Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: IgYYJU0RO5Q8ViDkcPROmjaTIRuQFTutq7WO/o9YESA=
Subject key identifier: 5B:E5:7C:B7:39:D8:DC:65:48:17:81:B6:10:80:5B:14:90:38:AD:B4
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 019849D30EE56BA074190BFE755E6EA6FCC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 160B
Signing time: Sun 27 Jul 2025 03:00:25 +0000
Manifest this update: Sun 27 Jul 2025 03:00:25 +0000
Manifest next update: Mon 28 Jul 2025 03:00:25 +0000
Files and hashes: 1: Nt8U8Z3kL0IxgChONZlb9wxsuew.roa (hash: q3bR4XOi7x1iBnBhyEpixBllLru5p/ZAb3mokEcvE1o=)
2: Zzn898alwJ-ZQ7BYnOoh1f9BcU0.roa (hash: ZfOULEhZA5KSiQObf0XfCp/rLlK21I+b+ae43OnFfqk=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: P5GJlOdLjQ8oX3UCgGZliMS+dVPbMlHpf8fh00ZGE4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:0e:e5:6b:a0:74:19:0b:fe:75:5e:6e:a6:fc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Jul 27 03:00:25 2025 GMT
Not After : Jul 28 03:00:25 2025 GMT
Subject: CN=5be57cb739d8dc65481781b610805b149038adb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:af:38:73:00:0b:50:ce:5f:3d:04:0d:4a:
10:57:4b:53:0e:b0:06:94:55:41:11:09:8e:9b:79:
22:61:2f:fa:30:ef:4d:4d:dc:77:cd:41:01:22:57:
dc:bb:a0:30:16:5c:da:3a:da:39:e1:e8:03:ab:05:
44:a1:80:01:e6:08:99:69:e7:98:3d:ae:97:ad:cc:
73:aa:91:25:b8:08:8c:a6:4b:58:9b:c1:69:51:58:
e8:cd:0c:55:ad:ff:a2:21:0a:cd:25:50:85:9a:ef:
18:3c:1c:3f:03:27:8c:98:28:fc:01:b9:12:17:46:
8f:cd:9d:c4:f6:fe:7f:fc:91:53:f8:15:21:77:4f:
61:2c:86:ec:16:e9:a1:43:25:77:4e:fe:f8:52:4b:
31:76:dd:a3:36:3a:e3:f2:8f:17:6c:f5:66:60:03:
f6:5d:d3:db:08:03:0b:50:4c:2e:70:65:55:d9:15:
b4:9e:df:92:a1:84:22:6d:e7:03:b7:20:e3:7a:83:
71:3e:23:b5:71:84:25:40:79:63:56:9a:b2:48:c3:
73:fc:5f:aa:f9:fd:5d:ce:5e:84:22:6b:8a:db:6c:
0d:91:c3:b4:79:a5:4d:ae:60:74:ef:de:01:ec:be:
4f:35:56:03:f4:10:6d:19:c3:a5:ab:8d:fa:bb:88:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E5:7C:B7:39:D8:DC:65:48:17:81:B6:10:80:5B:14:90:38:AD:B4
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bc:f5:9d:ff:7d:d8:43:f0:7a:be:e9:0f:43:9c:1b:47:b2:
5f:46:0c:d2:13:8a:d4:40:9e:0d:70:4b:a8:2f:0f:28:6b:41:
ea:92:27:f2:7e:de:5d:e4:c5:d3:87:6b:2a:ea:53:b3:39:b7:
76:74:96:80:9f:6b:1c:ce:6d:d6:70:a7:e2:7c:c0:8c:93:ed:
50:be:d7:0c:30:47:3a:0b:e6:a8:82:4d:74:7a:41:69:5f:1b:
19:40:33:a4:4a:8f:f7:03:6a:8c:62:62:56:22:0d:30:7b:71:
33:35:78:f9:ff:b5:6b:79:6e:81:05:ff:6c:88:61:ca:07:a8:
c6:18:33:ad:51:a1:f2:87:04:cd:14:7d:e9:4b:67:bc:d3:62:
36:94:ce:5d:e8:0a:35:28:7a:77:63:0a:04:5d:a9:22:c8:c1:
74:e8:4f:f6:fe:20:27:52:fd:cc:19:18:00:59:ba:ab:13:45:
14:a0:27:77:a3:d5:d2:d1:33:d5:22:3a:fe:c6:ef:d8:b8:67:
c9:37:ad:ab:49:a7:0c:8d:55:95:04:a6:11:4e:24:2e:3b:3e:
2f:8f:4e:96:58:99:12:f1:03:6b:eb:f5:1a:43:c6:20:87:97:
8b:24:66:90:4a:f6:e9:86:7a:db:92:0c:99:1d:0d:5d:92:c2:
00:72:24:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:59 2025 by rpki-client