
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: n4pYInNEdbgiXQVinWarRrlhZevBuI97Doyq8qT6k1M=
Subject key identifier: 5C:A4:5C:45:BC:A8:76:CB:11:D5:63:A9:81:74:A1:48:EC:BC:A8:26
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 0199FC21C948DC86A6DA7F2160A05B9974BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:36 +0000
Manifest this update: Sun 19 Oct 2025 11:01:36 +0000
Manifest next update: Mon 20 Oct 2025 11:01:36 +0000
Files and hashes: 1: Bt61Duabnrfk_tvUxqrlxq35pFs.roa (hash: 3mTb4E/hZOVdEv0TkUnMgMT0a7EJ9fK0ZGjFdNjhe4g=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: 8KpP/5/0DzKo1/4MHDRKfoKiZMFOGnLn8EN+b5FDHUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c9:48:dc:86:a6:da:7f:21:60:a0:5b:99:74:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Oct 19 11:01:36 2025 GMT
Not After : Oct 20 11:01:36 2025 GMT
Subject: CN=5ca45c45bca876cb11d563a98174a148ecbca826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:43:34:f2:bf:d3:75:f6:20:f1:66:9b:26:4b:
db:0e:3c:ab:e9:43:88:fc:45:6f:cb:28:10:fa:dd:
df:5a:3e:17:a7:fb:26:87:d7:7b:0e:0d:84:28:78:
a9:c7:7a:5a:ad:7b:eb:2e:fd:e1:2a:00:19:2a:7a:
d6:5d:af:96:8b:b2:1b:1e:a2:4c:0c:fb:be:42:df:
55:0d:d2:5a:fe:70:4d:1d:4d:95:04:88:4a:f8:be:
40:ff:c5:1b:e9:dc:f4:9c:66:94:b7:a7:7e:98:98:
17:8c:b3:74:4c:a3:d6:4c:d3:d1:0a:5e:52:f8:8d:
63:40:c9:35:66:24:54:83:95:e1:8c:fa:b1:6f:07:
a1:8a:ae:d8:eb:3b:59:6c:01:03:e4:45:65:f5:2f:
6a:73:b2:82:de:23:37:19:36:f7:15:20:4f:95:4c:
b4:03:6f:15:5c:aa:b1:6f:33:5e:0e:b9:3f:40:cd:
82:df:9f:1a:e7:40:93:89:ed:57:ef:1c:a2:70:fb:
42:e6:d8:a9:76:ec:53:09:b3:7b:c4:d7:6b:e7:dc:
e3:4d:3e:87:26:1c:56:a8:12:c6:c2:e0:6f:c3:81:
cf:aa:50:cc:d6:94:9c:a0:00:04:80:83:63:93:ea:
ef:60:fb:dd:4c:b5:fd:6c:05:1e:30:4d:52:cb:fa:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A4:5C:45:BC:A8:76:CB:11:D5:63:A9:81:74:A1:48:EC:BC:A8:26
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:14:05:4e:9a:fe:c9:82:78:fd:ed:c2:de:78:a2:92:68:34:
1f:29:f9:dc:99:86:1e:91:ba:e9:d0:a3:96:ec:25:13:8a:31:
52:7d:ca:d0:11:63:bb:fa:4b:fe:1a:29:d7:32:4a:9b:e3:4d:
1f:82:82:2e:57:2c:66:b1:fc:55:35:18:a9:02:7c:33:e6:18:
d4:87:0d:7a:e1:4f:26:07:0b:e4:02:af:b1:86:f8:91:81:a4:
71:1a:07:75:ef:f2:bd:72:af:15:71:0f:94:af:e8:8b:ae:b9:
bf:d4:37:c6:a0:74:7d:f5:86:f4:d8:8f:2b:8b:e9:4b:d8:27:
fb:8a:39:a5:4b:ab:05:7b:b1:17:8f:04:a5:77:b4:5c:30:ac:
d2:ef:ef:6a:f2:df:f7:22:c3:56:29:90:46:bd:6b:78:a5:7f:
0e:8c:8d:e1:a4:8f:d5:b4:2b:6c:af:16:4c:1e:ab:b3:bd:8d:
d6:07:3a:c1:c2:f9:ee:b6:ca:72:e2:79:4d:c6:42:96:37:55:
cf:fe:a5:60:2e:8f:aa:af:ea:20:35:4a:f7:60:48:47:74:8a:
3c:69:60:74:4b:94:7c:bd:c0:42:95:71:35:d7:db:78:d7:ed:
cf:39:62:1c:5d:0c:30:dc:0d:8a:3c:e2:92:18:4e:40:2b:e0:
5c:fa:b7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:00 2025 by rpki-client