Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier: ItHBkMYprLpTK79U3Ktd7/7zWMKJFVKoY790q2KT/bw=
Subject key identifier: 41:2F:E0:4A:0D:A2:24:48:9F:37:84:4D:AD:DB:FC:2C:FB:C2:AD:1F
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 019A71EEB84797C7F3958E179E632DAFD87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number: 0E45
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: KxTMXF8wYLqoYNb+ZHK72ssYfPGTMgP5UEVdIuhg1Wg=)
2: uMaOUumndZxKeHpsLiDjyBlhUEc.roa (hash: Vgb/fd+KM9R/ibiYhniBySYsrSRU1XkwhrI3i4xQXFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b8:47:97:c7:f3:95:8e:17:9e:63:2d:af:d8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=412fe04a0da224489f37844daddbfc2cfbc2ad1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:d2:4c:bc:0c:e1:21:5a:35:81:cd:16:72:
ce:51:93:72:0f:1d:ce:62:7a:ee:b7:db:b1:62:36:
70:58:3a:62:37:fa:5f:38:fb:97:e7:b9:4d:eb:0c:
a5:6e:2c:cc:e2:22:35:d7:0b:10:9b:ec:6e:25:f3:
7f:9f:31:72:f4:86:67:d4:b2:3b:5e:f9:e3:3e:d8:
90:a8:53:cb:4f:d6:e4:e1:a1:6e:88:c5:f9:cd:c8:
85:d2:46:9b:02:29:cf:41:c9:36:c9:c5:4f:dd:93:
9f:6e:a9:23:b0:c8:53:e4:5a:97:26:b9:5b:a6:45:
a3:ad:65:44:7f:af:fc:b2:88:62:7b:04:32:9c:1b:
b7:95:22:ab:e2:63:13:5b:b3:ec:5b:ab:57:73:c2:
91:bc:4f:16:f4:95:a8:66:39:92:42:15:d5:e2:64:
a9:9d:d0:7b:5d:28:1a:f0:7d:88:e7:9c:e1:fa:00:
12:75:9a:a5:70:4d:7b:86:c4:a2:64:66:4e:0e:db:
61:57:79:77:09:d0:3c:60:52:a2:02:3b:18:78:5e:
1e:05:0c:a0:fc:37:d8:bd:46:d5:83:18:60:c4:2e:
bf:ab:fb:f3:74:d7:a4:63:4c:91:30:d2:dc:0a:6d:
fb:b1:95:78:24:ea:dd:2d:31:bf:70:97:a1:94:79:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2F:E0:4A:0D:A2:24:48:9F:37:84:4D:AD:DB:FC:2C:FB:C2:AD:1F
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:de:91:be:f9:66:c3:7f:96:09:1d:3b:2c:c7:09:3e:1a:88:
76:e9:b9:ed:5a:60:fb:5a:63:1b:77:53:fc:57:b3:bf:b9:28:
7a:02:05:1e:f8:31:00:1d:56:00:44:f5:b2:c3:e9:b4:5f:81:
f2:2f:57:4c:12:56:10:ff:3a:93:88:fc:8d:90:e3:32:77:bc:
d9:c2:bd:90:91:1b:a2:4d:b5:f4:b6:0d:0c:df:9f:fe:cb:10:
1d:40:ec:26:b4:9e:39:5a:97:7f:e2:74:6d:fa:a7:01:92:0f:
ea:d0:40:14:f5:18:7d:04:50:4d:b1:5d:d7:43:c9:0c:07:72:
6c:49:1b:6f:9a:f2:d0:64:39:ef:68:7a:a2:f8:f4:02:5c:2a:
28:e6:4b:bb:4a:dd:89:6c:30:ee:bf:87:11:34:86:13:47:94:
36:3c:11:24:c1:7c:c4:f7:f0:e5:25:16:a2:a5:28:18:62:29:
4d:81:aa:04:46:3c:b5:8c:07:6f:ec:ca:51:5e:6b:d8:da:52:
19:e8:ef:b1:f0:79:a2:71:21:6d:f9:ae:4b:1d:66:f4:02:da:
a0:93:ef:e3:8b:45:48:3d:bc:dc:5c:80:31:41:b6:68:ab:b4:
9d:82:ff:56:15:2d:f6:6d:d3:e1:49:05:53:35:b5:21:5c:e6:
de:be:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:19 2025 by rpki-client