Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
File: B3M_xjuPGIDlwK9rRkPR4yGB16U.mft (raw, json)
Hash identifier: Mb24RDHCRkq3KOlO0kRQQufqk7KA0k7GKI9cvBwKY+I=
Subject key identifier: A0:B2:0F:66:53:9E:6A:7B:95:55:C4:19:EF:F3:64:DC:3E:47:CF:79
Authority key identifier: 07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5
Certificate issuer: /CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
Certificate serial: 019A71B8B7D43C0EF01494223EA6150409DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:02 +0000
Manifest this update: Tue 11 Nov 2025 07:02:02 +0000
Manifest next update: Wed 12 Nov 2025 07:02:02 +0000
Files and hashes: 1: B3M_xjuPGIDlwK9rRkPR4yGB16U.crl (hash: JIA0Qz+D8Cm2I/6LrS09XUpCcSKvqWfu6uurwn84Lzo=)
2: wfzCH1I_jaacEoQG0qX5DBfYP5Q.roa (hash: lkjeD8VK2uApBBO5OoQq9Fe2IWIHnY1S+YXHFJmJj3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b7:d4:3c:0e:f0:14:94:22:3e:a6:15:04:09:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
Validity
Not Before: Nov 11 07:02:02 2025 GMT
Not After : Nov 12 07:02:02 2025 GMT
Subject: CN=a0b20f66539e6a7b9555c419eff364dc3e47cf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:b4:65:62:bf:b0:2a:db:4f:ec:0e:5e:db:
ef:e1:dd:eb:a0:87:89:64:19:9b:41:37:6f:80:c6:
cc:6a:8e:c9:e0:10:75:aa:38:1c:2b:b0:f3:f8:40:
24:00:3a:6c:44:1f:72:c0:fa:6a:22:0f:a0:fd:8f:
4b:f0:2e:ff:b4:c9:30:b3:4d:b1:d7:1d:b0:3d:6b:
0f:68:cc:db:24:a7:12:78:35:f6:28:9d:0e:a3:91:
99:14:57:78:61:a9:bf:97:09:ab:f5:1b:8b:4c:f4:
4e:c3:36:41:31:8a:e5:6c:f5:e6:e3:aa:eb:1d:6f:
59:e5:76:62:b7:e9:3f:24:9f:a0:77:14:2a:51:09:
76:8b:11:49:75:a9:e5:17:f2:91:0a:57:7d:e7:00:
43:5b:e2:f8:10:6a:94:e2:c8:43:40:bd:32:ac:36:
99:e2:50:4e:31:00:3d:5c:76:a3:74:5a:c4:5a:4b:
f0:98:53:bb:94:53:0f:e0:c5:b5:de:34:5b:01:31:
25:2e:87:01:2d:3f:34:5f:92:b8:15:55:49:bf:c6:
11:fa:d5:e3:0d:d0:17:7c:c2:57:3b:81:9b:e3:3d:
48:04:bb:4f:3c:78:fb:fa:3d:f2:16:69:c5:cc:a4:
f4:44:00:c8:ea:7b:ea:b8:6f:14:fe:7a:3e:25:e7:
df:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B2:0F:66:53:9E:6A:7B:95:55:C4:19:EF:F3:64:DC:3E:47:CF:79
X509v3 Authority Key Identifier:
keyid:07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:82:e2:db:e5:8a:2e:e4:4b:70:6c:f7:31:8a:e9:c1:1f:09:
02:83:bf:dc:ae:77:05:de:4e:5e:b5:3b:4a:5d:5c:8a:88:1b:
21:7f:c8:51:67:91:06:02:ba:53:15:43:8b:a0:12:81:58:40:
7e:66:72:0c:25:5c:de:35:ce:6b:7b:9b:97:ca:32:ef:18:54:
5d:e0:d3:7e:8b:8b:0f:2b:86:7a:92:68:ef:6d:e4:6d:5f:66:
b1:9d:9b:2c:50:3f:9d:08:28:15:19:9e:b1:ee:76:6a:8a:44:
96:45:95:69:fd:11:97:15:9c:e5:6d:2e:0e:a6:86:97:ed:2b:
48:1f:1c:a5:fc:05:65:e8:f4:6c:26:2a:d3:f5:48:66:23:81:
95:b3:d3:20:a4:2c:4c:72:5d:d9:9a:0b:07:5f:9c:9c:21:5d:
c5:3c:08:16:d3:0c:5a:b4:6a:2a:ef:2c:4e:28:a4:52:d7:48:
ff:09:08:a6:58:95:7a:79:eb:74:aa:9f:6f:12:80:a7:b9:aa:
88:3f:0e:d5:8e:39:03:b1:d6:b9:70:54:98:d6:0b:2a:6e:0d:
cd:fc:1a:fc:d3:39:8c:0c:35:92:64:62:5d:ca:04:8f:c0:40:
3b:8c:0f:68:4f:1e:be:10:37:9d:bd:be:60:7e:58:d2:4e:44:
a9:61:64:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:32 2025 by rpki-client