Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier: P5OR2DrLiE3oDCgBJ5XlSNfZmlEtYnWruFz6wOtBeGs=
Subject key identifier: 89:A4:4A:5F:66:BC:33:6D:2B:B6:7A:77:D0:4A:A6:0C:AB:AE:D5:59
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 01993A5DA534B2903E6C61D2F439082D73BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 20:00:39 +0000
Manifest this update: Thu 11 Sep 2025 20:00:39 +0000
Manifest next update: Fri 12 Sep 2025 20:00:39 +0000
Files and hashes: 1: G5zSLsnIB1Tf_3dQqRjF_q9OU44.roa (hash: 2jnkEsy8dLS8k5/gnwKVBaZUL+prmqB8W/32sROipKI=)
2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: XAiTWiag7QtOHNGxzyXwnTbxGNVXWV/Uen7f9LdVvcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:5d:a5:34:b2:90:3e:6c:61:d2:f4:39:08:2d:73:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: Sep 11 20:00:39 2025 GMT
Not After : Sep 12 20:00:39 2025 GMT
Subject: CN=89a44a5f66bc336d2bb67a77d04aa60cabaed559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:a6:26:0d:c8:d4:88:fa:7a:fc:a8:46:f3:
eb:95:a0:0a:78:25:07:b0:26:f0:70:f8:db:e2:92:
30:24:05:83:2b:2a:75:d2:84:f2:bb:f6:2f:cd:ff:
93:3c:b5:de:c2:fb:e5:94:91:e5:80:48:0b:ea:20:
a7:84:9c:82:e5:10:c6:23:6b:de:0a:52:c8:f9:2f:
cb:ce:a5:5e:bf:60:1d:57:e0:ec:9d:0d:94:97:1d:
81:0d:a3:49:32:10:af:52:04:6c:96:89:a5:2d:65:
2a:c7:0c:c4:f7:23:8e:08:e2:bd:75:43:c9:a8:cb:
d8:23:53:07:33:4b:23:8f:e4:86:8b:c4:6a:73:16:
57:14:8a:66:d8:2e:59:f4:58:78:a3:fa:6c:ce:3f:
a9:5e:04:cc:71:c9:f6:ab:e8:ab:6d:1c:41:9b:e3:
80:a4:5f:b7:e9:72:57:db:ce:65:ec:5e:2d:9a:e2:
23:c0:88:14:c3:a8:76:14:a5:de:ae:9f:31:7f:0d:
77:76:9b:af:df:80:ff:4e:f8:cb:3a:9b:4b:b9:33:
2b:b1:79:40:f8:9b:00:f8:4f:c2:bd:87:b8:c4:c6:
7e:92:40:24:05:69:43:eb:16:1e:20:da:df:ce:2e:
97:a2:ec:b8:69:5d:98:5a:c0:5d:b2:d0:0b:32:f0:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A4:4A:5F:66:BC:33:6D:2B:B6:7A:77:D0:4A:A6:0C:AB:AE:D5:59
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bc:3b:2f:01:be:e9:7f:26:9c:f8:23:85:71:d3:cc:33:2e:
38:36:0d:de:f5:76:d4:85:07:c1:79:01:73:b0:2a:1e:b9:56:
4f:c4:26:da:9c:b5:09:72:18:4c:e8:7f:84:88:e5:d0:b0:ca:
94:80:65:14:06:2c:cd:f8:f5:96:e7:2d:86:28:83:17:35:5f:
81:e9:1a:cb:19:8c:90:d6:d9:19:26:c2:7f:54:8f:51:af:e0:
dd:19:99:ce:cd:5e:c0:6f:5d:31:7a:0d:1d:7a:ed:20:4c:a2:
9b:ca:f7:f4:f8:f2:09:58:3b:ec:33:96:85:46:9e:88:29:d0:
26:72:93:19:3f:40:b6:f8:c4:eb:73:35:25:69:00:e4:8b:42:
2c:a2:ca:36:93:c8:be:45:1b:01:d3:20:6d:f7:1c:1a:5f:1a:
2e:90:20:8e:6b:ca:24:4e:26:64:bd:cb:39:fa:fb:01:68:09:
21:64:e9:53:7b:7a:ad:54:55:95:b4:1e:a5:09:9a:64:af:7a:
2c:1e:3b:7b:1c:bc:40:79:f1:82:34:cd:fa:93:8e:eb:b5:30:
37:d6:79:3e:db:22:c4:4a:ba:cb:c0:4c:df:ea:36:06:81:33:
dd:57:5b:d0:b8:e9:e2:b1:37:64:d3:00:fe:e0:97:7a:14:9d:
65:62:8a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 23:32:00 2025 by rpki-client