Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
File: b3s1wIukkwGmzEMK2pSTztftQhg.mft (raw, json)
Hash identifier: 3Kqkhc3IlhQAULS6xS3jsfiNxT5OXRAgnVXH+jS0w7s=
Subject key identifier: A3:9D:94:BC:02:68:EE:9B:AB:C6:42:5C:B9:C2:78:AE:3D:2F:D7:D9
Authority key identifier: 6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18
Certificate issuer: /CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
Certificate serial: 019A72265CC7D8762098C56491CB79320ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
Manifest number: D0
Signing time: Tue 11 Nov 2025 09:01:47 +0000
Manifest this update: Tue 11 Nov 2025 09:01:47 +0000
Manifest next update: Wed 12 Nov 2025 09:01:47 +0000
Files and hashes: 1: 4F8H7nNNelFubPxa-Se_4jhtbVs.roa (hash: 0pMog6BIURq0CwttFDOe27twy9MaL7OZIJcruUdS1Oc=)
2: XU5of-sO5C2kcDo6tI15PQJLpSE.roa (hash: yMviCrZaaiQvFu0zaMoGhkE3HEZqEZ5DgntX+OnEfio=)
3: b3s1wIukkwGmzEMK2pSTztftQhg.crl (hash: iRXNB1HxxHPaTzY2EZzSjq/MNLBfYGs4TEVKqovtP10=)
4: to9OwOfY2gYabsE2e_ZELvsI_rU.roa (hash: s0SkGoiQxrVm7KkMC6Ajpkq1MgO1vuYl0n5PRb27DnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5c:c7:d8:76:20:98:c5:64:91:cb:79:32:0a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
Validity
Not Before: Nov 11 09:01:47 2025 GMT
Not After : Nov 12 09:01:47 2025 GMT
Subject: CN=a39d94bc0268ee9babc6425cb9c278ae3d2fd7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:e2:16:b7:c6:3a:85:b1:86:28:f6:b0:96:
69:f4:7b:4c:2a:f9:02:1f:fa:95:91:e8:d5:da:3e:
95:64:28:ac:1f:a5:2f:95:5d:06:3f:d4:17:71:34:
58:0c:47:82:7d:b7:dd:69:8d:1c:0d:1e:5c:5a:c9:
28:bb:0f:81:f9:fc:b1:cf:a0:d1:5e:fc:51:3d:2d:
0b:4a:ef:c5:de:9c:63:69:57:02:ec:f5:5d:1a:9f:
c8:c8:3b:fa:8c:21:8f:ed:e9:61:b7:24:81:cb:e7:
f5:f3:9d:58:26:8c:f1:7a:77:10:0d:61:14:d5:c5:
ee:8b:0d:36:cc:5e:10:8f:da:7f:8d:00:57:82:16:
dc:dc:32:c4:51:4b:16:64:95:bb:0b:02:bf:17:72:
39:96:5b:d2:65:11:5f:c7:7b:15:ea:a8:95:7a:87:
58:5a:8a:ee:08:cb:d0:2e:57:27:a4:7a:37:1d:f9:
25:44:18:7d:78:a2:4f:3c:11:c4:5c:ac:ec:16:2d:
dc:f2:ae:05:5f:00:93:55:e8:c2:69:da:8d:89:ed:
8b:92:b2:99:b6:70:b5:91:5e:27:50:11:98:43:f1:
b0:36:4e:45:e8:36:4f:08:68:87:43:be:db:7b:63:
2a:21:90:01:16:de:08:a3:9d:23:88:80:8c:24:a2:
f1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9D:94:BC:02:68:EE:9B:AB:C6:42:5C:B9:C2:78:AE:3D:2F:D7:D9
X509v3 Authority Key Identifier:
keyid:6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:dc:e3:21:66:ca:41:55:56:4c:c4:37:0b:55:79:e2:76:ac:
55:05:9a:a6:29:8d:7b:61:a9:59:07:1d:48:80:0f:06:b9:2b:
28:31:15:d1:20:11:72:d6:57:99:eb:51:14:91:a9:1e:5a:51:
71:79:3c:9d:98:8e:ad:e0:9a:48:48:12:1f:85:b5:b4:e2:f1:
ef:52:f2:7a:58:ec:26:f6:55:e0:d0:3a:c9:aa:13:fb:41:58:
21:9b:4e:14:ff:3c:dc:49:df:b5:d6:a1:ef:be:2f:1f:80:a2:
1f:a3:d6:1c:13:fb:55:a4:56:66:6f:a7:ce:a0:49:b4:fb:f2:
13:51:62:6b:2c:86:49:a2:f0:f5:3c:1e:d7:d7:67:ab:fb:68:
66:cf:38:e1:87:fe:36:1c:cb:40:92:3c:30:91:61:0c:5b:b6:
60:19:95:f2:d2:2a:82:7b:ce:76:65:c0:8b:28:f8:b5:07:b2:
1b:04:91:57:1f:fb:5b:d6:77:c2:1e:11:49:23:43:c5:da:ea:
65:8f:a4:8c:4e:f0:c9:42:90:90:ed:d0:6e:34:75:34:ac:b7:
14:5a:54:bc:93:be:7a:31:ad:39:60:37:8d:84:52:24:dd:e4:
6a:c4:4c:39:3d:55:48:c8:63:04:d7:b3:55:89:d5:1b:b0:c2:
97:93:b9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:54 2025 by rpki-client