Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier: IipqlljEG/EwZY97JhyFw9mC6MagGS50291OVsVg6io=
Subject key identifier: FE:CD:8D:C3:FA:48:FA:DB:F2:2E:AA:FB:A5:CC:17:C9:EB:0D:17:CA
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial: 01974A7A661AD0FBF4B4883A8670B85B5D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 13:00:24 +0000
Manifest this update: Sat 07 Jun 2025 13:00:24 +0000
Manifest next update: Sun 08 Jun 2025 13:00:24 +0000
Files and hashes: 1: iMH-2vRf9YeMGRgtztJPUn14aQA.roa (hash: 76FrL/HDDuxO7pj6zl8q4Zgif4vNwjOmJyQV7tycvQk=)
2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: NJcsDIbag5m9PuYyUA/xzA2BbpVCorgIwJV6a5PxBJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:66:1a:d0:fb:f4:b4:88:3a:86:70:b8:5b:5d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Validity
Not Before: Jun 7 13:00:24 2025 GMT
Not After : Jun 8 13:00:24 2025 GMT
Subject: CN=fecd8dc3fa48fadbf22eaafba5cc17c9eb0d17ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:b0:a4:9a:33:6a:0d:16:af:4b:58:b7:d8:
a3:f0:99:56:d7:37:df:c9:4b:91:e0:11:8c:59:96:
bc:62:92:26:02:12:7b:f5:29:31:0c:8a:77:87:ae:
db:b3:3c:db:b8:98:31:80:5e:21:81:18:64:fe:39:
95:f3:db:b2:c0:a9:9a:b5:fd:ff:53:0f:eb:06:c7:
fb:8f:69:4d:f3:ce:52:4b:f5:f8:c6:9e:1e:01:cb:
26:4b:38:62:fd:ba:54:86:23:69:8f:f4:25:9e:45:
e0:43:b2:c7:59:3f:10:0e:ba:61:06:a3:23:bf:82:
30:c2:8d:22:ea:93:3e:8e:7d:30:df:1d:c1:46:7b:
fb:d1:03:cf:ce:1f:fc:3d:0b:35:3d:d6:60:c8:97:
05:6d:48:1a:07:b5:f4:4f:46:fc:28:ac:e2:76:a2:
27:99:1c:2a:b4:81:11:3b:e6:fc:c0:bc:48:63:3b:
e2:e3:0b:8d:ed:44:b4:e8:70:21:66:df:d1:46:bf:
e5:43:6e:c8:ba:b6:56:cb:94:2a:96:42:5e:f0:eb:
3f:3a:f9:b0:53:54:15:37:d4:ff:8d:32:cd:69:2d:
ed:76:d2:fe:cb:b7:83:c1:a9:51:13:2b:c4:ee:71:
2d:9b:ef:c7:30:dd:cf:f5:4d:75:60:ca:9f:da:ef:
13:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CD:8D:C3:FA:48:FA:DB:F2:2E:AA:FB:A5:CC:17:C9:EB:0D:17:CA
X509v3 Authority Key Identifier:
keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:77:12:17:50:c5:18:92:be:9d:ff:e6:90:22:88:39:07:cb:
38:dd:03:d4:55:81:7a:c8:cf:d5:cf:9c:c8:8e:5a:2c:13:ca:
f7:21:17:80:9d:a1:0e:22:59:b1:b2:16:27:dc:42:23:c5:01:
15:05:d3:53:52:d8:ad:09:86:a7:04:85:6d:e7:fe:ab:3d:a2:
01:2c:94:55:24:6e:31:34:4d:95:28:4b:b0:f1:f5:15:3a:21:
99:3b:05:1a:b2:cc:a1:2c:53:3a:82:73:72:eb:de:88:20:bf:
c2:e1:47:e3:c7:8b:3f:7b:ac:7a:31:7a:7c:0f:dd:d9:da:0d:
c7:2e:7f:ad:17:09:03:23:e1:8e:4f:e9:5d:3a:15:43:f3:37:
38:bf:b8:38:fa:40:3c:31:6c:c6:c3:0f:7c:c9:4a:a1:1c:69:
54:00:64:a2:7f:db:b2:08:a2:55:b9:62:35:95:51:fd:c0:ba:
db:a4:e4:4c:eb:33:21:66:df:b6:b4:bd:1c:70:62:dc:c8:60:
62:c7:a5:13:5a:46:07:f6:a8:85:15:df:c0:2f:59:a1:9d:fd:
97:d4:ba:59:89:9a:00:b5:8a:21:18:11:ce:b1:78:b2:d8:93:
f3:d7:fb:c2:d6:89:f0:68:aa:47:2a:03:fd:b3:e2:90:c6:f6:
96:43:27:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKemYa0Pv0tIg6hnC4W12PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzE3MWE1ZTQ1NTA2Yzg2YzkwMTZiYmU1YjE0YjNkYjhi
YzZjYzMwHhcNMjUwNjA3MTMwMDI0WhcNMjUwNjA4MTMwMDI0WjAzMTEwLwYDVQQD
EyhmZWNkOGRjM2ZhNDhmYWRiZjIyZWFhZmJhNWNjMTdjOWViMGQxN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP2wpJozag0Wr0tYt9ij8JlW1zff
yUuR4BGMWZa8YpImAhJ79SkxDIp3h67bszzbuJgxgF4hgRhk/jmV89uywKmatf3/
Uw/rBsf7j2lN885SS/X4xp4eAcsmSzhi/bpUhiNpj/QlnkXgQ7LHWT8QDrphBqMj
v4Iwwo0i6pM+jn0w3x3BRnv70QPPzh/8PQs1PdZgyJcFbUgaB7X0T0b8KKzidqIn
mRwqtIERO+b8wLxIYzvi4wuN7US06HAhZt/RRr/lQ27IurZWy5QqlkJe8Os/Ovmw
U1QVN9T/jTLNaS3tdtL+y7eDwalREyvE7nEtm+/HMN3P9U11YMqf2u8T/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7NjcP6SPrb8i6q+6XMF8nrDRfKMB8GA1UdIwQY
MBaAFMdxcaXkVQbIbJAWu+WxSz24vGzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGIt
YjQzOGI1Yjg4Y2YyLzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGItYjQzOGI1Yjg4Y2Yy
LzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr3cSF1DF
GJK+nf/mkCKIOQfLON0D1FWBesjP1c+cyI5aLBPK9yEXgJ2hDiJZsbIWJ9xCI8UB
FQXTU1LYrQmGpwSFbef+qz2iASyUVSRuMTRNlShLsPH1FTohmTsFGrLMoSxTOoJz
cuveiCC/wuFH48eLP3usejF6fA/d2doNxy5/rRcJAyPhjk/pXToVQ/M3OL+4OPpA
PDFsxsMPfMlKoRxpVABkon/bsgiiVbliNZVR/cC626TkTOszIWbftrS9HHBi3Mhg
YselE1pGB/aohRXfwC9ZoZ39l9S6WYmaALWKIRgRzrF4stiT89f7wtaJ8GiqRyoD
/bPikMb2lkMnSA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:30:26 2025 by rpki-client