Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: KdfLRhHw9fs7hjTeZ/H27FW2JmoMat9CAgdyL1i3Nzw=
Subject key identifier: 0E:F4:F2:B1:F6:CA:A7:86:5F:63:CC:06:48:12:A3:6E:FE:A7:89:DA
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 019A24E63CB81CB9788C275F9DB600516E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 0726
Signing time: Mon 27 Oct 2025 09:00:59 +0000
Manifest this update: Mon 27 Oct 2025 09:00:59 +0000
Manifest next update: Tue 28 Oct 2025 09:00:59 +0000
Files and hashes: 1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: WY1wQwVpHJ+MUwj3kp68Gffh9ahjr2Ql5fYKeW0FePE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:3c:b8:1c:b9:78:8c:27:5f:9d:b6:00:51:6e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Oct 27 09:00:59 2025 GMT
Not After : Oct 28 09:00:59 2025 GMT
Subject: CN=0ef4f2b1f6caa7865f63cc064812a36efea789da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:34:44:1b:a2:c4:5e:a3:e7:2d:3b:f0:52:
b4:f8:d0:c3:3a:f1:67:c0:cd:33:1c:b4:2f:d8:b5:
f3:7e:04:c5:23:89:01:d6:79:a7:88:2c:55:e4:66:
ea:ee:b3:8e:e3:7f:5b:cc:27:eb:63:16:05:33:77:
f3:26:9c:0a:7c:53:92:26:38:0f:30:23:b8:b1:f8:
3e:4e:ae:c7:80:8c:6d:66:f3:8c:43:55:02:a4:8f:
04:04:bd:7d:53:7b:88:8f:00:e8:a5:89:67:a3:5a:
98:ae:a1:45:ed:2e:86:46:11:59:e2:81:e0:eb:cc:
ca:7a:93:28:98:1b:0b:a5:70:be:bd:19:21:dc:85:
fe:83:d2:35:94:7e:37:60:4c:c7:a6:ab:79:a5:a0:
7f:9a:7e:3f:b3:76:fc:38:f1:84:d5:a5:ca:c3:4e:
d2:2d:35:c2:5c:33:59:14:eb:bc:56:64:85:66:e9:
1d:ad:a6:d0:45:f4:1f:6c:2a:b3:94:82:c4:fe:a9:
73:08:e2:8f:bf:8c:60:1b:d8:b4:89:ae:0b:d1:74:
a6:82:b0:14:02:f0:56:a3:17:d6:61:f3:03:d3:df:
71:dd:88:74:c4:2a:6f:33:05:d4:57:ae:d2:bf:dc:
b6:e3:ed:bb:fb:3f:6c:cc:42:4f:f6:50:7f:01:42:
dc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F4:F2:B1:F6:CA:A7:86:5F:63:CC:06:48:12:A3:6E:FE:A7:89:DA
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f5:85:7e:9c:7d:89:5e:7d:ff:eb:9a:2c:3e:5e:e4:6f:d4:
f8:78:3d:a2:6b:cf:48:59:23:9a:7e:91:db:b9:07:af:e0:44:
fa:9b:12:c1:6c:4b:b6:98:84:34:62:8a:e2:2a:5b:9a:50:6e:
47:c9:14:b7:6d:56:90:61:7d:5b:ae:31:45:f0:11:25:04:07:
e4:8a:f5:a4:fb:df:a2:1d:b5:dc:53:71:c6:41:1c:1c:d5:02:
10:6f:92:cd:0a:69:f1:5f:db:8b:ec:f2:70:ad:ca:c5:7b:b8:
db:e9:28:a0:86:d1:8b:0c:d9:ec:0a:78:0e:6b:91:12:30:b1:
3b:3b:21:31:f8:1f:30:9d:07:fb:1a:11:b8:27:d2:60:68:1c:
f2:38:d5:7b:70:cd:96:08:c4:30:ee:79:da:17:e0:20:e1:e8:
3f:4d:ac:e5:e7:79:f0:59:96:2c:ee:ba:14:55:6e:d1:9f:53:
3f:68:f0:a3:e5:ec:a8:81:db:bd:a5:19:87:7f:fd:03:8b:fb:
29:8c:54:ca:51:69:35:87:ec:ab:13:be:01:f3:82:29:07:a4:
3c:62:67:8c:c6:34:96:88:7b:f4:67:72:c2:6e:1d:db:b9:72:
62:b4:9f:d1:34:a6:8c:47:fc:4a:58:d4:f6:5e:e8:93:c4:72:
67:95:49:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:00:05 2025 by rpki-client