Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier: Jk+qz1vVLgE2+86KI2779ihEXexbZpgAYRBkfmFBiEM=
Subject key identifier: A0:70:C3:ED:EF:86:1E:26:39:61:E1:EC:D3:25:E7:93:01:AA:74:D7
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial: 0198D65F1840AAEBA41A76A98ABD507E8F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:12 +0000
Manifest this update: Sat 23 Aug 2025 10:00:12 +0000
Manifest next update: Sun 24 Aug 2025 10:00:12 +0000
Files and hashes: 1: iMH-2vRf9YeMGRgtztJPUn14aQA.roa (hash: 76FrL/HDDuxO7pj6zl8q4Zgif4vNwjOmJyQV7tycvQk=)
2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: T9uYobGMCTQxPmHyC5tY0WT5cApVeCOyIFA5Dh6bUz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:18:40:aa:eb:a4:1a:76:a9:8a:bd:50:7e:8f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Validity
Not Before: Aug 23 10:00:12 2025 GMT
Not After : Aug 24 10:00:12 2025 GMT
Subject: CN=a070c3edef861e263961e1ecd325e79301aa74d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:11:f7:65:9f:23:53:d3:db:a2:1e:b7:53:
9f:8f:d0:88:74:52:60:4f:0f:1a:71:b2:d6:1a:ae:
0c:3d:7e:47:3a:b0:b1:5a:b5:cb:dc:c1:75:68:d4:
04:21:a9:ac:1a:ea:ad:36:38:95:65:33:f8:6d:36:
72:d5:33:21:30:ca:63:08:e3:44:eb:bf:72:ac:aa:
c3:61:f6:80:09:c9:cd:5d:2b:a7:e6:84:1d:f3:41:
3b:78:17:45:81:9c:49:ae:f2:86:4a:66:89:d2:58:
95:fe:53:7c:f9:ea:d2:6d:79:1a:3d:c6:46:bf:d6:
c0:88:19:5c:48:2c:2d:69:9f:d4:26:a9:21:8d:06:
6c:01:6a:68:b2:dc:aa:ef:49:98:b8:1e:8e:e9:b3:
c0:8e:20:56:29:a9:3b:72:d0:41:e2:36:39:90:be:
1b:4f:ef:5a:c8:86:c6:8c:65:66:96:3e:8f:b9:c3:
43:77:06:ea:c4:c4:b7:d9:af:0d:48:94:7e:72:ad:
e2:1d:52:13:56:8a:89:c9:d0:0d:cd:f8:19:d2:78:
f5:bc:60:84:7e:89:2a:11:40:b1:4d:14:c0:a9:64:
62:90:a2:2a:9e:7c:ad:a5:b8:f7:e2:ab:22:c1:cc:
13:5e:db:be:7a:29:df:c8:d2:37:33:f7:fd:bd:b2:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:70:C3:ED:EF:86:1E:26:39:61:E1:EC:D3:25:E7:93:01:AA:74:D7
X509v3 Authority Key Identifier:
keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7a:cd:41:6b:89:9f:31:9e:89:d3:b0:8e:14:7a:c9:c8:ae:
8d:f6:31:e7:81:55:d1:a6:3d:96:1b:c7:a8:02:30:77:e6:c0:
c1:2b:b9:3c:aa:25:09:a8:66:2a:28:be:db:f3:99:ea:78:ff:
f5:68:9f:ce:c7:37:19:16:ff:5e:c9:87:66:2f:4d:99:b3:87:
69:07:8c:f0:78:4a:0a:88:29:45:36:6d:01:c0:26:82:34:07:
5d:8f:31:76:1c:f2:c5:55:ac:4e:4a:e3:51:41:4b:c5:a2:54:
bd:25:58:e4:59:14:40:34:4a:a5:72:c7:aa:21:77:8f:8c:7e:
8f:b8:11:36:8f:70:ce:69:68:99:ea:9a:57:76:aa:9b:f3:ee:
38:bd:b8:85:e5:87:9c:28:66:51:24:ef:0f:a3:2f:ad:ac:38:
47:18:54:18:d1:e6:4b:fa:dd:38:5c:e2:18:aa:8d:38:75:12:
4c:8a:07:2d:94:6b:63:c0:64:75:9e:a8:0d:43:c9:7a:ae:4a:
59:b2:a0:ce:61:24:99:92:d3:72:3d:ce:8d:7a:13:83:f2:86:
12:6f:3a:e2:d5:67:fa:2e:c9:68:9f:62:3e:2e:e4:37:88:60:
25:33:0b:e2:3c:82:87:65:1a:44:57:ce:69:e1:fa:e1:48:22:
7b:8c:23:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:03:41 2025 by rpki-client