Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: Xs3Az5x2YUElP41a+0bSulfYnike0Sprer5pFNqqJS0=
Subject key identifier: 5D:C3:97:0E:A2:F3:C0:B2:1E:81:8B:38:F3:3E:5A:AE:BC:38:6A:A7
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 0199FC58F729F3A4FC023D5642472DEF8006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 0711
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: yoIPnw271U7djkNszan4GQs+E8xVUVS6cD2QKeFLAL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f7:29:f3:a4:fc:02:3d:56:42:47:2d:ef:80:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=5dc3970ea2f3c0b21e818b38f33e5aaebc386aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:3e:35:51:61:b0:6d:e9:78:1f:28:ca:24:
17:88:a5:3a:87:80:81:c1:41:09:0a:e7:29:77:34:
83:75:4c:e9:17:7d:53:b2:e6:c3:8e:30:97:07:e0:
7f:79:4b:04:8a:7f:9a:df:43:97:10:30:53:e8:69:
de:20:90:f6:ad:6d:9c:9c:c4:6c:9f:72:b0:74:84:
7e:a6:ac:26:18:ab:6a:a7:06:f7:95:5a:b9:a3:15:
3c:43:1a:55:a7:80:75:92:54:63:c4:0d:9b:fe:80:
61:47:5c:79:45:2e:62:c4:03:34:a0:5d:07:86:43:
e1:b6:5f:66:cb:78:1f:db:87:d0:a8:90:f7:28:d8:
49:2a:50:a0:15:76:eb:7e:2d:79:6f:4e:38:3e:0a:
1f:00:fc:2c:45:ba:60:12:38:1f:5e:a6:3f:31:5b:
6e:c9:6a:9a:9e:e5:87:70:de:70:15:40:9a:e1:fb:
30:04:d3:93:2f:83:f8:bb:49:4a:2a:dd:46:9e:32:
e0:7e:a3:5d:fd:47:fb:2e:64:ac:b5:17:8a:2e:b2:
5c:f3:e1:35:57:6e:d6:87:58:5e:8c:2d:0c:db:c2:
c7:01:6a:ba:82:63:52:8a:1a:87:1b:05:e1:a6:dd:
13:be:52:d5:0d:64:bf:25:9f:c2:46:09:ad:7a:9e:
87:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C3:97:0E:A2:F3:C0:B2:1E:81:8B:38:F3:3E:5A:AE:BC:38:6A:A7
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6b:60:96:c9:17:63:cd:5f:6b:7b:64:3b:9f:e4:ba:5f:cc:
81:71:f8:49:5b:d6:c2:5f:d9:d3:6d:3f:75:a5:43:25:3a:f6:
e5:0e:c9:e9:52:ba:7d:7b:d3:37:c3:1f:c8:e3:cc:30:84:4a:
4f:71:86:cd:4c:f6:21:67:9c:95:cb:fd:43:86:5a:c5:df:9a:
a7:55:5b:a6:5d:af:24:a1:37:0a:80:d8:40:73:f5:9f:c7:aa:
51:72:aa:d5:e5:c6:63:fe:95:1c:7f:2a:e7:9c:df:23:9a:c5:
83:7e:a9:d3:d0:23:2d:ae:45:02:a4:0f:45:66:11:ee:1d:6a:
73:f0:79:13:d6:d5:25:44:e8:bf:e3:1c:77:8a:5b:50:fa:11:
cf:44:19:2c:6b:cb:d6:48:56:a5:6b:38:b5:36:a8:16:19:40:
b2:d8:2e:0a:78:2d:52:7a:b9:2e:c9:ed:a9:37:fe:70:0e:8d:
aa:cf:c7:25:65:7d:e9:4f:19:ed:89:a9:73:bd:f2:ac:a9:3a:
20:a8:1a:7e:b3:bc:99:f0:ee:c9:02:e5:5d:a9:01:49:79:d3:
30:d1:be:12:dc:e9:c6:ea:84:91:4e:b6:97:0a:15:d8:af:c3:
43:b1:5c:14:b2:80:ed:77:88:0e:19:88:87:24:35:fe:8f:13:
2d:02:6c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WPcp86T8Aj1WQkct74AGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2ExMWNjYWQxMmU0NTUyODZmNWQwZWIzMDQwZTg2M2Yz
MGM5OTMwHhcNMjUxMDE5MTIwMTUyWhcNMjUxMDIwMTIwMTUyWjAzMTEwLwYDVQQD
Eyg1ZGMzOTcwZWEyZjNjMGIyMWU4MThiMzhmMzNlNWFhZWJjMzg2YWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTc+NVFhsG3peB8oyiQXiKU6h4CB
wUEJCucpdzSDdUzpF31TsubDjjCXB+B/eUsEin+a30OXEDBT6GneIJD2rW2cnMRs
n3KwdIR+pqwmGKtqpwb3lVq5oxU8QxpVp4B1klRjxA2b/oBhR1x5RS5ixAM0oF0H
hkPhtl9my3gf24fQqJD3KNhJKlCgFXbrfi15b044PgofAPwsRbpgEjgfXqY/MVtu
yWqanuWHcN5wFUCa4fswBNOTL4P4u0lKKt1GnjLgfqNd/Uf7LmSstReKLrJc8+E1
V27Wh1hejC0M28LHAWq6gmNSihqHGwXhpt0TvlLVDWS/JZ/CRgmtep6HfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3Dlw6i88CyHoGLOPM+Wq68OGqnMB8GA1UdIwQY
MBaAFMd6EcytEuRVKG9dDrMEDoY/MMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgt
MDkwZTViZDU4MGIzLzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgtMDkwZTViZDU4MGIz
LzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWtglskX
Y81fa3tkO5/kul/MgXH4SVvWwl/Z020/daVDJTr25Q7J6VK6fXvTN8MfyOPMMIRK
T3GGzUz2IWeclcv9Q4Zaxd+ap1Vbpl2vJKE3CoDYQHP1n8eqUXKq1eXGY/6VHH8q
55zfI5rFg36p09AjLa5FAqQPRWYR7h1qc/B5E9bVJUTov+Mcd4pbUPoRz0QZLGvL
1khWpWs4tTaoFhlAstguCngtUnq5LsntqTf+cA6Nqs/HJWV96U8Z7Ympc73yrKk6
IKgafrO8mfDuyQLlXakBSXnTMNG+EtzpxuqEkU62lwoV2K/DQ7FcFLKA7XeIDhmI
hyQ1/o8TLQJsww==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:56 2025 by rpki-client