Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier: qJhrsMTJBYxyxaqpZ3e/7Bl+xvJq3NPPSmKo4/7XNtw=
Subject key identifier: EA:45:0B:79:24:6A:3C:15:1D:6E:54:6B:42:DB:E2:8E:0E:F3:AC:3B
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 019A2E2080DD9D9C191CD5B94B03F34B4346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number: 16FD
Signing time: Wed 29 Oct 2025 04:01:13 +0000
Manifest this update: Wed 29 Oct 2025 04:01:13 +0000
Manifest next update: Thu 30 Oct 2025 04:01:13 +0000
Files and hashes: 1: Hspj5PzkfsluTEqLIOwJGoQGOOc.roa (hash: gOBFADglYE5G0b4X+8zSKnsYq9fnevgLZFWvJSsuL9M=)
2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: kE1CFEuNjXNwF2TJy66LPJ2az8NQeFbJcrjNu/dSod4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:80:dd:9d:9c:19:1c:d5:b9:4b:03:f3:4b:43:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Oct 29 04:01:13 2025 GMT
Not After : Oct 30 04:01:13 2025 GMT
Subject: CN=ea450b79246a3c151d6e546b42dbe28e0ef3ac3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:4a:18:6e:dd:ff:0c:a8:ca:d0:b9:f9:21:
c5:22:97:5d:e8:6d:60:50:1c:3c:1e:4e:fe:25:24:
1d:1a:64:e9:5e:66:9b:59:81:b0:7b:22:a2:86:28:
29:81:d9:eb:f2:2f:1e:a5:75:12:91:81:74:83:b2:
6d:10:ea:83:a3:21:f5:08:2d:b9:b3:4a:39:c7:6b:
e6:aa:92:0d:51:2b:77:91:0d:c1:2c:a5:a5:65:b4:
ab:eb:07:f6:6e:aa:10:a4:8f:43:d1:2b:62:ab:bd:
16:83:d0:40:18:26:ef:6b:ce:1b:cd:ff:06:d3:a7:
5e:5a:4e:39:9e:57:c9:d4:c1:0a:50:98:db:15:58:
84:c6:df:fe:57:57:ea:06:dd:0b:b4:b5:2a:09:58:
6a:6e:1e:94:8e:be:8b:26:f4:ac:e0:91:78:75:d8:
b6:7f:f2:ac:7a:05:c3:1d:64:a1:04:cc:1f:c8:a9:
04:45:04:31:37:d3:92:50:68:0e:ea:98:c1:95:27:
9b:90:62:d1:3f:0d:8e:cb:aa:e3:90:ad:9e:3d:ed:
d1:6a:f1:b8:8d:2b:95:79:63:de:af:5e:92:75:9d:
18:a2:6c:bd:a2:b1:59:4d:cc:60:1c:40:8c:65:8d:
f5:57:11:44:a4:d7:fc:35:f1:f3:e4:04:8d:13:cc:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:45:0B:79:24:6A:3C:15:1D:6E:54:6B:42:DB:E2:8E:0E:F3:AC:3B
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cc:ee:2e:1d:58:19:ef:b7:21:82:c6:28:c4:44:11:50:ca:
7d:37:25:b6:30:7e:16:3b:5a:df:1c:2a:30:b5:27:33:4b:49:
2f:04:87:15:42:46:a1:92:e8:cf:6a:39:23:94:09:45:73:dc:
be:72:31:7e:62:32:4f:59:13:79:25:53:55:2d:b3:ae:e5:42:
be:36:f0:f9:8d:6f:bc:89:dc:66:98:68:e0:2a:c0:b3:fb:7b:
9a:fe:29:09:06:aa:03:d0:5d:80:db:c5:c5:e9:a3:88:d7:4e:
64:bf:44:15:00:80:cf:c9:95:6c:85:ea:c3:59:65:df:13:d0:
2d:e8:e4:7b:08:7d:45:53:df:c1:9b:b6:f5:0c:26:18:02:92:
c1:15:a6:c3:fb:bf:c2:2b:36:f8:02:8e:b2:81:3d:ac:fa:fd:
75:f1:c7:ba:f9:9c:45:3f:9e:91:e7:9d:8f:6b:76:e7:75:58:
f1:71:b4:d9:52:2c:49:39:77:29:63:87:7e:6d:f5:01:90:d6:
ee:df:d7:eb:fd:c4:9e:56:29:26:d8:c7:0b:66:3a:3e:ea:11:
bc:bf:1c:b9:b5:49:07:0e:ec:5e:f3:38:0c:3d:d9:a3:57:d0:
ab:94:92:5b:46:12:69:a0:3e:d8:d7:39:16:90:d7:dd:a1:29:
e0:55:b9:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZouIIDdnZwZHNW5SwPzS0NGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzU0OTU1MTQwNWQ5OTQ4YzY2MmRmZTRkZTI0ZGUwNTVk
YWZmNWUwHhcNMjUxMDI5MDQwMTEzWhcNMjUxMDMwMDQwMTEzWjAzMTEwLwYDVQQD
EyhlYTQ1MGI3OTI0NmEzYzE1MWQ2ZTU0NmI0MmRiZTI4ZTBlZjNhYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3tKGG7d/wyoytC5+SHFIpdd6G1g
UBw8Hk7+JSQdGmTpXmabWYGweyKihigpgdnr8i8epXUSkYF0g7JtEOqDoyH1CC25
s0o5x2vmqpINUSt3kQ3BLKWlZbSr6wf2bqoQpI9D0Stiq70Wg9BAGCbva84bzf8G
06deWk45nlfJ1MEKUJjbFViExt/+V1fqBt0LtLUqCVhqbh6Ujr6LJvSs4JF4ddi2
f/KsegXDHWShBMwfyKkERQQxN9OSUGgO6pjBlSebkGLRPw2Oy6rjkK2ePe3RavG4
jSuVeWPer16SdZ0Yomy9orFZTcxgHECMZY31VxFEpNf8NfHz5ASNE8xQ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpFC3kkajwVHW5Ua0Lb4o4O86w7MB8GA1UdIwQY
MBaAFMd1SVUUBdmUjGYt/k3iTeBV2v9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEt
MWJmNzVmNzVmYTg3LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEtMWJmNzVmNzVmYTg3
LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEczuLh1Y
Ge+3IYLGKMREEVDKfTcltjB+Fjta3xwqMLUnM0tJLwSHFUJGoZLoz2o5I5QJRXPc
vnIxfmIyT1kTeSVTVS2zruVCvjbw+Y1vvIncZpho4CrAs/t7mv4pCQaqA9BdgNvF
xemjiNdOZL9EFQCAz8mVbIXqw1ll3xPQLejkewh9RVPfwZu29QwmGAKSwRWmw/u/
wis2+AKOsoE9rPr9dfHHuvmcRT+ekeedj2t253VY8XG02VIsSTl3KWOHfm31AZDW
7t/X6/3EnlYpJtjHC2Y6PuoRvL8cubVJBw7sXvM4DD3Zo1fQq5SSW0YSaaA+2Nc5
FpDX3aEp4FW5CA==
-----END CERTIFICATE-----
Generated at Wed Oct 29 11:51:06 2025 by rpki-client