Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier: lDvX4kltIfmvQs3EdQ6G+S3pLuzSJyRnEXVWzQYEKmY=
Subject key identifier: 9D:F9:1F:7B:DB:F1:84:E0:C6:C4:1F:EA:A3:3F:6B:33:AF:F3:25:FF
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 01984B54D817B183081245E62B2FEB3F75A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 10:01:48 +0000
Manifest this update: Sun 27 Jul 2025 10:01:48 +0000
Manifest next update: Mon 28 Jul 2025 10:01:48 +0000
Files and hashes: 1: Hspj5PzkfsluTEqLIOwJGoQGOOc.roa (hash: gOBFADglYE5G0b4X+8zSKnsYq9fnevgLZFWvJSsuL9M=)
2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: hDTfxWZLuIC8o50q+New6CdTb/xFhJW1uwjtpB8sKx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:d8:17:b1:83:08:12:45:e6:2b:2f:eb:3f:75:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Jul 27 10:01:48 2025 GMT
Not After : Jul 28 10:01:48 2025 GMT
Subject: CN=9df91f7bdbf184e0c6c41feaa33f6b33aff325ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8f:2b:2f:4b:65:c6:23:25:2f:6b:4e:ee:3d:
5d:29:ad:68:6c:45:cb:dc:eb:1b:41:54:0c:20:b5:
ff:56:f0:68:f3:c9:7d:0d:7a:76:74:9d:ba:d4:5f:
41:c7:e2:c3:10:06:bf:ba:b6:e8:b1:b0:f4:eb:cc:
1f:dd:11:40:17:7a:bd:d4:b3:d0:95:d1:d9:7f:3a:
a8:2e:ee:e8:a4:a1:c8:9a:97:60:63:e1:84:78:a4:
b6:0d:5f:5b:ea:87:05:31:8f:07:ac:cb:10:05:cb:
98:14:38:7f:bb:9c:ad:ea:c7:a9:ad:af:39:9c:8a:
4d:57:22:ea:ae:ce:b8:d0:27:ab:32:90:40:2c:b6:
35:b5:09:d5:0d:d6:dd:ce:ad:61:b1:4d:6c:d4:45:
4d:bd:86:42:7e:20:bb:a9:08:c9:3c:5f:c6:77:7a:
08:83:65:54:b1:82:ac:e8:bb:06:e0:6a:ba:42:eb:
7e:a6:a7:ad:54:01:8e:78:bc:71:d4:20:34:5d:2b:
cf:38:73:f7:8e:e4:a4:99:19:06:bf:7b:b0:b0:92:
e9:34:0b:24:1f:72:5d:d6:a2:80:65:15:0e:b6:fc:
49:ba:81:8b:ff:5e:67:d3:08:95:df:56:d2:5d:80:
b7:78:e7:7d:a8:86:b2:c8:b8:4d:1f:5f:bd:db:05:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F9:1F:7B:DB:F1:84:E0:C6:C4:1F:EA:A3:3F:6B:33:AF:F3:25:FF
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:29:06:7b:61:46:50:a5:e5:ba:20:b3:65:d2:ab:1e:22:63:
e9:84:74:19:5e:7b:c6:e1:b1:37:0c:7f:dd:8f:2c:89:90:75:
83:c9:a1:33:3e:61:f1:82:7a:1d:43:60:5d:3c:51:60:2a:6c:
dc:7c:79:45:59:63:52:e9:31:39:82:c0:97:a5:0d:0a:29:37:
e4:e1:ad:c1:bc:8d:69:61:0e:1b:51:d3:60:12:73:91:bd:cd:
3e:1a:3d:c7:da:f5:87:62:a0:09:8c:98:cc:c9:5e:8d:22:75:
30:cc:2c:b7:f6:93:2c:88:9e:94:4c:dc:ea:1b:b3:2f:4d:11:
e5:b2:5c:31:c4:8b:23:75:b0:78:ad:b3:d8:23:21:d1:9b:3a:
c6:40:e0:f0:29:d2:5a:52:61:f5:40:1a:1e:97:02:c2:22:76:
ec:55:d3:bb:1c:51:ce:81:06:a8:b3:f9:61:e6:b7:e1:d7:b3:
98:cf:33:7f:2e:ec:3a:15:68:77:d0:63:92:c0:67:1b:24:01:
1c:8d:04:62:b6:7c:fa:dd:f5:a4:49:89:02:28:8c:6b:4b:2f:
51:e0:4d:9e:dd:f1:fb:68:b7:08:e5:b2:4c:05:7f:35:b6:aa:
07:3d:96:44:19:72:8f:a5:c4:5b:5f:f9:3d:fa:96:62:e7:f3:
e0:dd:88:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:08:50 2025 by rpki-client