Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier: 1WkvXoWqduy2f+BDCXKy2VF4gch+fjOQQakTKSpq4qc=
Subject key identifier: C7:71:10:8C:74:E2:CE:57:ED:03:F2:9A:24:42:D1:27:41:4C:79:08
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 01974AB1AAC8EDF5A3F2AF1360F76E17A112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number: 0CA3
Signing time: Sat 07 Jun 2025 14:00:46 +0000
Manifest this update: Sat 07 Jun 2025 14:00:46 +0000
Manifest next update: Sun 08 Jun 2025 14:00:46 +0000
Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: re6nhXXYPQZfuKIWsSfTanJu54GRV0bIHZL7RjGfkRY=)
2: uMaOUumndZxKeHpsLiDjyBlhUEc.roa (hash: Vgb/fd+KM9R/ibiYhniBySYsrSRU1XkwhrI3i4xQXFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:aa:c8:ed:f5:a3:f2:af:13:60:f7:6e:17:a1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Jun 7 14:00:46 2025 GMT
Not After : Jun 8 14:00:46 2025 GMT
Subject: CN=c771108c74e2ce57ed03f29a2442d127414c7908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:96:9a:02:04:17:11:e3:6f:89:55:5d:c3:
b0:62:d9:11:3c:7f:66:fb:e6:a5:03:d1:00:96:4e:
78:f3:14:1c:e9:6e:8a:65:d8:1a:3e:32:d9:c8:12:
88:f9:a3:0e:b2:dd:93:04:15:43:13:d5:da:e0:8c:
7f:95:0e:95:08:b1:5e:da:28:eb:b5:29:8e:08:aa:
02:e3:89:f2:73:51:4b:63:2e:4f:a7:3a:c4:7d:8b:
12:3c:3b:23:46:94:d0:ec:fb:78:5f:ed:20:e3:cd:
1a:97:b2:43:34:6a:b4:ba:01:9f:51:34:9a:56:45:
a4:d8:e5:e7:49:cd:22:ee:8d:03:f9:28:e5:6d:78:
72:00:cf:aa:66:5f:9a:f3:ac:c3:45:ba:89:09:8f:
1c:40:97:10:b4:52:2c:f0:85:a5:20:3c:12:fc:98:
58:67:d6:80:10:57:13:b3:5e:0f:38:50:c3:67:7f:
45:5e:b1:3b:89:6f:32:8f:99:fb:52:3d:85:84:26:
9b:ee:48:e5:d7:1e:76:02:67:df:56:83:d8:4d:db:
7b:d1:20:65:4f:1b:c4:f3:ef:61:29:63:c5:c3:a7:
bc:8d:44:8e:fd:9b:09:14:c5:53:10:49:ec:50:77:
6b:f9:c3:82:f1:24:31:ee:78:c6:0f:e7:13:0e:b5:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:71:10:8C:74:E2:CE:57:ED:03:F2:9A:24:42:D1:27:41:4C:79:08
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b2:39:8d:ff:da:77:43:8a:a4:74:80:8f:42:a5:f6:b3:0a:
14:1e:ee:ff:de:84:47:8b:17:a4:0a:31:64:b6:39:d5:e6:6a:
6a:76:7f:9e:29:74:ba:37:d1:ef:b4:ba:8d:13:c7:df:5d:ed:
32:b1:45:d8:c6:66:6c:3d:02:34:04:56:2a:3a:11:b1:4b:e2:
43:95:b9:15:c4:d6:58:1e:7c:7c:b3:af:46:c3:54:01:14:0c:
f2:6a:71:9a:d6:71:7f:34:d6:34:10:33:99:81:86:ec:c9:79:
bc:40:56:36:e9:22:f4:52:23:d0:67:b2:3d:ab:90:a4:52:e9:
05:04:2e:cc:7f:2f:6d:8c:42:e4:d7:9f:19:fb:7a:6c:18:1e:
a7:27:2b:7c:ec:74:83:cc:d5:00:8c:df:23:38:0e:0d:2f:9d:
f1:3b:45:9a:1a:87:1c:cf:1a:84:62:3f:44:6c:8a:4d:db:c8:
44:88:7b:f5:f9:53:64:e3:50:3e:3c:55:31:a6:9f:70:ac:ea:
d9:76:26:20:de:ca:ad:c1:fd:7d:72:fc:fa:f8:78:b8:13:94:
77:32:7b:97:2e:60:c4:5b:40:12:cf:25:0d:95:5a:18:94:05:
fa:e7:3c:6a:9e:82:74:0b:6e:33:ba:78:9b:fa:a8:51:d6:d0:
ca:21:15:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:57:06 2025 by rpki-client