
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier: a2yowzOLi/qAbCakHYEpHZedaPC2JG2xhFXf8lFn8Sw=
Subject key identifier: 13:35:FC:BA:D4:D6:41:85:74:06:6D:DF:63:3D:A6:DF:24:9B:9B:13
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 019849D2FA923E5CA40B70BBF6C63D3CEF10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number: 13FD
Signing time: Sun 27 Jul 2025 03:00:20 +0000
Manifest this update: Sun 27 Jul 2025 03:00:20 +0000
Manifest next update: Mon 28 Jul 2025 03:00:20 +0000
Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: WhzJRLRyDRxcKoCTHZ+qwuLseADuxvlbiarzmGrgZiM=)
2: B_7Zlkd4Da3E9wFCt54W5RXpv-Y.roa (hash: t+XndUbN6Hm/lPYW31tO+vpnF3Hi5LgCuvErDr9oYwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:fa:92:3e:5c:a4:0b:70:bb:f6:c6:3d:3c:ef:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: Jul 27 03:00:20 2025 GMT
Not After : Jul 28 03:00:20 2025 GMT
Subject: CN=1335fcbad4d6418574066ddf633da6df249b9b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fa:86:32:9a:8d:48:ed:ef:1e:76:9b:04:ac:
c4:30:a0:8e:a9:ff:3f:56:4b:1c:66:80:60:3b:d5:
64:8b:85:e8:cb:9a:fb:40:ff:18:c0:f5:b2:bd:ed:
56:86:f7:88:7c:d2:3c:8a:30:23:3d:34:c0:1f:1d:
b8:65:b5:92:fd:87:f5:37:9e:8e:86:24:cc:db:af:
5e:d3:82:b3:49:33:69:3e:81:43:96:f6:e2:4a:c6:
59:ae:1f:8e:b0:79:3a:b1:38:6c:61:32:ec:40:58:
3b:fb:fd:2c:0f:ed:50:2e:e8:31:00:80:83:54:28:
92:19:c5:f8:2b:00:81:99:d7:26:6c:f2:13:53:0b:
40:a8:1b:3a:d1:03:1f:6e:6b:8e:84:c3:c0:88:44:
bd:85:1a:c9:e4:40:da:bb:fe:52:6c:6f:b4:eb:0c:
23:57:64:09:7e:46:74:ca:e3:80:bc:54:63:27:0f:
4e:c7:60:50:43:79:40:57:34:e3:c9:c9:7c:6f:b8:
0c:12:ab:ac:bc:3e:e6:99:53:ff:6c:30:80:b7:e9:
83:99:26:a7:62:11:e0:ef:c4:ba:19:50:d5:46:b6:
2e:33:c8:b5:d3:91:27:e8:25:2a:28:a9:f2:02:8b:
38:b3:5e:01:9f:8d:8e:57:a6:8a:25:f4:04:e1:5a:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:35:FC:BA:D4:D6:41:85:74:06:6D:DF:63:3D:A6:DF:24:9B:9B:13
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:95:7b:7c:d1:64:21:63:ff:4c:5f:af:cd:03:78:49:22:13:
7a:a0:5b:65:88:0a:01:e7:34:e5:d4:4e:b2:69:ea:b9:cf:f1:
c4:ea:1f:48:ec:ea:29:f0:e1:9e:c5:be:71:0c:48:f2:ca:74:
94:01:28:f5:ae:0c:23:3c:16:2e:ad:43:49:d7:a2:bf:02:ed:
b3:ba:b0:58:a6:56:e3:0e:0b:ef:cd:5b:8c:06:10:5d:fe:26:
bd:3d:55:23:0a:10:cd:71:cc:13:c0:5d:42:7c:99:eb:83:1b:
e6:09:3f:f0:c6:b2:ae:9d:cd:b7:7c:54:1b:5e:32:6b:b9:3f:
76:6c:7b:b9:98:4c:c1:ea:1c:df:0b:8e:a0:c7:d6:6d:3d:c0:
4e:ea:7f:21:c6:cf:73:3c:b1:9b:2b:37:ec:14:4f:20:bb:15:
2f:de:f4:6c:6e:19:bd:31:41:c9:98:c8:04:a6:8d:d4:4a:e6:
a0:6d:40:dc:39:3d:57:e5:bd:0c:b3:c4:53:12:bc:4a:00:a1:
23:c2:90:2b:e1:2c:4e:8d:76:0e:8a:7d:a3:19:c0:54:88:0a:
fb:bd:a3:c3:0e:0d:34:38:ac:67:ae:5f:69:39:a4:e9:20:b4:
01:7d:6c:d9:1a:66:43:97:04:f8:c9:67:94:c0:c5:95:cd:bd:
59:74:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:57:38 2025 by rpki-client