Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: CmQmCDZwBuVbpGpeMWzo9JX+ETVMizw3ghYmGokABAs=
Subject key identifier: 88:0B:FD:FA:7C:CA:1A:33:12:8F:45:37:7B:8B:FD:6B:94:22:E2:23
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 0198D4DFFCE871CF0F270964C31A96895796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 03:01:45 +0000
Manifest this update: Sat 23 Aug 2025 03:01:45 +0000
Manifest next update: Sun 24 Aug 2025 03:01:45 +0000
Files and hashes: 1: Nt8U8Z3kL0IxgChONZlb9wxsuew.roa (hash: q3bR4XOi7x1iBnBhyEpixBllLru5p/ZAb3mokEcvE1o=)
2: Zzn898alwJ-ZQ7BYnOoh1f9BcU0.roa (hash: ZfOULEhZA5KSiQObf0XfCp/rLlK21I+b+ae43OnFfqk=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: H447M15bJZWrgCPQx+Z6+CfjzG9RPykpJMWNVMziN64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fc:e8:71:cf:0f:27:09:64:c3:1a:96:89:57:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Aug 23 03:01:45 2025 GMT
Not After : Aug 24 03:01:45 2025 GMT
Subject: CN=880bfdfa7cca1a33128f45377b8bfd6b9422e223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:3a:48:14:5c:65:72:21:f4:67:f8:a8:eb:
02:de:69:a2:a0:be:32:ab:51:a3:00:c8:fb:8f:d9:
34:4e:92:d7:7f:cc:0c:78:a4:c3:59:93:5a:2b:94:
ae:75:4b:31:4a:a6:fc:d5:5f:36:77:6f:86:09:a1:
c6:50:6b:17:17:b4:46:ca:d1:96:8a:40:39:6b:5c:
0f:84:22:42:2d:0f:cb:5c:2b:2a:36:41:46:d2:6f:
3e:79:15:8a:bc:9f:5f:b9:2f:a6:0b:80:76:41:75:
d3:a2:a1:56:86:12:6b:c7:a3:72:3d:25:4d:3d:30:
af:d4:dc:5d:d8:0f:bd:e4:12:01:11:77:90:b6:23:
22:f8:ec:7d:34:be:a8:ce:b4:09:3d:6d:04:bf:88:
f8:73:d0:d4:67:b1:ec:7c:2b:4a:75:d4:32:3b:aa:
62:98:9c:86:fc:83:36:5d:77:6b:57:c1:2d:fa:e8:
4f:14:ae:46:f4:f1:c8:94:48:e2:a6:8a:32:f7:93:
d6:68:7b:81:f0:17:f4:1e:51:cf:1c:79:72:4e:59:
d9:ee:69:cd:39:6a:ce:0a:1d:bc:05:6a:a7:ee:bd:
d7:02:a8:62:04:04:96:03:f0:05:af:35:90:e5:ce:
57:8b:2f:da:75:85:27:d0:5e:68:ed:ff:b1:e5:e3:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0B:FD:FA:7C:CA:1A:33:12:8F:45:37:7B:8B:FD:6B:94:22:E2:23
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:ff:8d:4c:80:c4:58:b1:a0:2b:61:c8:d6:a5:03:1a:64:fb:
42:ab:fb:85:9c:fc:59:a9:b7:2b:17:ea:d4:ae:05:ec:42:0c:
10:4c:d1:8b:1b:6d:c6:66:2e:f1:9b:96:97:df:53:c6:c7:30:
e7:39:be:4c:5e:13:71:3c:b4:e1:64:b9:9b:06:bf:df:4a:cf:
0e:4d:13:be:72:9e:62:9b:62:69:c8:cc:82:fa:e7:c3:ac:7c:
dd:17:b5:8f:1c:bf:e1:b4:4b:28:83:e7:0e:e2:78:bc:98:e1:
2e:7c:f3:5b:01:4a:38:23:a5:71:3d:fa:2c:2c:6b:56:28:90:
44:e2:65:4b:d8:95:53:ac:71:09:7a:90:87:f4:4c:ae:86:b9:
34:f3:97:89:bd:2c:d2:ad:f9:03:a9:d1:12:15:d9:a0:88:ff:
68:55:53:42:7a:b3:96:55:cd:08:a4:ab:7b:6f:4d:2d:a7:68:
fd:15:47:cb:74:2b:2c:c9:7b:a4:30:30:d6:00:01:42:ac:e1:
60:96:73:14:68:c8:d7:55:be:f3:f1:60:b4:cd:62:bd:6f:77:
14:fe:04:2e:ab:8e:00:1a:f8:da:8b:9b:d5:3a:73:04:91:5f:
ae:26:70:5b:5a:2f:fa:f4:a5:bc:ab:d1:8d:65:08:50:6c:be:
c8:12:47:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:41 2025 by rpki-client