Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier: yyJIuYVuKWCHEigUbYH4pYhzFM1/1PlKqUpPd8L18DU=
Subject key identifier: 4F:62:31:0D:1C:FD:01:E2:C2:73:D2:BB:39:C7:4C:B0:63:AF:CE:4B
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 0197B6A1127657CA0F8B8AA4A2F5F9308171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number: 12EC
Signing time: Sat 28 Jun 2025 13:01:38 +0000
Manifest this update: Sat 28 Jun 2025 13:01:38 +0000
Manifest next update: Sun 29 Jun 2025 13:01:38 +0000
Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: XWYVxOmqbN6HTpyNolLczm1mv6GwvcJuYmEFXRQbYkM=)
2: wCDrJf6K3N6SQxouZVxxkGAndwU.roa (hash: RDCOaghInO75GT81gEgSeMeIYDUyZ4Fou/t1PYJdixY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:12:76:57:ca:0f:8b:8a:a4:a2:f5:f9:30:81:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: Jun 28 13:01:38 2025 GMT
Not After : Jun 29 13:01:38 2025 GMT
Subject: CN=4f62310d1cfd01e2c273d2bb39c74cb063afce4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:ae:cb:04:be:99:25:d7:56:9d:48:de:8c:
a9:27:b3:60:4b:05:dc:a1:41:84:0b:31:ca:c7:51:
a6:e6:d4:a6:22:d0:0f:33:85:06:04:6c:3f:d1:2b:
8b:21:36:55:ee:09:f0:4f:ae:81:b2:39:a1:d5:83:
b6:00:bd:4b:12:21:ec:7a:1b:87:4c:ac:19:e7:62:
5d:89:6b:17:21:ed:51:95:f9:d3:cd:36:e9:71:b3:
08:0c:cf:fb:f3:2a:07:1b:e9:9d:37:34:24:95:c2:
ed:11:0c:46:73:06:6a:90:97:6a:15:5b:5f:ea:68:
28:28:92:c6:38:35:6c:78:24:4b:96:f9:32:d5:f8:
e5:6f:dd:a7:86:5c:52:6c:08:04:f4:d7:fd:53:d7:
d6:94:fa:bc:45:b9:bd:cc:cb:59:db:c5:5e:9d:b1:
8f:fc:36:5f:47:eb:a9:ae:94:b6:c2:49:88:83:af:
c9:7f:0b:ab:d1:fe:d1:c8:b7:05:3d:e8:7f:5d:e1:
93:da:6d:67:f1:c3:85:41:1d:e8:eb:6f:b3:3b:b8:
f3:8f:82:bc:84:d5:19:45:da:58:aa:0f:ba:32:84:
5e:d7:c0:da:2f:56:a9:42:25:8a:dd:12:94:58:45:
1f:28:38:20:18:23:f6:ea:84:c3:ec:2c:cc:1e:e7:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:62:31:0D:1C:FD:01:E2:C2:73:D2:BB:39:C7:4C:B0:63:AF:CE:4B
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f6:59:7a:6e:99:67:7d:4d:71:76:98:fb:74:d7:19:7f:dc:
75:dd:43:68:36:55:3a:99:5e:c9:2b:24:d9:1a:2a:01:f5:6b:
3e:5c:dc:a9:53:b5:58:1c:98:68:ca:9f:79:c5:9e:35:9d:c7:
5a:9a:91:50:ac:3b:a5:cb:e3:b0:08:3d:29:eb:68:1d:3a:c0:
57:c0:d9:70:3d:ff:8c:39:a7:6b:c9:9f:3d:91:b1:55:8b:13:
f7:90:57:bc:d6:64:df:2e:0f:8c:9a:f7:e1:34:0b:ac:08:e5:
54:1f:71:52:ef:54:97:b2:18:00:87:44:2d:8d:51:28:35:a3:
16:b0:2e:1c:68:73:38:bb:4d:14:3c:90:52:66:71:cc:00:36:
46:fd:d5:50:1a:fc:3e:16:b2:af:ff:83:1c:ae:b5:f8:75:b5:
a1:8f:ff:78:c7:78:be:6c:c2:f9:2d:b1:26:f7:c8:7e:a7:b4:
3c:3f:62:06:ef:66:03:b3:a6:80:c7:b8:35:15:bc:28:90:84:
ae:22:02:49:ad:b7:72:6e:e9:58:3a:d5:dc:fa:e3:c2:69:27:
d8:65:b6:12:2d:96:99:21:12:01:f8:1f:8e:41:e0:18:d3:db:
8e:68:6f:60:3b:a1:83:36:dc:d2:cd:17:6a:e2:9c:41:3c:8c:
9a:26:cf:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oRJ2V8oPi4qkovX5MIFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzczZWIzZDMwNzk0ZDIyZDc1Y2Q4NzJiOTFhM2JhODQ4
ODQyZDcwHhcNMjUwNjI4MTMwMTM4WhcNMjUwNjI5MTMwMTM4WjAzMTEwLwYDVQQD
Eyg0ZjYyMzEwZDFjZmQwMWUyYzI3M2QyYmIzOWM3NGNiMDYzYWZjZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4uuywS+mSXXVp1I3oypJ7NgSwXc
oUGECzHKx1Gm5tSmItAPM4UGBGw/0SuLITZV7gnwT66Bsjmh1YO2AL1LEiHsehuH
TKwZ52JdiWsXIe1RlfnTzTbpcbMIDM/78yoHG+mdNzQklcLtEQxGcwZqkJdqFVtf
6mgoKJLGODVseCRLlvky1fjlb92nhlxSbAgE9Nf9U9fWlPq8Rbm9zMtZ28VenbGP
/DZfR+uprpS2wkmIg6/Jfwur0f7RyLcFPeh/XeGT2m1n8cOFQR3o62+zO7jzj4K8
hNUZRdpYqg+6MoRe18DaL1apQiWK3RKUWEUfKDggGCP26oTD7CzMHucWbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9iMQ0c/QHiwnPSuznHTLBjr85LMB8GA1UdIwQY
MBaAFG93PrPTB5TSLXXNhyuRo7qEiELXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yNGQ3OWQtMTc2Ni00MDQ1LTlkMjQt
NmEwYmFlYjIzMzZlLzEvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yNGQ3OWQtMTc2Ni00MDQ1LTlkMjQtNmEwYmFlYjIzMzZl
LzEvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/ZZem6Z
Z31NcXaY+3TXGX/cdd1DaDZVOpleySsk2RoqAfVrPlzcqVO1WByYaMqfecWeNZ3H
WpqRUKw7pcvjsAg9KetoHTrAV8DZcD3/jDmna8mfPZGxVYsT95BXvNZk3y4PjJr3
4TQLrAjlVB9xUu9Ul7IYAIdELY1RKDWjFrAuHGhzOLtNFDyQUmZxzAA2Rv3VUBr8
Phayr/+DHK61+HW1oY//eMd4vmzC+S2xJvfIfqe0PD9iBu9mA7OmgMe4NRW8KJCE
riICSa23cm7pWDrV3Prjwmkn2GW2Ei2WmSESAfgfjkHgGNPbjmhvYDuhgzbc0s0X
auKcQTyMmibPpA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:47 2025 by rpki-client