Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier: ZfZLaEpVQP0ySrBrl2FydMrZe53NXH9vNSgmIfvoY5s=
Subject key identifier: 1A:EE:91:A8:D0:70:12:C3:95:E4:BD:DF:1A:B6:E4:A4:EB:57:85:4C
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 01984B8A353796019EB9D3FBB75798B9372E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number: 0D28
Signing time: Sun 27 Jul 2025 11:00:05 +0000
Manifest this update: Sun 27 Jul 2025 11:00:05 +0000
Manifest next update: Mon 28 Jul 2025 11:00:05 +0000
Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: abGkqg44WYI6Jj64SWZslOLMW+ZFdzzlMSaKEQreg4c=)
2: uMaOUumndZxKeHpsLiDjyBlhUEc.roa (hash: Vgb/fd+KM9R/ibiYhniBySYsrSRU1XkwhrI3i4xQXFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:35:37:96:01:9e:b9:d3:fb:b7:57:98:b9:37:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Jul 27 11:00:05 2025 GMT
Not After : Jul 28 11:00:05 2025 GMT
Subject: CN=1aee91a8d07012c395e4bddf1ab6e4a4eb57854c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:81:a5:67:5a:f1:9a:d9:c7:d0:6e:6e:bf:d1:
55:f9:6d:3a:a1:79:27:ff:a3:93:ee:33:dd:e9:cb:
09:c3:cc:bc:88:8b:c4:78:a5:23:8c:f7:b2:b5:ec:
2b:33:b2:e6:45:38:1e:83:70:aa:8b:2a:61:b8:b5:
dc:36:a5:8f:41:4e:a6:b8:c1:e8:c6:db:40:26:89:
9d:10:77:4e:52:ca:52:7b:bb:3f:9b:e4:4e:c0:07:
91:71:56:11:6e:2a:75:52:d5:5f:f1:25:84:db:c9:
3c:d5:5e:af:3e:d3:92:e3:af:97:b5:26:31:86:51:
1e:a3:00:e7:6b:50:52:91:a5:05:52:ec:45:56:6a:
6a:13:3b:07:cf:de:4c:a1:0e:fd:ab:0a:3b:f3:c6:
e7:7b:c1:3a:61:3c:02:41:69:e9:af:06:cb:40:b9:
cc:28:d8:29:0a:52:de:7e:b2:fe:c4:fe:ef:d8:4a:
f8:6b:38:fc:ff:21:09:22:b6:f8:c4:a1:ca:55:fd:
52:96:9d:e7:c2:25:7b:7a:e3:66:33:f9:1c:4d:ec:
d9:4c:2b:eb:52:c7:9a:3d:66:1a:6c:b5:6f:de:aa:
e0:9b:8a:17:e7:4d:d7:46:b6:25:f6:a0:8f:3a:e3:
ed:d7:77:45:81:1e:35:0c:2b:b7:99:d7:f0:cc:c4:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EE:91:A8:D0:70:12:C3:95:E4:BD:DF:1A:B6:E4:A4:EB:57:85:4C
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b4:e9:75:24:a0:86:67:5e:d6:4d:cd:f1:7a:88:10:c1:34:
95:ff:3a:3e:d3:ab:ce:17:ef:3d:60:f4:3f:da:a4:4f:45:f6:
29:5f:99:e3:0b:4d:b5:a2:34:51:9d:f9:82:0f:49:6c:4a:0e:
28:90:f4:ab:75:f6:01:45:3e:f4:c9:9b:ed:98:e4:7a:83:59:
64:f1:4e:ca:da:66:09:84:da:8e:17:d7:03:5c:62:4b:23:27:
37:74:94:2d:1c:f2:b3:3a:cf:9d:1c:0d:0c:66:ce:9c:a8:4e:
df:39:a5:50:34:81:fc:26:d6:f4:16:89:9f:45:40:5c:7e:a2:
da:ec:e0:5f:e8:a5:75:e6:62:b7:37:99:c7:15:1a:d6:c2:8f:
c7:be:38:a8:63:5f:10:cc:6b:34:7a:84:96:0d:02:b0:0a:18:
8d:a8:46:a3:56:4f:1c:f8:26:4c:ec:e3:38:9d:d8:e6:bc:85:
5b:ce:e4:5b:72:9f:a5:fc:11:0c:e7:f1:05:25:0a:3b:15:24:
db:ef:92:51:50:c4:8c:d4:fb:50:57:ba:ee:a3:8f:ab:d4:ce:
4e:45:8a:d0:b3:43:0d:e6:24:85:ec:fd:a2:81:e7:81:4b:27:
22:3b:30:24:7b:fd:a2:0b:59:4e:a4:f3:99:ec:d9:06:ab:7a:
61:1b:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:47 2025 by rpki-client