Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier: 3oEzySjQ2wtpZV052MveqchwMs/eRevINyRy9spu6Ew=
Subject key identifier: EE:7F:70:E5:6B:3C:1A:00:7F:DD:EF:CB:C1:7E:15:01:22:8E:7F:56
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 019921B297BC7D581825BD22DD016D09A0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number: 13A8
Signing time: Sun 07 Sep 2025 01:02:56 +0000
Manifest this update: Sun 07 Sep 2025 01:02:56 +0000
Manifest next update: Mon 08 Sep 2025 01:02:56 +0000
Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: Acf6zlngFuyJZSdwnVIvbCfK1Ma43aic+UF8FCHZcUM=)
2: wCDrJf6K3N6SQxouZVxxkGAndwU.roa (hash: RDCOaghInO75GT81gEgSeMeIYDUyZ4Fou/t1PYJdixY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:97:bc:7d:58:18:25:bd:22:dd:01:6d:09:a0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: Sep 7 01:02:56 2025 GMT
Not After : Sep 8 01:02:56 2025 GMT
Subject: CN=ee7f70e56b3c1a007fddefcbc17e1501228e7f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a4:9d:66:69:44:6c:91:cc:66:de:7c:67:aa:
0c:b4:a0:e2:d5:ee:6b:9a:80:1d:1d:a3:cf:75:5f:
4c:a9:ae:87:d8:92:9e:f9:ab:52:54:e5:48:be:5b:
59:7e:0e:8c:cc:84:70:71:27:a0:71:eb:87:35:49:
dd:3b:2d:98:7c:e7:37:c2:6d:1a:3c:21:36:5a:90:
92:22:b0:d6:73:76:ff:51:45:9f:ee:ce:88:e4:dd:
13:40:9d:ae:8b:1e:ce:fd:15:a4:dc:4b:8f:01:40:
f0:aa:0b:79:a0:8c:9d:df:4f:9e:c9:c9:72:fc:84:
24:ea:b4:76:1f:ad:63:e0:f8:e2:3b:41:96:f8:47:
72:f2:4f:05:6f:72:e6:a1:69:d3:80:37:3f:47:89:
03:9c:28:b7:5f:0d:17:17:ff:3f:31:59:59:79:be:
54:62:d0:ed:b4:68:94:ad:2b:5e:17:1d:83:dc:e2:
7b:71:ef:b5:f7:76:d7:d3:bd:8b:5c:fd:5c:97:c0:
27:43:0a:71:c5:0a:b6:b7:9f:c7:fb:4b:4f:cb:71:
7f:ea:f8:70:70:60:ea:d0:75:30:92:68:d4:47:ad:
1f:a7:41:17:1e:7f:af:a5:ce:34:06:df:1e:98:2f:
b1:be:38:e1:9e:48:f8:f7:ac:8d:a6:3b:e8:22:b0:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7F:70:E5:6B:3C:1A:00:7F:DD:EF:CB:C1:7E:15:01:22:8E:7F:56
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4e:84:b1:e9:ff:f3:ba:78:5e:fe:06:fe:50:0c:83:66:92:
85:eb:c5:70:d3:e8:0c:07:0c:58:ee:27:ff:8f:32:0c:58:f5:
6c:34:e2:39:f1:bf:43:b1:78:09:7a:d3:bc:1c:44:3c:89:87:
1f:d2:b8:80:84:24:47:b0:c1:60:fc:a2:1d:ab:98:3a:3d:02:
c0:c8:1e:65:88:6a:64:b8:cd:40:dc:4d:4f:ce:b7:b7:d1:24:
e7:39:c0:f5:04:8d:31:d0:6c:50:aa:66:00:d6:64:0e:b2:c5:
02:4b:bb:46:3d:24:8d:aa:77:6c:ed:b2:40:e6:b8:61:02:14:
85:40:bf:b5:4a:c8:1b:c3:5f:5a:cd:bf:e3:2a:54:9c:20:fa:
e7:45:31:86:12:52:fe:0a:e6:5a:0e:e5:b6:8a:68:85:62:57:
08:b3:32:38:9e:8a:22:b0:04:78:dc:7e:e8:cc:c0:75:81:33:
1d:94:80:b4:4b:ca:49:9f:a0:6a:13:58:ad:44:82:3d:a0:eb:
ed:39:fb:e6:75:a9:2c:2f:c4:bd:20:b7:cf:36:d1:e6:e4:94:
a7:e8:65:66:b9:1e:60:88:e2:66:bf:41:c3:d0:6d:a7:ad:c7:
de:aa:eb:51:91:50:7a:0d:b0:18:86:61:58:a8:2a:d2:05:65:
0c:bb:0a:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhspe8fVgYJb0i3QFtCaDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzczZWIzZDMwNzk0ZDIyZDc1Y2Q4NzJiOTFhM2JhODQ4
ODQyZDcwHhcNMjUwOTA3MDEwMjU2WhcNMjUwOTA4MDEwMjU2WjAzMTEwLwYDVQQD
EyhlZTdmNzBlNTZiM2MxYTAwN2ZkZGVmY2JjMTdlMTUwMTIyOGU3ZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qSdZmlEbJHMZt58Z6oMtKDi1e5r
moAdHaPPdV9Mqa6H2JKe+atSVOVIvltZfg6MzIRwcSegceuHNUndOy2YfOc3wm0a
PCE2WpCSIrDWc3b/UUWf7s6I5N0TQJ2uix7O/RWk3EuPAUDwqgt5oIyd30+eycly
/IQk6rR2H61j4PjiO0GW+Edy8k8Fb3LmoWnTgDc/R4kDnCi3Xw0XF/8/MVlZeb5U
YtDttGiUrSteFx2D3OJ7ce+193bX072LXP1cl8AnQwpxxQq2t5/H+0tPy3F/6vhw
cGDq0HUwkmjUR60fp0EXHn+vpc40Bt8emC+xvjjhnkj496yNpjvoIrCMAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5/cOVrPBoAf93vy8F+FQEijn9WMB8GA1UdIwQY
MBaAFG93PrPTB5TSLXXNhyuRo7qEiELXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yNGQ3OWQtMTc2Ni00MDQ1LTlkMjQt
NmEwYmFlYjIzMzZlLzEvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yNGQ3OWQtMTc2Ni00MDQ1LTlkMjQtNmEwYmFlYjIzMzZl
LzEvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS06Esen/
87p4Xv4G/lAMg2aShevFcNPoDAcMWO4n/48yDFj1bDTiOfG/Q7F4CXrTvBxEPImH
H9K4gIQkR7DBYPyiHauYOj0CwMgeZYhqZLjNQNxNT863t9Ek5znA9QSNMdBsUKpm
ANZkDrLFAku7Rj0kjap3bO2yQOa4YQIUhUC/tUrIG8NfWs2/4ypUnCD650UxhhJS
/grmWg7ltopohWJXCLMyOJ6KIrAEeNx+6MzAdYEzHZSAtEvKSZ+gahNYrUSCPaDr
7Tn75nWpLC/EvSC3zzbR5uSUp+hlZrkeYIjiZr9Bw9Btp63H3qrrUZFQeg2wGIZh
WKgq0gVlDLsKjQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:46 2025 by rpki-client