Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File: B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier: kJ/KmMRQbwLBt87SeJ1kSyPny/56CY0xCUH3kR6ywZo=
Subject key identifier: FB:4E:83:B7:A0:E2:B8:84:B2:38:EE:8D:C4:6D:88:44:3B:B7:16:7D
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer: /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial: 019A71B913994FAAFDC9412F83EDC1FFC023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number: 0DDF
Signing time: Tue 11 Nov 2025 07:02:25 +0000
Manifest this update: Tue 11 Nov 2025 07:02:25 +0000
Manifest next update: Wed 12 Nov 2025 07:02:25 +0000
Files and hashes: 1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: P+nEnIThdFKhzNig3giwpGcIxEylQSnVUl0X4NMtcC4=)
2: uMgXGnHJtpBZxUTOGcmdbVM1Ujg.roa (hash: 5kchvjwGIIWYfh1jo1LFwohMp5GRmL3D2YFjaqIXFeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:13:99:4f:aa:fd:c9:41:2f:83:ed:c1:ff:c0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Validity
Not Before: Nov 11 07:02:25 2025 GMT
Not After : Nov 12 07:02:25 2025 GMT
Subject: CN=fb4e83b7a0e2b884b238ee8dc46d88443bb7167d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:01:e6:3d:52:ba:5d:da:c5:79:1b:b4:ba:
6a:ce:a7:d3:2e:e9:3c:17:31:02:74:f2:63:d5:07:
d7:b8:09:66:44:13:e3:47:43:94:1b:2d:c8:7f:5d:
bd:c9:f1:8b:29:2d:96:7f:05:fd:4d:50:10:19:f8:
88:e8:49:e6:a0:58:31:62:6e:c6:0b:a6:78:6a:3d:
c1:33:45:30:00:3e:5b:2d:0e:e5:0d:a6:dd:90:b9:
70:ba:41:f7:65:a9:a2:2c:58:98:ff:c4:51:59:9f:
1b:14:dd:7b:f3:61:85:bf:24:bb:9b:82:78:2f:bd:
35:19:7a:93:40:9a:85:16:01:64:e9:f6:c6:0b:90:
2a:02:0f:7d:8e:39:4c:c1:9b:d3:20:ce:78:e9:32:
34:31:96:ef:c2:61:fa:83:a4:8c:18:11:e3:95:5d:
76:a7:29:0e:52:d3:00:0e:e1:70:81:7d:20:9e:21:
d9:ad:9d:02:da:2e:c5:81:70:07:b2:4a:90:32:ed:
db:a8:d2:06:22:15:ba:ac:81:89:27:54:51:19:e7:
95:f7:b5:4e:ba:ac:1b:a2:9b:10:ca:cd:43:82:6a:
0d:68:0c:2b:06:6c:82:2b:f4:3e:9d:17:74:26:a6:
dd:ee:f7:f3:ec:17:4d:d7:66:22:92:44:ec:5d:e1:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4E:83:B7:A0:E2:B8:84:B2:38:EE:8D:C4:6D:88:44:3B:B7:16:7D
X509v3 Authority Key Identifier:
keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b0:5e:17:08:79:6f:a5:99:06:ae:f1:72:4c:3d:2f:cc:95:
d4:56:2d:80:8c:78:95:3b:25:c5:0c:39:c8:c0:e7:6c:ed:5e:
6e:a5:df:e4:79:6e:bd:a9:d8:84:2a:b2:67:41:83:28:a4:d1:
bb:00:6d:7e:5e:cc:f3:95:ed:2d:43:37:6c:91:84:98:37:c5:
37:8b:de:c6:8b:47:77:0c:47:e2:84:8d:df:5d:7d:b8:a9:38:
5b:a3:3d:d5:6e:c8:80:98:1c:23:45:b9:da:f8:26:a8:88:44:
8d:ab:97:f1:18:6a:7b:87:0e:c7:1b:fc:3d:6c:49:d6:cc:0e:
f2:e9:5f:9a:ea:08:ad:c5:5f:7b:25:7b:78:bd:c7:6c:68:84:
2a:b9:e1:c1:e0:de:7c:94:58:75:ab:f4:0a:2f:3f:6f:7d:0b:
05:a0:6f:66:4c:bb:e7:57:c2:26:41:f8:8c:db:3c:fa:9b:68:
eb:6c:1a:6c:28:23:fa:d5:6a:4c:e2:6d:8a:db:4b:12:54:d7:
8e:9a:07:a1:a2:94:6f:35:f0:89:35:16:f4:4d:f5:ee:3d:1e:
d7:50:46:1a:f0:23:75:75:ab:50:75:c8:bb:09:a5:b1:c4:78:
08:c1:b0:c3:b1:53:a9:a2:6b:93:c1:ae:84:7d:7d:25:13:ce:
88:5e:0e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:48 2025 by rpki-client