Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier: dDboGutO/Y3SWYSTMsmPwC/ZvV90siK55+T6awN6vNg=
Subject key identifier: 95:A6:10:82:09:13:6B:DB:F6:BD:BE:DF:2F:4A:0C:C2:65:76:8A:31
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 0198D5F14E4F063FFD12408BFFDDD7AACB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number: 0F4B
Signing time: Sat 23 Aug 2025 08:00:17 +0000
Manifest this update: Sat 23 Aug 2025 08:00:17 +0000
Manifest next update: Sun 24 Aug 2025 08:00:17 +0000
Files and hashes: 1: ZfJgayjX3ZyY4keMrrK5ie3SiNQ.roa (hash: I356ijiy3DFzBI7A3YL8pZIG42TC++pOhoxAzv45n5Q=)
2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: iNCsQy4MsGDLqBnwxHGdVsWhcCR9M4Q4XInGCyhAybI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4e:4f:06:3f:fd:12:40:8b:ff:dd:d7:aa:cb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: Aug 23 08:00:17 2025 GMT
Not After : Aug 24 08:00:17 2025 GMT
Subject: CN=95a6108209136bdbf6bdbedf2f4a0cc265768a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:7d:c0:a2:01:e2:b5:84:77:65:22:d3:fd:
1f:a6:28:51:58:11:e5:37:d4:f0:bf:6b:5b:52:0f:
55:0b:df:32:17:28:6e:de:2a:7c:58:cd:b5:d7:03:
9d:3c:60:10:da:02:ac:d3:08:ce:17:38:ef:0a:42:
da:1b:a6:de:ef:62:bd:b1:22:44:71:f3:7e:e4:3e:
a3:59:52:9d:c9:08:7b:de:da:76:af:3e:06:a3:98:
bd:96:7d:ca:6d:12:d5:ad:a3:d3:bb:8e:7d:33:c1:
8f:99:6b:27:3b:17:77:c2:44:49:d1:03:65:83:51:
80:54:46:dd:c0:c0:aa:10:e7:cd:f3:0c:17:3e:a8:
cf:1d:11:0e:87:68:fe:dc:8e:6d:39:f5:00:51:8f:
6f:18:a2:ac:b9:bc:a5:43:8e:44:24:a0:6e:6a:d3:
40:f2:e4:70:3c:a8:c4:06:1f:7f:b8:ac:73:a3:49:
10:4e:20:03:dd:f0:73:0b:40:81:56:42:4b:5e:c4:
b8:e5:0d:a2:b4:fc:a9:3a:19:88:44:69:5e:d8:d8:
4c:b3:5d:4e:e8:2a:b7:82:2f:0b:37:81:56:f3:71:
ff:28:a9:92:df:c5:13:be:37:05:c7:85:21:c1:c7:
4d:fc:c9:7d:f5:fa:61:08:71:93:4d:d9:e6:f6:94:
a8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A6:10:82:09:13:6B:DB:F6:BD:BE:DF:2F:4A:0C:C2:65:76:8A:31
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f8:11:76:aa:b8:c7:86:87:0a:8e:d6:fe:2b:32:44:29:02:
0f:46:73:fe:cf:c7:7c:3b:c8:ca:92:53:b3:36:39:82:89:fe:
00:ea:7b:76:cc:cc:51:a5:4e:cb:50:ab:10:f0:81:be:f3:91:
bd:51:ba:e9:82:51:6b:1c:9d:3d:5e:34:1f:d4:6e:32:46:7f:
09:f7:a9:e0:d0:ee:43:fe:20:68:31:59:76:ec:49:f6:e9:b4:
1b:0e:2e:92:5e:5c:14:24:31:94:99:92:db:33:37:2b:c0:cc:
d6:a7:33:26:0c:c6:6c:4e:48:dd:2e:0d:e1:1c:34:9b:d7:4a:
bc:de:ab:cf:f2:de:5f:04:db:6e:bc:12:4f:ad:c2:90:0a:25:
86:8d:bb:b8:64:64:59:34:9d:f1:02:03:39:11:2f:96:86:2c:
33:6b:dd:8c:94:a4:4f:aa:5b:95:86:1b:1a:0a:b2:00:59:41:
4f:23:07:4a:cc:5c:70:b1:b4:45:a3:ed:15:2e:0c:ea:d1:d7:
c1:09:64:08:bd:b0:6a:26:8d:71:32:c5:02:7d:fd:63:cb:8b:
e8:58:f2:6f:2d:45:63:d5:f0:fa:ed:e2:64:d8:44:5a:57:70:
f0:fc:af:88:5b:1e:fe:8f:36:2e:f9:de:ff:86:4d:c4:b6:c2:
92:92:21:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:53 2025 by rpki-client