c8:35:80:b1:31:a0:d1:
5c:ba:dd:d4:d2:d8:92:05:6f:c6:4c:77:6f:2a:95:
c6:21:6b:bc:2a:99:32:f7:1e:d9:94:53:b5:78:d3:
bc:d6:b4:e1:24:a0:99:fd:6e:82:f5:c8:73:77:6e:
30:d6:b7:65:e9:3d:75:58:8e:25:18:74:aa:6a:b3:
69:34:c9:0a:9f:5c:e0:b4:75:fc:30:c3:50:ef:d1:
7d:77:79:73:55:de:c8:c2:44:15:e6:8a:5e:4c:f5:
3a:ed:15:8b:bb:1e:61:e1:73:81:26:bd:a1:93:f5:
a3:ae:83:a2:a7:a1:ab:69:cf:7e:f2:38:06:e6:66:
df:ab:80:ac:67:d3:c3:0d:93:38:5f:75:fa:09:1c:
4d:23:98:f3:ad:e6:9c:fe:92:a8:3e:4d:89:ee:99:
d3:58:18:05:ef:8c:89:06:07:59:5a:e2:90:e8:41:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B0:6B:F3:7D:22:FB:CB:3E:EC:A5:77:88:0D:66:8D:64:28:CF:7C
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:99:a0:eb:0e:ff:44:f6:56:56:4f:58:74:79:ef:f9:2e:05:
53:40:ba:3a:3a:c3:99:cc:a0:00:27:8c:4a:2e:f9:27:a2:97:
c2:4f:68:1c:22:cf:14:5c:96:55:44:27:e1:24:b2:29:d6:c5:
64:57:21:89:5d:55:5d:7e:43:49:39:ff:19:18:41:35:a9:68:
08:88:36:c7:42:f3:b4:3a:74:eb:7d:f3:a9:87:27:cb:e9:f9:
7e:2d:55:52:b5:c8:9a:cd:64:45:6f:bf:06:b1:11:f1:e1:dc:
6f:35:5e:bf:a6:e4:c6:50:41:86:98:18:ff:b3:50:90:2b:4a:
67:8b:5a:fa:cf:da:96:07:52:20:15:7f:6a:65:9a:4b:78:ff:
05:50:54:f8:39:df:f5:f3:26:86:09:49:d6:65:ab:52:02:52:
ac:db:77:cd:51:a6:6f:8f:a8:81:b9:5a:39:7d:9f:69:82:47:
16:0c:8a:7e:a1:95:15:f8:45:ea:aa:42:69:f5:00:5b:97:b7:
9b:87:cb:7f:47:8d:c7:a1:51:36:11:d5:f1:ac:a6:b8:67:9d:
6c:69:54:18:7e:f2:62:fa:77:c5:9f:2c:81:48:85:d7:c3:8e:
01:47:ad:a7:bb:36:4c:9c:0e:dd:53:c0:b1:62:62:19:6f:4c:
14:c1:4b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:27 2025 by rpki-client