Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier: +Bx00zj63bfPshJAg28O1Rs1QZCg/9CowSx3zybh19k=
Subject key identifier: 87:FC:2E:3A:5B:CD:F3:24:40:53:FE:03:4A:6F:09:8C:DF:6A:DC:57
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 019A71B8006E862DC73DFC53F845CFE94EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number: 1456
Signing time: Tue 11 Nov 2025 07:01:15 +0000
Manifest this update: Tue 11 Nov 2025 07:01:15 +0000
Manifest next update: Wed 12 Nov 2025 07:01:15 +0000
Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: Xcwc0BpSldQZWwT9jF8oYi1HhdTvRXOnWadZtXQ2Jsc=)
2: wCDrJf6K3N6SQxouZVxxkGAndwU.roa (hash: RDCOaghInO75GT81gEgSeMeIYDUyZ4Fou/t1PYJdixY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:00:6e:86:2d:c7:3d:fc:53:f8:45:cf:e9:4e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: Nov 11 07:01:15 2025 GMT
Not After : Nov 12 07:01:15 2025 GMT
Subject: CN=87fc2e3a5bcdf3244053fe034a6f098cdf6adc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:85:cb:22:cd:a6:f7:68:1a:3f:2f:58:7e:
69:21:57:a2:e3:74:b7:f2:84:e0:6f:3d:14:5c:93:
1d:ca:24:2e:9a:96:49:8d:9d:f0:02:62:84:5d:32:
a4:79:a5:cb:5c:69:2b:92:8b:bc:60:dd:ea:54:08:
20:ca:68:3d:38:ef:96:9b:65:a5:2e:87:38:ab:3b:
fa:6d:96:59:d3:05:63:89:f9:34:92:bb:1a:14:53:
e0:45:c1:36:da:f4:bf:b8:72:60:14:be:70:c0:cb:
9c:f9:ea:d8:8a:04:64:22:77:1a:1a:ac:62:ba:c3:
eb:a0:80:ea:dd:87:59:f6:59:b4:47:86:0e:ff:a0:
74:d7:02:08:17:48:d6:e0:e3:bb:b7:6a:f6:0c:21:
87:62:ce:8c:77:90:4a:b8:c2:ef:12:b9:ae:7a:15:
2e:f4:ef:27:f4:a1:92:be:4b:99:d5:00:f9:ea:5e:
4a:a9:cb:05:cf:da:ae:a0:be:d9:18:6b:3d:09:1a:
e2:39:e8:7f:2c:75:9b:1c:cb:e2:1b:49:f4:72:cb:
2e:bc:52:4c:e3:d9:11:06:a8:52:fc:70:7b:e1:0a:
ef:f3:1c:67:5f:d0:42:ac:38:a5:bf:0d:cf:dd:05:
80:48:fd:f8:cb:52:dd:bc:cc:10:f1:64:68:62:a0:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FC:2E:3A:5B:CD:F3:24:40:53:FE:03:4A:6F:09:8C:DF:6A:DC:57
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:19:a2:5f:af:16:72:8a:be:b7:ae:43:ca:98:d2:ca:45:c0:
1d:96:b2:89:e5:cc:7d:62:48:f9:d9:10:29:1f:54:ca:6c:bc:
4c:fa:42:a0:5a:68:3f:7c:a8:df:55:c3:27:3c:0c:8e:b1:5d:
34:d9:6d:b8:a5:2b:5b:dc:5e:3c:99:8a:15:65:88:81:12:19:
7c:cb:5a:41:89:bd:37:36:f3:df:15:0c:21:c9:6e:3e:d4:1e:
b9:e3:85:96:c5:4c:d4:41:8a:92:9f:3c:90:16:3b:bb:ea:d4:
8e:92:eb:17:bc:e3:e0:d8:6d:f6:ee:e5:72:e2:de:2e:f9:bd:
44:9e:00:0d:74:50:45:ee:41:93:a6:c2:20:b3:28:60:ad:8f:
74:45:1e:bb:9a:5b:24:50:03:bf:6d:30:5f:12:00:31:47:08:
01:a7:ca:9b:99:f0:42:36:53:7d:95:52:61:cb:04:06:67:be:
e3:b6:59:0a:bb:9f:c1:26:01:c2:6e:9f:21:9b:38:66:72:b9:
15:b9:91:4d:08:4c:b1:2f:4b:49:ec:dd:66:a6:cb:40:00:9b:
e1:94:2a:89:bc:de:e2:ba:0f:ce:7f:f9:8b:8f:04:ed:d8:07:
24:1b:d5:e8:fb:5b:78:e7:cd:95:eb:46:43:6e:8f:81:d3:bb:
cd:d1:a8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:49 2025 by rpki-client