Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json)
Hash identifier: 5lq3r46bFVvqMHYMgLyHmzbvYoXr3mSkEN6HzZCdHRA=
Subject key identifier: 9E:CE:17:DD:99:74:C7:BB:39:5D:F2:30:9F:AD:FD:88:1A:33:6D:56
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 019A299E4F2E7375F0B972BED6B75D8FFABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
Manifest number: 16FF
Signing time: Tue 28 Oct 2025 07:00:31 +0000
Manifest this update: Tue 28 Oct 2025 07:00:31 +0000
Manifest next update: Wed 29 Oct 2025 07:00:31 +0000
Files and hashes: 1: Gvj6G0DPkkSLihnA46d1N0vjphQ.roa (hash: pbCy8dJvrT76LkZMMvrrN/iJW8bsTC8bBcjdgpqACVI=)
2: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: rO4KIU3NeiZXPRVHSPqX4EjOFK7RYGuOUXNcgc2ZjM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:4f:2e:73:75:f0:b9:72:be:d6:b7:5d:8f:fa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Oct 28 07:00:31 2025 GMT
Not After : Oct 29 07:00:31 2025 GMT
Subject: CN=9ece17dd9974c7bb395df2309fadfd881a336d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:af:07:b7:69:e1:40:65:97:65:b7:4f:97:
22:7c:f5:b9:4a:fd:26:6d:d2:e4:3a:e1:71:cc:25:
3f:00:4e:a8:6a:4f:61:a1:cf:6f:65:95:12:78:1b:
22:6d:0c:8f:69:23:80:ce:86:0e:d5:af:9b:33:b0:
c0:75:94:d2:c7:8b:91:bb:a3:85:8b:be:c3:be:d3:
9b:21:92:1e:23:0d:3c:5a:c3:cb:ea:c3:9d:a1:3b:
f1:29:2c:b3:bf:fb:4c:29:a2:b6:8e:ed:de:9d:5f:
fc:c0:77:dd:c4:97:39:ce:a0:37:8b:73:41:69:a8:
5b:1b:6b:1b:bb:f1:06:f8:2e:bb:f9:41:b1:9a:8f:
2d:f7:03:a4:dc:7c:64:c8:3d:00:a4:c6:9c:14:46:
5f:67:12:b9:79:91:4b:90:80:63:cb:8e:2a:2b:f6:
6c:08:1f:ec:0d:21:b2:c8:c8:c2:eb:ca:7e:32:b9:
c2:e8:09:a2:48:cc:ab:55:f3:e8:94:74:01:95:b9:
65:09:67:e5:da:99:eb:a5:18:4e:6a:4a:1c:c4:c0:
93:c4:eb:07:a0:f7:39:9a:e2:e9:c5:45:b3:87:28:
19:b5:16:10:82:69:39:dd:9e:31:6d:22:48:a4:82:
17:60:bc:2a:81:ff:1a:a2:9b:c8:41:af:ab:97:cb:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CE:17:DD:99:74:C7:BB:39:5D:F2:30:9F:AD:FD:88:1A:33:6D:56
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8d:ec:69:93:6c:0f:7c:b1:73:7b:ed:1f:e3:a8:9a:b2:65:
43:57:ca:83:4d:de:10:aa:b3:a3:72:8d:74:19:c1:92:f2:a3:
7f:70:03:9c:73:1b:47:d9:41:e7:4a:bd:ed:9b:39:19:70:6c:
31:d7:c2:b8:25:10:8a:5d:27:05:bb:14:29:11:2a:69:39:31:
0f:30:29:64:04:42:2c:e0:d3:13:42:83:30:75:61:17:0b:9f:
3c:08:7e:66:04:9b:09:b2:b9:67:3d:91:94:77:c8:9b:b7:9b:
b1:4f:76:6f:ff:4d:11:74:48:c1:b3:3e:88:0d:c7:d7:f8:40:
05:0b:e3:5b:e8:37:3b:06:f3:c9:fd:17:46:4e:cd:99:31:32:
f7:69:90:a8:31:f8:fe:20:77:c3:5d:c2:7b:1f:9a:d6:d2:d0:
17:30:58:55:5b:66:5b:c2:0a:1a:c3:2e:1a:f9:16:3d:f3:2f:
f6:f5:48:13:b5:d5:dc:ea:77:a8:b7:b1:00:00:96:ac:88:59:
fe:a3:b4:54:2e:8b:0e:0d:83:d8:99:7d:d6:1a:04:1e:ed:4d:
5f:a8:09:11:53:90:1a:5c:14:db:f4:a2:01:d9:fd:2c:8d:0c:
72:d0:18:05:57:27:08:da:2b:97:c7:07:46:b7:48:0c:79:4e:
f1:52:e2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:21:06 2025 by rpki-client