Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
File: b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft (raw, json)
Hash identifier: /msf4WrfyJxWxLNeM4AvC/jP/PdK9ilIZh8IscEC3FE=
Subject key identifier: CB:A8:84:90:E6:AB:C0:CC:9E:EF:F4:80:84:3B:12:BE:10:1C:06:70
Authority key identifier: 6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
Certificate issuer: /CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Certificate serial: 0198469B51ACC67540DB86F215DF15898779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
Manifest number: 0CF5
Signing time: Sat 26 Jul 2025 12:00:40 +0000
Manifest this update: Sat 26 Jul 2025 12:00:40 +0000
Manifest next update: Sun 27 Jul 2025 12:00:40 +0000
Files and hashes: 1: XWsgGaUk-tCex2rEANvQhHC_vUw.roa (hash: 4qgfJUiMzzdt5fICZLGjB/iCgpPLmmWKoci9oWUf3cw=)
2: b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl (hash: mPqXGfJLFcRO2sMNP9gQvkdk6mLU3s1ERi9pOY2HgaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:51:ac:c6:75:40:db:86:f2:15:df:15:89:87:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Validity
Not Before: Jul 26 12:00:40 2025 GMT
Not After : Jul 27 12:00:40 2025 GMT
Subject: CN=cba88490e6abc0cc9eeff480843b12be101c0670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:a6:80:f9:fc:fa:11:e6:02:94:84:f0:eb:
13:0c:f9:97:be:8e:8d:06:6d:57:71:6d:e5:3a:e8:
e7:92:21:db:fb:98:c6:ec:30:86:34:a0:2c:4c:85:
1a:0c:6d:ab:9d:ac:5f:e0:b7:96:d9:93:13:7e:26:
ff:27:3c:e3:64:c6:49:f4:68:08:44:d4:77:20:10:
3c:7e:a5:73:69:be:e9:31:6e:85:f5:04:6a:49:38:
c0:af:09:f3:1e:4c:4a:b8:73:82:b8:03:c7:30:85:
a0:1a:8b:d6:f4:7e:b9:fc:6c:ff:ee:4a:b8:51:f3:
4d:14:61:39:86:56:4e:64:3f:b9:c8:a9:5e:65:65:
ad:99:e1:08:5f:e2:d4:c0:3d:9a:4f:cc:a4:dd:e1:
0c:cf:11:0c:47:d0:5d:36:a8:80:81:7d:ae:f6:ab:
ab:e4:44:f9:1a:b3:6b:20:45:13:79:4b:d6:23:cd:
c8:94:0d:36:20:68:b0:09:b7:77:19:47:1c:dc:43:
96:88:63:69:b3:58:5c:19:f6:86:d8:85:68:a2:56:
9a:b1:ad:fa:fc:fc:ab:48:09:b1:01:26:3c:19:69:
b1:20:0b:c5:0e:d8:c7:1b:fe:60:b3:2b:25:97:98:
54:bd:8c:ce:f7:ef:b5:55:ad:a3:1b:ce:4c:a8:5f:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A8:84:90:E6:AB:C0:CC:9E:EF:F4:80:84:3B:12:BE:10:1C:06:70
X509v3 Authority Key Identifier:
keyid:6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:15:b0:97:2d:5a:8d:c4:58:55:f4:43:5e:bf:67:9f:2f:a5:
63:31:bc:29:9f:e4:b1:58:25:6e:d0:e3:cf:00:ee:65:fa:f7:
ca:8d:75:8c:e4:cf:ec:00:2a:63:c4:b6:48:fa:29:79:ee:30:
01:f7:f7:54:f1:b6:4a:22:e7:c6:6d:c1:74:3b:ce:ee:ec:1c:
64:1c:18:c3:02:f7:d4:69:04:1f:4b:ac:91:50:b9:67:b5:a4:
a5:96:96:d4:22:28:84:54:05:6e:9e:c2:5b:b7:ad:4f:33:76:
27:66:36:f1:87:70:52:69:97:7a:ce:4b:f2:35:42:b0:73:c6:
4d:28:44:ed:3b:32:16:1a:03:55:71:f6:b9:63:05:ca:87:86:
8e:65:51:19:ba:27:fa:cc:7a:40:ac:05:d1:09:c5:ad:8e:06:
c3:58:81:2c:ac:68:e9:36:04:45:3a:57:4d:6b:cc:91:57:b8:
45:2d:82:b4:9d:b8:91:96:cf:8d:8a:9a:65:f9:33:10:35:1c:
53:69:6f:62:72:a5:e7:e1:0e:a2:bf:8e:56:2e:18:0f:f9:30:
6a:45:15:33:31:33:44:11:9b:3e:78:81:a5:6c:16:83:dc:78:
02:7e:20:d8:17:2b:42:5d:05:0c:22:e3:b6:ef:2f:3a:91:db:
0c:65:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 18:41:31 2025 by rpki-client