Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier: KB9hzAJJR5fSLuxSouxsKD+nXFWey5pZXeTgiMjPCBo=
Subject key identifier: CB:32:18:95:CA:50:C5:52:54:43:A2:D2:15:50:D3:3D:DE:28:2F:55
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial: 019A71B83F1C9EBD2BB80086EB5A1CFDB20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:31 +0000
Manifest this update: Tue 11 Nov 2025 07:01:31 +0000
Manifest next update: Wed 12 Nov 2025 07:01:31 +0000
Files and hashes: 1: iMH-2vRf9YeMGRgtztJPUn14aQA.roa (hash: 76FrL/HDDuxO7pj6zl8q4Zgif4vNwjOmJyQV7tycvQk=)
2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: wzknbBG4YJhQ46wYHekm4eGVOZXxGeI1DJ1uvAdEoU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3f:1c:9e:bd:2b:b8:00:86:eb:5a:1c:fd:b2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Validity
Not Before: Nov 11 07:01:31 2025 GMT
Not After : Nov 12 07:01:31 2025 GMT
Subject: CN=cb321895ca50c5525443a2d21550d33dde282f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:c4:ab:35:bb:cd:2a:80:e6:13:c1:9e:c5:
ab:ba:73:81:88:71:ca:dd:9f:aa:fe:61:04:fe:0b:
80:53:22:ee:45:89:9c:5c:d0:09:15:a2:ac:bc:55:
fe:d3:f8:38:5a:da:b3:dc:81:3a:c8:6a:be:e4:76:
1d:e4:ec:ef:ba:0a:f4:b0:0d:71:ff:a8:3e:54:02:
d1:3f:fe:e9:20:dd:ea:15:b0:1d:1f:fc:d4:8a:c9:
68:dd:b6:77:23:ef:72:9f:bc:38:8d:5c:98:34:15:
a8:ee:49:ef:84:4e:3d:f3:38:7d:32:ad:be:05:2a:
56:88:c3:f6:d0:09:69:ac:c4:8a:75:0c:7d:04:b6:
52:a6:96:18:df:07:41:4d:4b:99:25:e6:5e:ef:f4:
99:81:72:d2:55:ac:83:fd:25:78:d8:88:d1:13:a5:
09:6e:f6:95:49:e2:52:b7:20:3e:51:48:0c:03:71:
57:fb:c5:39:f3:02:cb:b3:eb:69:d7:e9:1b:cb:6c:
db:34:ff:70:f0:6b:82:ff:98:9e:b2:5e:4c:6c:a2:
64:c3:6d:00:24:6e:34:0d:6f:ee:78:29:a8:eb:77:
70:31:fd:fb:96:95:42:f2:c1:78:83:37:a8:1d:11:
af:4c:87:7e:9c:56:83:69:e0:9f:5f:7b:80:f8:db:
8c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:32:18:95:CA:50:C5:52:54:43:A2:D2:15:50:D3:3D:DE:28:2F:55
X509v3 Authority Key Identifier:
keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:78:62:51:66:aa:e7:8b:7a:fa:49:5d:45:89:e7:e9:ac:57:
c6:ac:79:df:6c:cf:87:26:bd:ee:cf:f6:53:ef:1c:49:d1:53:
0a:71:87:12:ff:a2:2d:eb:7e:64:19:2a:28:73:af:03:f0:c6:
6d:2b:38:76:ed:9e:24:70:ad:f6:1d:1a:65:5c:a4:ab:07:37:
e6:6c:5a:18:96:26:e5:17:a3:41:f1:80:4c:75:2e:8d:68:f4:
d3:86:1b:49:95:b8:d7:7d:d0:30:6c:ca:d3:5a:6a:b3:b0:bb:
dd:21:84:34:62:30:a1:ba:db:a7:ba:5f:86:2d:ea:fe:84:ad:
55:e6:8e:81:33:91:06:57:70:f7:2b:8f:4f:30:9d:da:a1:bb:
b3:b4:1e:9a:bc:9a:e9:eb:3d:43:51:a6:b7:62:f4:af:7d:6e:
4c:ea:fd:c5:f2:9c:a5:ac:dd:56:f1:8d:e8:4a:07:5f:5d:33:
a4:93:ce:a8:d7:9f:65:be:69:e2:ed:6a:6a:78:c5:f7:ff:53:
57:dd:9e:38:74:0b:2a:ff:fd:15:89:99:d4:d9:a1:aa:03:5f:
58:a8:54:ce:f0:ad:20:b5:a8:a1:a4:cc:c9:6a:fe:11:8c:f2:
08:80:8a:fc:d8:92:07:f5:bd:33:2f:96:f2:de:bc:07:5c:f4:
fd:5c:6a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:41 2025 by rpki-client