Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
File: b3s1wIukkwGmzEMK2pSTztftQhg.mft (raw, json)
Hash identifier: oXIhdmZNpLWenOAeGDkRhkbDGq+E51CS63IXeAayvhE=
Subject key identifier: A1:F8:66:83:E4:E0:6D:E0:DB:16:93:E2:3C:A2:E9:9F:FE:19:90:4C
Authority key identifier: 6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18
Certificate issuer: /CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
Certificate serial: 0199FA6A521F7FD2C8AABCFE87F498DDD6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
Manifest number: 90
Signing time: Sun 19 Oct 2025 03:01:35 +0000
Manifest this update: Sun 19 Oct 2025 03:01:35 +0000
Manifest next update: Mon 20 Oct 2025 03:01:35 +0000
Files and hashes: 1: b3s1wIukkwGmzEMK2pSTztftQhg.crl (hash: HpZ+XCzpt+2e0GdCJ+YYYZqIS3+kyQ+JjoIpYoXtH7w=)
2: pkftKVVmiNveyWOcRoVjEB6YNJc.roa (hash: yqLLWSLnILZmgFNtvkmzRb5dEu8dzji64doE8FAEeXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:52:1f:7f:d2:c8:aa:bc:fe:87:f4:98:dd:d6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
Validity
Not Before: Oct 19 03:01:35 2025 GMT
Not After : Oct 20 03:01:35 2025 GMT
Subject: CN=a1f86683e4e06de0db1693e23ca2e99ffe19904c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:01:81:77:ba:43:d4:94:e3:a3:5a:1d:e2:59:
58:8f:49:fb:bd:43:2c:78:0e:e7:0f:cd:f9:06:91:
57:86:31:65:92:03:16:80:40:e1:b9:dd:8a:6c:e7:
27:b6:3b:9a:ed:a8:8c:f8:95:18:d2:1d:44:9c:f8:
51:9b:b8:64:ba:52:4d:de:d6:2a:c4:77:1f:34:79:
f5:03:f3:ff:2d:c8:cc:ab:42:c5:21:81:f1:79:f3:
ff:ba:fc:a7:34:8f:65:51:68:62:0e:7a:02:6e:3e:
a3:b1:79:79:32:61:f7:a3:c0:8b:ff:cd:03:e2:4c:
08:97:39:70:96:a6:c4:d3:f2:46:25:a4:62:65:df:
78:7e:98:ee:4e:ad:d5:0a:64:11:b7:79:25:7f:27:
52:2c:c7:0a:90:59:1a:57:98:79:61:1f:0c:43:46:
61:b8:27:a3:3b:a9:6e:78:d7:0b:8e:55:3a:e1:8f:
03:7e:d0:d7:9d:be:4e:7c:67:e1:0e:fa:65:c3:92:
e7:23:4c:1a:cc:92:04:f6:49:dc:23:1a:5c:90:28:
8b:a1:7c:be:ad:15:24:43:8d:eb:30:63:e8:23:38:
1b:4a:07:58:b6:38:c8:d8:c2:08:b6:12:0d:2a:fe:
d7:cb:f7:ef:1a:b2:f2:cd:7b:89:b7:27:18:e6:c2:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F8:66:83:E4:E0:6D:E0:DB:16:93:E2:3C:A2:E9:9F:FE:19:90:4C
X509v3 Authority Key Identifier:
keyid:6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2f:25:2a:1e:4b:75:8c:3e:50:93:a9:f6:2d:2c:92:93:e7:
33:26:c4:04:67:1d:7a:22:6d:a7:e6:00:2c:2b:d6:63:13:d3:
94:8b:b0:4a:5d:06:dc:45:d0:a3:a8:c9:8c:09:08:49:cc:33:
c6:27:19:dd:f3:b4:82:87:45:c3:da:58:30:e1:d9:e2:90:8e:
e0:9b:2b:99:3b:a5:08:5b:3f:67:4a:c4:4e:6f:d4:5a:d1:46:
79:53:cf:f6:e2:c3:8b:f0:ba:3e:fa:94:ff:25:ea:2d:39:a8:
81:a8:7d:41:f6:eb:42:20:79:59:68:a3:4a:9d:50:a6:4c:d1:
bd:36:54:49:8f:0f:a2:50:4b:74:dd:f0:19:c3:66:15:dd:99:
eb:de:21:d1:99:89:b3:7f:fc:ca:15:14:2e:52:24:e3:30:ea:
03:e5:d6:69:b4:11:ef:f9:5b:98:d4:7d:75:0b:c8:1f:84:8f:
04:2e:09:82:c8:a7:c7:31:45:6f:85:04:c1:73:6b:be:30:00:
ed:46:46:1b:de:c9:ad:02:b8:5f:69:d6:e0:8c:1b:26:9c:2b:
a8:18:34:ed:5f:b4:ef:d8:83:00:bb:b4:fd:e4:30:a5:56:bf:
1b:0b:9f:21:fc:01:6c:1d:5b:77:27:16:16:ab:3f:d2:50:ce:
3c:92:c9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:00 2025 by rpki-client