Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
File: x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json)
Hash identifier: mZwtjzBWNkCCmMd7vF0ClGp49TZwrmOkDvNxLU9KPic=
Subject key identifier: 6B:3D:F2:46:44:FA:A9:50:34:D8:D7:09:8E:4D:25:87:AD:F0:2F:B8
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial: 0199FBEAB22EB70840E9F60D7210CF7016BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: 9QkZQFFq52UED9EyY0jKnFH-pX8.roa (hash: qLNZsCVw5BE1cHr6HyybImHSaQWc8kutbUnGNRzqfeU=)
2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: YuE6VmjI/HX+JthWud1eYimK5OrAE+MqR5EdIMjggJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b2:2e:b7:08:40:e9:f6:0d:72:10:cf:70:16:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=6b3df24644faa95034d8d7098e4d2587adf02fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:51:8f:8b:57:97:21:78:a4:dc:eb:27:de:
b5:02:73:9a:de:83:fa:e6:92:38:d4:96:8b:da:3c:
b5:e1:a6:52:17:fb:d1:1b:38:c1:00:12:f1:35:f5:
83:53:ba:75:ae:2f:cc:aa:c3:e7:c3:89:00:fa:cb:
c6:b6:a0:c5:83:ce:e5:a1:3a:71:38:57:78:6c:65:
7e:f5:0d:64:70:6a:df:4e:5c:be:ae:c5:1b:91:0f:
43:e1:55:02:2f:e7:e3:39:f5:5d:5a:12:28:eb:bf:
52:d0:b7:ed:70:53:90:6a:95:af:25:a1:f8:da:1e:
72:97:d3:0c:b0:a0:46:75:d7:fe:17:93:4e:1c:8c:
d8:bb:ba:98:69:a3:6a:2b:04:cb:c3:d4:30:20:be:
69:e1:3c:57:fb:50:00:61:16:20:d0:bf:de:32:ed:
af:7c:dc:ed:71:fa:af:f6:28:c9:c0:2b:11:bf:56:
a0:c3:42:11:a2:9c:46:7d:61:c8:5d:3c:84:6a:9e:
c9:ce:f8:00:4f:cb:28:ca:21:8f:29:e4:8e:c9:74:
a9:93:17:ef:e6:54:a4:f4:82:b6:04:99:c6:8a:93:
6a:9d:39:f6:92:7e:cd:dd:7d:2b:5c:32:12:24:1a:
ba:b7:1d:8a:2b:93:3e:4a:14:c4:a7:67:d3:6f:75:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3D:F2:46:44:FA:A9:50:34:D8:D7:09:8E:4D:25:87:AD:F0:2F:B8
X509v3 Authority Key Identifier:
keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0c:67:4c:a1:8b:4a:aa:1d:e4:37:e1:8c:36:5d:fd:e8:b9:
19:52:a2:ff:47:87:cc:6d:ba:d6:af:73:a5:e1:12:aa:ed:03:
7f:93:86:56:a1:35:f2:ea:28:54:d7:ec:21:ea:82:b4:0e:95:
08:5e:24:24:ed:52:0c:91:72:de:ed:b3:e4:3d:3e:fc:ab:41:
cd:56:25:78:b4:6b:58:78:da:be:82:da:77:94:18:39:60:6b:
6e:11:9b:a8:38:f4:0d:63:e8:55:b3:26:0a:f6:23:68:14:cc:
13:9a:b3:90:ed:55:27:ab:f1:05:2f:60:c4:1c:6c:49:4d:03:
cf:66:42:1f:33:73:60:87:89:51:47:fb:d4:11:17:8c:66:a3:
f3:20:fe:24:6e:6b:00:35:29:32:8f:06:d3:7a:14:50:80:45:
e2:48:4c:01:de:11:f9:9c:22:05:a5:39:b7:53:57:7c:b3:76:
3d:27:c5:5f:59:3c:d0:00:bf:c6:a3:1e:39:74:3f:2c:0e:92:
4d:00:46:97:ef:c9:74:46:2c:e6:f8:dc:02:76:d6:40:93:e4:
8c:87:98:fb:61:91:d3:8d:a5:62:95:68:6c:35:d5:6b:cb:30:
1b:85:bb:1c:73:01:6f:aa:21:dc:50:89:16:48:2a:77:46:bf:
dc:45:22:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:56 2025 by rpki-client