Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier: GnFxbcYPgAKOQmnwXGShwenj12PVGSttVqrNFDNQFgU=
Subject key identifier: 7C:F5:18:FE:A5:5E:37:15:9E:BC:C4:3E:63:83:07:FF:B2:12:7A:BA
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 01984AE5B32AEDB9F918B1477C0DE159BF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number: 0F03
Signing time: Sun 27 Jul 2025 08:00:24 +0000
Manifest this update: Sun 27 Jul 2025 08:00:24 +0000
Manifest next update: Mon 28 Jul 2025 08:00:24 +0000
Files and hashes: 1: ZfJgayjX3ZyY4keMrrK5ie3SiNQ.roa (hash: I356ijiy3DFzBI7A3YL8pZIG42TC++pOhoxAzv45n5Q=)
2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: gBJTxeYBtKfJbSoFFbbATl9wh1mw3fWto33avvqx2sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:b3:2a:ed:b9:f9:18:b1:47:7c:0d:e1:59:bf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: Jul 27 08:00:24 2025 GMT
Not After : Jul 28 08:00:24 2025 GMT
Subject: CN=7cf518fea55e37159ebcc43e638307ffb2127aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:0c:70:73:70:d0:dc:59:8b:85:18:5b:91:
cd:22:f6:49:ba:24:35:f4:80:7e:4a:85:02:85:61:
9e:89:6f:e5:bb:da:34:03:2e:02:41:dd:18:b8:2b:
48:da:1f:d9:c8:fd:16:d0:81:a7:b2:bc:13:62:48:
ed:14:9f:b7:9f:55:c6:db:4e:44:fa:06:82:b9:f9:
ad:e3:75:56:76:45:88:0f:64:6a:68:da:60:af:b3:
99:93:4e:19:c1:a2:00:0b:f6:ee:31:e1:fa:5f:40:
75:9c:7d:0f:d4:8a:75:49:b5:4e:b5:d6:36:94:62:
d9:05:b9:e5:7f:4f:cf:e4:d8:5f:ff:61:a1:51:69:
13:77:70:f6:00:3b:60:eb:0d:b7:95:31:81:4b:27:
8e:9a:1e:d7:ca:68:6f:8c:92:e8:29:1f:13:91:6c:
fb:b8:d2:a7:92:e5:01:4d:9f:11:13:ea:bd:d8:ba:
c0:5d:e7:df:ea:51:68:2c:41:ef:82:e2:13:77:2b:
12:3c:aa:c2:c1:34:5e:6c:8e:a8:f1:a5:36:39:95:
47:60:bc:80:e5:0f:20:08:05:28:e3:58:7f:9f:cb:
e7:2c:d9:3f:06:0c:95:b4:d5:68:64:b2:10:b0:59:
06:c0:f7:c7:1d:30:16:d0:44:13:bc:b5:79:b8:0d:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F5:18:FE:A5:5E:37:15:9E:BC:C4:3E:63:83:07:FF:B2:12:7A:BA
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ee:0b:2f:c8:82:9f:7d:d6:9a:8a:e4:15:77:1f:cb:d0:25:
89:93:7d:23:09:6d:88:ee:cd:c4:7e:e8:92:de:9e:a5:23:cc:
86:01:f1:87:fc:99:0c:c9:ca:51:f4:0d:15:67:c3:91:56:2d:
c1:48:9b:42:d9:28:ff:a2:b2:e8:58:35:36:02:c6:b1:d9:51:
99:8f:53:a7:aa:1e:45:55:ee:5e:57:64:40:6b:7c:91:c0:b0:
4f:ba:6f:81:52:49:4a:b5:22:50:ee:8a:38:8d:f8:7c:34:6b:
62:8d:a3:00:f3:6d:d0:7a:c7:b1:eb:10:a1:4c:32:55:b3:f7:
54:ea:44:23:93:d4:3a:90:5b:bd:1c:af:3d:e6:ba:7c:4a:a2:
e3:ed:f6:88:54:b1:6b:52:da:eb:b0:46:b5:2c:f1:d8:0b:09:
2d:72:a1:ea:23:04:a8:d0:b7:30:40:de:8f:27:9e:88:a0:f7:
c7:26:d8:3a:94:26:ac:09:25:11:c0:4c:78:a4:7a:93:a3:13:
e8:10:1c:56:43:37:e6:31:d1:91:31:bf:84:76:de:33:2f:d7:
70:2d:bf:9e:c0:1f:e9:e7:52:ad:56:8a:5a:57:88:96:b8:73:
cd:78:cb:4f:ac:d3:f0:f4:52:3d:cf:17:61:c0:59:79:43:29:
41:13:c7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:16:57 2025 by rpki-client