Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier: LEo9tk9yaWqhEyC7ozIaWkCKzArPSlkb7pfhMsw3TPk=
Subject key identifier: 0B:AC:04:56:12:A5:5C:BD:98:2D:16:95:5D:37:07:5C:CD:53:F8:46
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 01993A26D18EE063DEA0DF1FCFC3ADC3186A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number: 1610
Signing time: Thu 11 Sep 2025 19:00:46 +0000
Manifest this update: Thu 11 Sep 2025 19:00:46 +0000
Manifest next update: Fri 12 Sep 2025 19:00:46 +0000
Files and hashes: 1: NVJ94OZbevHGEGJPauO8yOgu7g0.roa (hash: zV1VLUJ6QJt3I76otxCqQp6X0KRlaXT/XwLt7w+Duqc=)
2: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: pDYQyJACK/D4ROoUO1LruoJ11uq/rAekH5QU9f6xGzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:26:d1:8e:e0:63:de:a0:df:1f:cf:c3:ad:c3:18:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Sep 11 19:00:46 2025 GMT
Not After : Sep 12 19:00:46 2025 GMT
Subject: CN=0bac045612a55cbd982d16955d37075ccd53f846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:d2:54:b7:5f:1c:b2:3e:9c:66:b8:68:1e:
51:46:33:ff:d2:34:c8:7d:d1:be:b6:de:59:d3:1e:
19:27:76:44:a5:c0:e0:fe:9a:85:60:5a:73:97:c5:
e9:67:a8:67:ff:02:0a:fc:ec:5d:03:d9:57:6f:7c:
af:fd:b7:f7:dd:32:7f:ec:c2:0f:3b:a6:23:ec:d8:
c3:7e:cf:7d:65:b4:99:a7:ab:a8:d6:a1:fd:bb:dd:
97:ec:82:27:66:4e:0f:3f:71:cd:87:e5:b2:85:a6:
f3:77:40:a2:61:68:d3:c7:08:bc:96:e7:38:1f:63:
35:ae:90:b0:7e:d0:d6:8e:6d:d4:dd:de:2c:72:73:
d0:39:a5:3a:f4:ba:f9:b6:4e:55:6f:d9:73:46:64:
bb:44:a6:ab:54:a2:7d:b1:73:de:0c:16:62:be:43:
1d:a4:95:d8:dd:d8:6f:ca:42:28:b7:0d:f7:8f:78:
49:d5:dd:40:07:2c:d1:f4:bb:a6:ad:73:d0:9e:82:
62:37:3c:16:65:f5:99:02:d5:fb:1f:bc:4c:63:d1:
d4:26:4e:b2:18:46:c5:1b:6b:9d:41:66:7b:23:7a:
12:34:1c:78:64:bc:f8:01:a8:4d:1c:a1:bb:38:0a:
13:77:dc:08:f1:c8:d6:9d:9a:e0:e8:8a:90:59:e5:
ed:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AC:04:56:12:A5:5C:BD:98:2D:16:95:5D:37:07:5C:CD:53:F8:46
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:f8:06:33:34:6e:f3:a6:f6:57:0d:85:fa:d6:41:42:4d:12:
a4:22:68:74:ff:be:ae:01:37:60:a9:25:ad:1b:fa:43:70:33:
ef:67:d8:a1:5b:27:c2:90:13:94:9e:96:fb:16:6f:2e:f9:03:
be:4a:4a:f7:b1:12:de:1d:5f:d4:c3:2c:8a:a8:85:d8:4b:bc:
9d:93:a5:89:ef:62:1e:5a:42:34:fe:46:9c:77:88:57:62:fa:
ef:a9:f5:c2:23:9c:52:60:9c:06:4b:8b:c5:d5:fe:a8:1a:eb:
e0:08:63:56:ca:3c:95:35:4a:cc:e1:da:7a:e4:0d:94:81:dc:
20:67:6b:1f:f9:3e:1a:95:b6:ae:11:51:9d:89:a6:4c:1c:73:
ee:48:b5:85:44:da:8b:66:65:0a:e6:b2:09:63:08:8d:93:f9:
0b:9c:ef:dd:fb:7a:a7:25:92:88:73:b0:7e:5d:ff:df:0f:8e:
2b:76:75:2f:d5:7b:97:36:07:ee:ac:36:67:ec:3a:f5:be:b8:
04:0f:bf:ac:a9:d0:da:ec:c7:67:a1:c0:c5:4f:cf:b7:12:83:
40:f0:23:94:62:c4:6f:48:66:84:f6:2a:c8:ec:ac:26:c4:ff:
bc:0e:5a:b0:1c:4f:31:cf:36:62:bf:a2:6d:40:89:4a:38:23:
20:47:1e:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk6JtGO4GPeoN8fz8OtwxhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmN2ZjZWE0ZjdmY2Q3YmQ4MWRkNTk4MTUzZGQ2ZWU1YjEy
ZTQ3ZGYwHhcNMjUwOTExMTkwMDQ2WhcNMjUwOTEyMTkwMDQ2WjAzMTEwLwYDVQQD
EygwYmFjMDQ1NjEyYTU1Y2JkOTgyZDE2OTU1ZDM3MDc1Y2NkNTNmODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5TSVLdfHLI+nGa4aB5RRjP/0jTI
fdG+tt5Z0x4ZJ3ZEpcDg/pqFYFpzl8XpZ6hn/wIK/OxdA9lXb3yv/bf33TJ/7MIP
O6Yj7NjDfs99ZbSZp6uo1qH9u92X7IInZk4PP3HNh+Wyhabzd0CiYWjTxwi8luc4
H2M1rpCwftDWjm3U3d4scnPQOaU69Lr5tk5Vb9lzRmS7RKarVKJ9sXPeDBZivkMd
pJXY3dhvykIotw33j3hJ1d1AByzR9LumrXPQnoJiNzwWZfWZAtX7H7xMY9HUJk6y
GEbFG2udQWZ7I3oSNBx4ZLz4AahNHKG7OAoTd9wI8cjWnZrg6IqQWeXtuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAusBFYSpVy9mC0WlV03B1zNU/hGMB8GA1UdIwQY
MBaAFG9/zqT3/Ne9gd1ZgVPdbuWxLkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTct
ZWY1MThiNGI0NjNmLzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTctZWY1MThiNGI0NjNm
LzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4PgGMzRu
86b2Vw2F+tZBQk0SpCJodP++rgE3YKklrRv6Q3Az72fYoVsnwpATlJ6W+xZvLvkD
vkpK97ES3h1f1MMsiqiF2Eu8nZOlie9iHlpCNP5GnHeIV2L676n1wiOcUmCcBkuL
xdX+qBrr4AhjVso8lTVKzOHaeuQNlIHcIGdrH/k+GpW2rhFRnYmmTBxz7ki1hUTa
i2ZlCuayCWMIjZP5C5zv3ft6pyWSiHOwfl3/3w+OK3Z1L9V7lzYH7qw2Z+w69b64
BA+/rKnQ2uzHZ6HAxU/PtxKDQPAjlGLEb0hmhPYqyOysJsT/vA5asBxPMc82Yr+i
bUCJSjgjIEceyQ==
-----END CERTIFICATE-----
Generated at Fri Sep 12 03:36:23 2025 by rpki-client