Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: FnSroRrXfVaxgflPcYU4TBJlit2acc45eHHs3cCYSYI=
Subject key identifier: 4A:1B:16:15:A4:EA:25:46:F2:A0:AD:3B:F5:F0:E4:D1:92:A3:C6:A7
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 0199221E71CAEDB8F31E3CBDD98EE949FE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 06A0
Signing time: Sun 07 Sep 2025 03:00:44 +0000
Manifest this update: Sun 07 Sep 2025 03:00:44 +0000
Manifest next update: Mon 08 Sep 2025 03:00:44 +0000
Files and hashes: 1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: D3pwkeNTIY8VASHS92mTW6J/M3Lhvtqsa4WBJ08KccY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:71:ca:ed:b8:f3:1e:3c:bd:d9:8e:e9:49:fe:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Sep 7 03:00:44 2025 GMT
Not After : Sep 8 03:00:44 2025 GMT
Subject: CN=4a1b1615a4ea2546f2a0ad3bf5f0e4d192a3c6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:a4:a2:6b:7b:9e:66:d8:14:8b:95:29:52:
fa:ab:e2:d1:30:dd:c4:a8:77:64:05:75:cf:9a:cb:
c1:a8:e8:c2:b3:2b:e7:45:86:3e:93:80:ca:6a:f8:
1f:8b:25:db:fc:07:13:51:e5:04:52:55:58:0d:71:
1e:4f:b0:16:de:e5:1a:21:75:bd:53:90:1a:f4:bf:
c9:5d:e8:f9:48:b6:d8:6a:a6:ba:93:36:c2:f7:76:
94:0b:6f:f2:15:f2:6c:45:29:93:73:46:4a:cb:1f:
ca:28:ed:25:1e:42:f6:26:fa:a4:82:21:60:bf:34:
3e:6b:19:13:39:30:e6:fa:82:96:ca:ae:60:4a:db:
82:05:a9:20:37:f5:cd:94:71:da:9a:a1:45:3d:6a:
a4:b9:1b:dc:24:b6:88:84:0b:1e:2d:13:89:dd:fa:
7a:d9:de:35:26:93:a6:88:8d:d7:41:6b:df:8c:e6:
f9:6c:ff:0d:eb:93:8a:19:c1:f1:1f:be:02:b7:4f:
6d:e7:ed:56:45:7b:2a:22:96:06:af:73:aa:18:b9:
0f:26:55:07:93:9c:37:9c:a9:c3:1e:38:25:96:ed:
6f:56:00:58:6a:60:7b:2e:a4:41:0a:17:6a:c2:b0:
ce:d9:bc:fb:6f:e1:17:57:4d:cf:85:89:bc:e3:8f:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1B:16:15:A4:EA:25:46:F2:A0:AD:3B:F5:F0:E4:D1:92:A3:C6:A7
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:99:1b:60:14:6b:32:42:99:f7:d1:c7:af:88:9f:8b:9c:62:
5b:22:ce:46:3a:d7:73:f3:56:5e:42:ad:0d:2d:d0:33:8b:06:
f8:fc:de:f8:89:ae:ab:31:b6:24:1d:7f:0b:5d:28:7b:69:ea:
a2:2e:3e:57:17:bb:4f:5a:2c:65:19:bc:95:7a:b9:71:59:5b:
30:51:ee:5c:74:60:05:df:c2:3e:dc:a8:51:c8:41:49:b8:1a:
07:3d:1e:da:cd:3d:b5:a2:be:66:f8:2d:1e:5c:b7:8a:5f:08:
b5:8b:9c:60:ea:a1:a7:0d:ad:73:9d:7f:dd:24:cc:b0:05:ad:
4c:0f:ad:f8:bd:05:b2:62:4d:c8:7d:e7:ee:42:29:82:29:31:
01:e3:e4:df:bd:98:90:fd:37:85:44:e0:bb:1a:d4:0a:7c:9d:
2b:75:4b:9e:14:f7:da:f9:6b:8a:c5:87:9c:71:0c:d8:ed:d6:
69:8b:c0:1e:15:28:77:2d:b3:b8:91:6a:c1:2e:61:51:8e:36:
f8:ad:57:b8:7c:b2:18:aa:d6:cf:2e:54:a1:f1:4a:b1:b3:8b:
9e:2b:86:c2:9e:28:d8:8a:74:35:18:5d:37:a2:9f:04:0f:b9:
3b:b7:d5:45:b6:0a:d2:b4:d7:50:74:db:20:0c:c9:98:6a:5b:
42:71:2a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:23 2025 by rpki-client