Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: VDfqK0S0QbVNAkryL8E7wH6/m/fqeciMGKMMpdMreNA=
Subject key identifier: 06:E1:6D:F3:E8:1F:F2:7E:C7:21:76:34:60:51:E3:17:D4:41:94:9A
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 0198D6CCE2F9FF381DBD19D6881E26542B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 0679
Signing time: Sat 23 Aug 2025 12:00:07 +0000
Manifest this update: Sat 23 Aug 2025 12:00:07 +0000
Manifest next update: Sun 24 Aug 2025 12:00:07 +0000
Files and hashes: 1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: PRnxxlnX6APY89a+FbqmEm38AlW0vZk4Sis65sw4KOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:e2:f9:ff:38:1d:bd:19:d6:88:1e:26:54:2b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Aug 23 12:00:07 2025 GMT
Not After : Aug 24 12:00:07 2025 GMT
Subject: CN=06e16df3e81ff27ec72176346051e317d441949a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d7:48:ae:77:5c:44:0f:8d:88:e4:7f:3f:1e:
05:6a:b0:7c:2e:c9:13:a9:32:b2:e1:ab:8a:7b:fb:
66:46:4d:89:86:17:73:08:ed:4d:43:cf:80:9a:9c:
d7:c5:e7:9e:52:b6:f1:dc:f9:31:64:09:a2:af:30:
e6:c3:34:84:44:55:5f:c0:59:6c:6c:e7:28:e7:27:
c8:cb:1f:74:00:7b:97:87:54:a9:d2:f4:fe:81:be:
c3:c2:2d:0d:8e:bd:54:83:af:38:ac:63:4b:0b:f6:
dd:14:eb:d3:ac:e2:47:a3:21:dc:cf:93:6d:76:75:
2c:9d:e8:39:26:9d:a2:4e:99:92:81:e2:d4:ef:93:
4f:ec:93:84:3c:83:a4:7e:1d:8c:86:6e:f5:56:c1:
87:ed:0d:7e:bd:88:e4:48:3c:6e:9d:f1:e6:82:f6:
4a:51:c6:45:5a:a4:78:e9:11:2d:67:3b:99:6f:a0:
33:4a:c0:d5:33:f5:1a:57:eb:e4:6d:bc:27:1e:4a:
78:6d:b8:3e:c4:4f:d4:a2:d0:92:7c:a2:6b:e4:93:
55:0b:f0:5c:3b:ec:73:96:af:28:5d:35:c3:bc:6a:
1b:4a:c0:05:8c:2d:52:5f:74:01:0c:f3:bd:f9:20:
9a:73:de:2f:3a:05:54:ad:54:3a:2c:78:ab:9e:e9:
84:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E1:6D:F3:E8:1F:F2:7E:C7:21:76:34:60:51:E3:17:D4:41:94:9A
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:21:0c:c1:e8:74:b6:10:1d:fc:56:c6:21:66:b0:bc:db:84:
01:58:d7:d1:06:df:db:52:a3:69:a9:36:b9:29:a9:60:c0:7a:
3e:07:93:02:d4:d8:82:a4:86:1a:f5:73:d1:87:ca:ee:56:e0:
52:94:cd:a6:bb:80:ef:7a:f0:dc:5c:95:83:0e:9a:ad:9b:b2:
52:d1:bb:54:1d:95:90:5d:6c:cc:a4:53:d0:fc:e4:86:ca:ea:
04:db:9e:b1:2a:d9:0d:d0:b7:a7:15:d4:69:70:4b:8d:03:46:
58:85:14:34:8b:e5:fd:b9:8d:69:97:f5:43:f4:a8:1f:cb:02:
83:59:ac:68:6a:5f:3f:b1:ab:4f:a3:74:0b:63:16:4b:0f:8b:
4e:38:c0:da:8a:c1:cd:f8:78:75:92:ee:ab:08:7c:f4:76:cc:
af:5c:85:45:a7:f5:50:5e:5d:4d:1f:cb:f2:71:85:6b:80:04:
26:92:6b:ae:ac:c2:a8:af:35:d3:3c:fc:9d:c8:96:a3:e6:3b:
74:6e:c4:9e:85:0e:f2:ad:88:6d:c3:97:d8:04:8f:81:11:b0:
f8:c2:d5:d6:0e:04:b2:02:ac:41:f7:d0:38:46:fe:9a:3b:04:
61:18:7e:d0:65:f2:f5:cb:d5:e4:dd:e6:ee:5d:8d:a4:79:b9:
7f:f2:d4:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzOL5/zgdvRnWiB4mVCshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2ExMWNjYWQxMmU0NTUyODZmNWQwZWIzMDQwZTg2M2Yz
MGM5OTMwHhcNMjUwODIzMTIwMDA3WhcNMjUwODI0MTIwMDA3WjAzMTEwLwYDVQQD
EygwNmUxNmRmM2U4MWZmMjdlYzcyMTc2MzQ2MDUxZTMxN2Q0NDE5NDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitdIrndcRA+NiOR/Px4FarB8LskT
qTKy4auKe/tmRk2JhhdzCO1NQ8+AmpzXxeeeUrbx3PkxZAmirzDmwzSERFVfwFls
bOco5yfIyx90AHuXh1Sp0vT+gb7Dwi0Njr1Ug684rGNLC/bdFOvTrOJHoyHcz5Nt
dnUsneg5Jp2iTpmSgeLU75NP7JOEPIOkfh2Mhm71VsGH7Q1+vYjkSDxunfHmgvZK
UcZFWqR46REtZzuZb6AzSsDVM/UaV+vkbbwnHkp4bbg+xE/UotCSfKJr5JNVC/Bc
O+xzlq8oXTXDvGobSsAFjC1SX3QBDPO9+SCac94vOgVUrVQ6LHirnumEMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbhbfPoH/J+xyF2NGBR4xfUQZSaMB8GA1UdIwQY
MBaAFMd6EcytEuRVKG9dDrMEDoY/MMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgt
MDkwZTViZDU4MGIzLzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgtMDkwZTViZDU4MGIz
LzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyEMweh0
thAd/FbGIWawvNuEAVjX0Qbf21Kjaak2uSmpYMB6PgeTAtTYgqSGGvVz0YfK7lbg
UpTNpruA73rw3FyVgw6arZuyUtG7VB2VkF1szKRT0PzkhsrqBNuesSrZDdC3pxXU
aXBLjQNGWIUUNIvl/bmNaZf1Q/SoH8sCg1msaGpfP7GrT6N0C2MWSw+LTjjA2orB
zfh4dZLuqwh89HbMr1yFRaf1UF5dTR/L8nGFa4AEJpJrrqzCqK810zz8nciWo+Y7
dG7EnoUO8q2IbcOX2ASPgRGw+MLV1g4EsgKsQffQOEb+mjsEYRh+0GXy9cvV5N3m
7l2NpHm5f/LU4A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:03 2025 by rpki-client