Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
File: b3s1wIukkwGmzEMK2pSTztftQhg.mft (raw, json)
Hash identifier: XBlTCdUFus4bpC+zZk7IgCiln55g3crJ/BOff+Fvb+k=
Subject key identifier: 62:14:F3:DD:DF:1C:52:E7:73:00:EF:B7:22:68:66:72:71:55:55:93
Authority key identifier: 6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18
Certificate issuer: /CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
Certificate serial: 01992255299FE3C2AE91749BB826FF899C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
Manifest number: 20
Signing time: Sun 07 Sep 2025 04:00:30 +0000
Manifest this update: Sun 07 Sep 2025 04:00:30 +0000
Manifest next update: Mon 08 Sep 2025 04:00:30 +0000
Files and hashes: 1: b3s1wIukkwGmzEMK2pSTztftQhg.crl (hash: DVPbENvDdnFvD0RmhuX33fBnqm0ZE11AmL5Tv7bKS24=)
2: pkftKVVmiNveyWOcRoVjEB6YNJc.roa (hash: yqLLWSLnILZmgFNtvkmzRb5dEu8dzji64doE8FAEeXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:29:9f:e3:c2:ae:91:74:9b:b8:26:ff:89:9c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
Validity
Not Before: Sep 7 04:00:30 2025 GMT
Not After : Sep 8 04:00:30 2025 GMT
Subject: CN=6214f3dddf1c52e77300efb72268667271555593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:43:ac:52:24:3c:45:54:bd:ef:d2:df:ed:7b:
02:3c:d2:32:25:c8:a1:55:da:11:5f:4a:77:65:e4:
85:76:15:7d:40:e6:6f:12:5a:58:48:35:60:e3:b0:
c7:e5:b9:3b:26:ab:21:49:ef:78:76:88:a8:98:c7:
9b:63:9f:a6:6b:22:4e:d5:42:2f:81:d4:d6:af:43:
4b:a1:16:61:1d:51:76:13:30:78:fc:29:35:de:b6:
ee:c7:e7:ae:f4:7b:ef:59:6a:12:4d:4a:f1:39:c7:
9b:e1:31:0a:4c:13:cb:de:28:f2:13:34:e4:58:27:
d3:23:04:bc:a5:f0:57:53:b4:f9:62:85:c2:e6:27:
99:fc:97:8c:77:c3:01:26:b6:30:b3:be:1e:33:cf:
37:a2:fe:58:49:2e:4c:5f:26:39:47:2f:8e:e3:1b:
0e:eb:11:2d:95:e7:e1:42:f9:c0:05:20:cc:5c:d4:
7c:5a:d6:d7:bd:dd:95:e1:e9:f3:7c:6f:6d:e1:1f:
b1:95:0e:c1:a5:16:88:e0:80:5f:0f:02:23:3b:85:
44:42:af:37:32:96:ba:1b:e4:e6:57:84:83:c9:74:
26:79:8d:e9:e4:fa:1f:3a:b7:88:5c:c0:7e:08:e8:
4b:7d:78:44:f1:19:ce:50:ee:5b:ea:c4:65:af:53:
36:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:14:F3:DD:DF:1C:52:E7:73:00:EF:B7:22:68:66:72:71:55:55:93
X509v3 Authority Key Identifier:
keyid:6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5e:bf:d7:ef:75:9e:fc:21:03:58:59:6e:bc:0b:38:0a:16:
72:5f:48:35:82:20:86:f9:01:61:16:d5:a0:d4:ea:ec:a9:a7:
44:3b:74:ac:b7:20:bc:10:96:7a:99:80:aa:d3:90:47:eb:e9:
1e:ff:7b:c4:fc:fa:a0:af:ab:19:2d:1c:e3:fc:df:9b:d6:01:
1e:c0:9f:44:73:d4:b7:e2:34:ec:27:a8:99:c9:ae:c7:f7:07:
cd:17:a7:57:6c:82:c2:bf:3c:a5:d5:ef:d8:12:ed:1e:8d:24:
52:81:74:04:ff:ca:84:56:bc:b6:20:89:59:7c:c8:0c:29:68:
a1:12:e7:36:75:0c:a4:e2:df:d4:1d:0d:92:ca:28:c4:18:90:
da:d3:7a:d6:63:c9:58:9c:df:bc:01:24:c2:68:c1:98:73:56:
1f:3b:d1:9d:18:6f:7c:fd:9f:e1:9c:54:15:09:06:c4:32:51:
47:22:65:67:3f:bd:d5:08:4a:a5:6b:28:70:ac:18:e3:54:d8:
b1:f3:2d:4d:b9:7a:c1:42:7f:a5:df:bd:3a:ff:24:c6:a2:5d:
a1:cc:4a:cb:9d:17:be:92:93:f2:10:85:96:83:99:70:71:c6:
ea:f0:04:21:dc:f4:56:bd:7f:93:2d:31:ae:3f:3a:48:d8:ab:
72:d6:18:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:07 2025 by rpki-client