Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier: ggACB89E4mz7+VMS119XLPSWSz0Ylo+a2vQhJV/0Gbw=
Subject key identifier: 4D:7D:C6:95:29:76:0B:72:48:C7:51:A1:CF:20:71:BD:8F:E4:80:4B
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial: 0197B6A16764318A7C6E56692741C337E7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:00 +0000
Manifest this update: Sat 28 Jun 2025 13:02:00 +0000
Manifest next update: Sun 29 Jun 2025 13:02:00 +0000
Files and hashes: 1: iMH-2vRf9YeMGRgtztJPUn14aQA.roa (hash: 76FrL/HDDuxO7pj6zl8q4Zgif4vNwjOmJyQV7tycvQk=)
2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: YBQjfJcGV3nWZZIAMXtNMOG3JalDzpHHeQMGOlyrzfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:67:64:31:8a:7c:6e:56:69:27:41:c3:37:e7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Validity
Not Before: Jun 28 13:02:00 2025 GMT
Not After : Jun 29 13:02:00 2025 GMT
Subject: CN=4d7dc69529760b7248c751a1cf2071bd8fe4804b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:7b:a9:e9:32:68:d6:db:d0:69:cf:a9:b5:
f5:4b:7c:96:35:6f:d6:e1:d6:f1:95:f0:2f:df:9a:
29:ad:e1:17:36:ad:b6:0d:cb:ad:ad:f8:de:c6:56:
e0:99:34:30:bb:55:a7:37:89:89:e4:2d:7d:8a:1c:
c6:cd:93:04:7f:4b:6c:d7:a4:6e:e9:04:1a:cc:f3:
a4:99:30:ec:6e:58:63:d1:04:c7:ea:c5:62:77:a4:
e1:23:95:f0:52:dc:13:cb:e5:7f:bb:fb:e0:02:8b:
38:82:6e:e5:64:bf:75:60:e9:2d:df:35:66:00:0c:
09:1c:f0:ce:cc:31:74:59:04:ed:f1:a2:89:3b:6e:
bd:8b:5b:f7:36:9c:9b:b6:8e:6f:d5:34:e3:60:7a:
a7:51:55:5e:51:3a:41:b4:35:71:06:ae:2e:d1:ac:
33:00:20:43:e2:42:84:f9:f9:4b:16:98:aa:9a:4f:
f6:44:9d:9e:3b:af:b2:2a:39:74:8f:f5:f9:0f:fa:
8d:98:74:6a:76:13:7b:56:cc:f2:9b:04:ab:30:af:
3e:f5:2c:e4:3d:26:2d:bc:b7:e8:ca:0a:21:02:bd:
b6:00:51:6e:81:41:66:17:6f:73:72:4a:87:7c:a7:
44:43:52:63:b0:76:f6:73:a7:ba:9f:fa:61:57:d2:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7D:C6:95:29:76:0B:72:48:C7:51:A1:CF:20:71:BD:8F:E4:80:4B
X509v3 Authority Key Identifier:
keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f9:00:81:b5:97:b1:ba:40:af:85:4d:62:1f:8f:13:db:41:
2b:59:9c:81:7e:d7:bd:e7:73:61:68:b1:bc:61:d9:9e:9b:bd:
27:aa:5a:2c:c3:d0:00:cc:38:77:13:6b:c7:9e:01:d5:d4:de:
9b:63:20:6b:4b:22:5a:4d:06:46:e0:ec:54:6c:d0:73:80:b3:
40:70:d0:56:2e:52:77:04:af:98:98:3b:c0:0e:f6:f0:aa:6e:
77:14:07:6b:f2:9d:7f:26:03:16:eb:c0:29:8c:77:7a:d4:5e:
46:5c:9c:a9:5c:e0:84:06:68:43:e8:6d:66:a3:dd:b5:85:07:
54:d0:2a:3f:10:09:14:0a:92:5f:27:04:db:3f:b4:b0:03:4a:
af:ca:68:2b:5c:b9:b2:7c:57:26:ae:bd:84:e8:4a:b1:18:be:
ca:6b:3a:5f:0b:d7:2b:9f:67:2e:ef:30:65:00:8b:75:da:23:
44:59:27:79:8f:5e:17:37:dc:a9:64:92:a7:8d:fa:d5:71:a9:
ed:8a:b6:03:d1:d9:8f:8c:32:f6:be:b8:6a:33:35:7a:21:34:
3c:20:90:ed:f1:de:ff:80:41:1c:ef:71:69:10:67:7d:d6:1b:
25:73:16:92:a5:a7:d9:29:55:de:de:d5:43:f0:5a:b3:fa:b2:
28:1a:55:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:27:01 2025 by rpki-client