Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
File: x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json)
Hash identifier: KI48dQobD7WPx8Tgau9nCq/zRyshkxU2Hj8tc120hqY=
Subject key identifier: A6:B4:B0:61:10:79:5B:F0:36:61:C9:68:60:77:1F:E5:5D:0E:57:F8
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 019A71B948453D7882004D934A9AFBDD9DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
Manifest number: 0BC5
Signing time: Tue 11 Nov 2025 07:02:39 +0000
Manifest this update: Tue 11 Nov 2025 07:02:39 +0000
Manifest next update: Wed 12 Nov 2025 07:02:39 +0000
Files and hashes: 1: 2HWaYe8To0qjjtVdcy7I7ttFbbg.roa (hash: va5+QSQ1VvFYIrECNgHjVJbI88Ftr5DD+GPYmuN05H8=)
2: 8RHKnf43EnDTyj22kIIfanQSEQc.roa (hash: HbgpO2hUs5v1oFq30hojEK1YQFHOK9Zr5sDwHkBpSCg=)
3: OHUMAhwuz8j9ycFP0uC93_9dMsI.roa (hash: K0wUqFGby+8hOwpjxyeCuygnkldFbJEc1krNUlngfaA=)
4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: zW/gsL34yk+4IOoMdG4mkZSNIpIZcF597zeu49XDGPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:48:45:3d:78:82:00:4d:93:4a:9a:fb:dd:9d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Nov 11 07:02:39 2025 GMT
Not After : Nov 12 07:02:39 2025 GMT
Subject: CN=a6b4b06110795bf03661c96860771fe55d0e57f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:66:8a:2b:c7:5f:80:b6:55:7a:f3:71:58:b2:
00:8c:51:ae:76:1c:f2:e2:7d:a8:f3:50:04:d3:27:
1f:52:05:0d:3d:42:25:80:56:a3:1c:61:1e:f5:33:
52:38:fb:04:4f:b6:63:3f:79:18:44:13:8b:48:d8:
a0:c7:65:40:80:b4:27:e9:d6:cc:0e:5d:14:52:51:
eb:90:e3:66:6c:1e:15:da:93:da:b2:ae:02:41:2d:
6f:01:38:c0:20:50:15:4f:de:4a:1f:48:c2:63:e5:
5d:71:8b:42:20:95:d5:69:ab:7b:bf:5b:91:fa:42:
dd:1f:34:46:9b:6e:b7:ca:81:c3:58:fb:a3:c7:43:
a9:fe:d1:92:fc:e7:95:fe:5b:93:df:ed:16:73:33:
4f:45:e7:40:d8:bb:10:12:15:b9:d2:a5:81:a5:db:
d9:c0:64:a4:3b:2f:9a:e0:15:37:0f:cb:8c:b1:53:
62:a4:ee:f0:9e:76:28:4d:d6:1b:06:f6:23:57:88:
a5:de:8b:35:d7:ae:69:76:ca:de:59:26:3f:72:7b:
a5:8e:00:c8:46:05:86:20:7b:4f:b4:cf:59:03:80:
ff:8b:a5:26:45:82:29:ae:aa:bc:7d:68:2b:ed:b7:
df:5c:99:f7:c9:da:73:3f:97:76:50:c0:39:e5:77:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B4:B0:61:10:79:5B:F0:36:61:C9:68:60:77:1F:E5:5D:0E:57:F8
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d9:bd:4b:85:ef:1e:98:9d:e1:b4:5b:e9:8f:f8:94:0e:d1:
6c:87:0f:29:f9:17:8a:1c:cb:82:9c:0a:00:51:16:15:5c:c0:
e0:65:49:42:11:af:ac:04:2c:63:f1:0e:ca:5d:24:9e:d3:27:
7c:bf:a8:41:b0:7c:f8:a9:51:60:c1:29:bd:55:26:34:32:b5:
f6:50:54:53:ff:d0:09:c1:bf:86:81:da:66:1b:a8:f1:13:97:
0e:e2:8f:70:2c:fd:93:1a:3e:66:b7:9b:18:cf:de:80:45:66:
db:d6:89:14:f4:d5:e2:17:2f:dd:04:f8:7a:b8:26:81:4e:22:
83:54:19:15:0c:66:75:a6:97:41:b6:c6:78:a5:b4:b8:e7:c7:
7f:d7:64:96:75:b3:5a:35:a3:48:b5:96:0f:56:67:0c:12:fa:
b1:42:ec:dd:15:99:a7:02:ed:a1:1b:d6:54:3b:d1:07:96:b9:
37:67:3f:1c:1f:1c:33:49:f7:a6:4e:b5:a0:a6:07:cc:0f:e9:
28:96:6c:1a:80:e0:1a:36:53:0a:0d:37:cb:9c:c4:e8:fe:d3:
f9:da:cb:f7:b9:07:b6:18:64:16:39:ee:c4:7b:82:5e:25:69:
19:28:db:07:be:95:a5:1a:81:77:ed:63:1a:e5:40:f9:01:48:
9c:40:25:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuUhFPXiCAE2TSpr73Z3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2ZlMDA1ZDdlNThlYzAzM2NhOWFiYTg3ZTA2MDYwMjE1
MzM2MTcwHhcNMjUxMTExMDcwMjM5WhcNMjUxMTEyMDcwMjM5WjAzMTEwLwYDVQQD
EyhhNmI0YjA2MTEwNzk1YmYwMzY2MWM5Njg2MDc3MWZlNTVkMGU1N2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2aKK8dfgLZVevNxWLIAjFGudhzy
4n2o81AE0ycfUgUNPUIlgFajHGEe9TNSOPsET7ZjP3kYRBOLSNigx2VAgLQn6dbM
Dl0UUlHrkONmbB4V2pPasq4CQS1vATjAIFAVT95KH0jCY+VdcYtCIJXVaat7v1uR
+kLdHzRGm263yoHDWPujx0Op/tGS/OeV/luT3+0WczNPRedA2LsQEhW50qWBpdvZ
wGSkOy+a4BU3D8uMsVNipO7wnnYoTdYbBvYjV4il3os1165pdsreWSY/cnuljgDI
RgWGIHtPtM9ZA4D/i6UmRYIprqq8fWgr7bffXJn3ydpzP5d2UMA55XedCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKa0sGEQeVvwNmHJaGB3H+VdDlf4MB8GA1UdIwQY
MBaAFMd/4AXX5Y7AM8qauofgYGAhUzYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEt
MGVkMjRlYmM0ZWQ4LzEveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lMzJkZjgtM2ExZS00MmZjLWIzNTEtMGVkMjRlYmM0ZWQ4
LzEveDNfZ0JkZmxqc0F6eXBxNmgtQmdZQ0ZUTmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddm9S4Xv
Hpid4bRb6Y/4lA7RbIcPKfkXihzLgpwKAFEWFVzA4GVJQhGvrAQsY/EOyl0kntMn
fL+oQbB8+KlRYMEpvVUmNDK19lBUU//QCcG/hoHaZhuo8ROXDuKPcCz9kxo+Zreb
GM/egEVm29aJFPTV4hcv3QT4ergmgU4ig1QZFQxmdaaXQbbGeKW0uOfHf9dklnWz
WjWjSLWWD1ZnDBL6sULs3RWZpwLtoRvWVDvRB5a5N2c/HB8cM0n3pk61oKYHzA/p
KJZsGoDgGjZTCg03y5zE6P7T+drL97kHthhkFjnuxHuCXiVpGSjbB76VpRqBd+1j
GuVA+QFInEAlag==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:27 2025 by rpki-client