Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier: y2lT5HG5mUDm4YNPFmK0GA76mwTaPq84BPAFS298RHU=
Subject key identifier: 53:6B:F7:C1:74:97:F3:29:BF:DC:36:A3:25:C3:EA:E7:23:2B:FF:9B
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 0199FD6B07D255DD315459723F2E21F42816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:13 +0000
Manifest this update: Sun 19 Oct 2025 17:01:13 +0000
Manifest next update: Mon 20 Oct 2025 17:01:13 +0000
Files and hashes: 1: G5zSLsnIB1Tf_3dQqRjF_q9OU44.roa (hash: 2jnkEsy8dLS8k5/gnwKVBaZUL+prmqB8W/32sROipKI=)
2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: bHqJmp+9N99UXwDZiOi+dvTwIj3+Yjs5WRYaN9CltUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:07:d2:55:dd:31:54:59:72:3f:2e:21:f4:28:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: Oct 19 17:01:13 2025 GMT
Not After : Oct 20 17:01:13 2025 GMT
Subject: CN=536bf7c17497f329bfdc36a325c3eae7232bff9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:36:f7:a9:b6:2c:fc:5d:b0:0a:ca:25:f8:
2f:a1:0b:62:a1:26:18:bf:40:04:03:b4:15:66:44:
96:48:d6:fe:54:a4:d4:68:be:28:ec:71:ad:43:be:
47:c1:64:ae:61:fb:90:ff:f7:f9:05:48:f1:98:36:
bb:73:ce:81:a2:27:d5:d9:90:50:8d:a5:ab:fc:29:
02:82:e5:c8:56:49:a6:a1:3c:36:5b:60:df:ca:98:
ee:10:20:e2:b9:d7:0b:8f:53:fe:ec:3a:71:19:2d:
5d:da:a6:0e:91:03:e8:93:15:9d:8c:a7:f5:e7:9b:
8d:24:27:35:9c:d3:f0:af:a6:76:34:9d:90:3b:df:
f5:1c:5d:f1:fe:31:7e:f7:41:1b:a5:35:51:a2:d6:
42:37:ab:67:af:5b:9f:5e:96:78:ff:ea:2a:01:d6:
be:12:f1:77:37:46:6f:01:9a:23:49:ea:0d:ae:87:
e2:58:57:2c:db:65:63:ff:3c:ca:6d:12:51:73:c2:
57:7c:ec:79:f8:b4:4d:3c:e9:0f:af:f2:23:f6:a3:
5c:e3:e7:0d:76:c8:79:52:c7:ba:d6:bd:a1:f3:e0:
cb:be:ad:ef:3c:9c:28:1a:1f:04:21:fc:ea:d2:49:
17:dc:de:0a:23:1e:34:c0:6e:33:8f:fe:27:03:6c:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6B:F7:C1:74:97:F3:29:BF:DC:36:A3:25:C3:EA:E7:23:2B:FF:9B
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:73:4f:45:40:44:f4:25:c7:ce:6d:40:34:8c:94:e9:3b:0a:
92:2c:1d:04:8c:ff:06:42:fc:fb:a0:47:e7:b2:bd:7e:4f:15:
91:dc:a9:e5:76:d9:92:4d:aa:5a:b5:75:33:8e:ab:0f:8b:5a:
9a:29:19:e5:75:71:23:68:28:ec:0f:97:4c:1f:02:c9:01:01:
be:f8:a2:f4:7a:69:6c:dd:32:41:06:1e:ac:83:5c:06:03:08:
e3:c5:96:00:a7:f6:3b:cf:ce:d6:bc:7d:75:db:ea:c5:8c:4e:
d5:1f:0a:a4:f2:02:bf:03:42:37:6b:71:3c:42:32:f8:2f:e3:
7d:7e:38:df:29:ab:cf:67:c2:af:d7:df:f3:b9:43:1f:2c:63:
1b:b3:24:fb:79:06:ce:b4:85:6a:aa:35:89:ae:1c:12:57:8b:
05:92:83:bc:92:3b:34:f6:6c:b7:00:a4:83:45:56:5e:d8:2c:
0f:e0:41:73:b7:8f:7b:83:49:49:8e:0a:a6:a0:c8:86:97:28:
e2:0b:39:af:b1:02:b1:b7:8e:c6:03:3b:01:96:b1:26:2a:8a:
e4:b9:92:34:1d:e2:65:81:71:0d:24:32:cb:eb:a1:b2:a5:90:
a0:3b:02:68:15:d3:ad:52:b4:2c:81:0b:b6:27:ec:a8:0c:14:
51:7e:ec:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:53 2025 by rpki-client