Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: wZg4H7LQlgPoXubWtMg6DkOdu7VrsC0C3cS5Yzmov/o=
Subject key identifier: 6C:35:F4:63:AA:DE:0B:ED:15:88:D2:B7:6C:0A:1F:E7:B8:ED:3F:2D
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 019A71EEB4BCEBFC5FF94E086D58C78D51B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:00 +0000
Manifest this update: Tue 11 Nov 2025 08:01:00 +0000
Manifest next update: Wed 12 Nov 2025 08:01:00 +0000
Files and hashes: 1: Bt61Duabnrfk_tvUxqrlxq35pFs.roa (hash: 3mTb4E/hZOVdEv0TkUnMgMT0a7EJ9fK0ZGjFdNjhe4g=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: Ky9nSt7usDrMZkQ5WOUBhuiYepGSeN0KwQpXFd9P6l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b4:bc:eb:fc:5f:f9:4e:08:6d:58:c7:8d:51:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Nov 11 08:01:00 2025 GMT
Not After : Nov 12 08:01:00 2025 GMT
Subject: CN=6c35f463aade0bed1588d2b76c0a1fe7b8ed3f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:31:e1:1a:5f:34:c5:b0:5d:b5:22:92:54:
13:22:2c:51:34:49:a2:b1:6f:b1:94:0f:f0:76:22:
b8:c9:dd:24:2f:9b:ec:b1:31:f6:24:a3:17:f3:60:
23:f7:70:f5:b7:7d:6c:c2:ab:35:46:f2:47:1d:00:
1c:48:d9:a1:8a:e0:44:ce:14:3f:ea:f4:96:e6:b0:
c3:3a:3f:e5:f8:0d:4b:27:0e:5c:6b:a0:25:de:73:
56:e9:e4:ef:0d:57:4b:ef:13:57:be:ce:93:f3:49:
9b:49:18:50:f4:f9:9d:51:f0:04:56:7c:60:aa:a6:
34:76:02:0a:25:c8:7e:1b:3d:57:3f:67:68:56:d5:
f5:ca:0d:48:38:c4:74:96:7e:69:6a:46:35:b4:6e:
a5:67:7b:ab:63:d1:43:65:d8:f0:0b:d5:59:ec:cb:
fb:23:b9:21:8c:8c:e6:27:35:2f:76:8d:e5:41:b9:
88:e1:64:0f:e8:c8:ec:4d:13:e5:dc:4e:ca:8f:2c:
70:c0:95:4b:f0:ee:5d:57:76:df:19:e1:ef:ff:3d:
a6:14:a3:23:26:ec:5b:7c:a0:20:cf:2b:76:77:6b:
26:2a:d2:b0:eb:d0:75:f5:ae:c4:fc:49:17:6b:41:
39:6e:68:22:27:6f:bc:96:01:29:e9:0c:32:ef:cc:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:35:F4:63:AA:DE:0B:ED:15:88:D2:B7:6C:0A:1F:E7:B8:ED:3F:2D
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:92:66:e1:7f:28:40:b5:a2:c8:c2:dd:96:8a:cc:28:70:58:
5d:98:c5:1e:1a:9a:2e:cc:9e:4e:f9:99:63:12:5f:84:12:a5:
44:79:b1:ee:df:66:0a:68:71:82:83:fd:98:b6:53:dc:bc:3c:
08:ba:5a:f8:6f:a3:95:f4:a4:e6:49:08:c1:e0:79:9f:95:fd:
32:ae:6e:3a:12:f8:77:54:d7:71:32:61:6b:36:c8:d9:21:59:
46:70:e1:51:5c:02:9d:fd:96:99:a9:3b:6b:08:ea:93:37:33:
a7:98:ac:6c:41:ed:a1:5f:22:16:6c:4e:56:1c:eb:b3:b7:7e:
03:2f:e0:a2:c3:34:6c:b8:b1:72:43:b8:0a:e4:fa:9b:6c:64:
01:e5:6a:45:06:18:c9:b8:af:22:10:d3:c5:db:16:b6:1d:74:
15:ba:e2:48:d7:e1:e7:29:e5:2c:34:6a:ea:eb:96:5c:d8:5b:
f2:17:6c:ea:e7:84:da:14:4b:13:cb:4f:f2:af:0f:a5:23:e0:
7d:ce:39:44:9d:d8:b9:5a:f7:7f:49:d8:70:af:e6:23:6b:96:
b9:5b:5c:44:ae:34:20:b3:5c:d2:69:1d:f5:1d:8b:a3:02:43:
71:75:d6:6d:4f:fb:c9:13:88:7b:c6:af:d7:e2:dd:ee:de:ea:
27:51:81:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7rS86/xf+U4IbVjHjVG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2E3NjM5MjU1NjExOGEwY2VlYjU0MTMwNjY5YzhlNjk2
ZjE1NWIwHhcNMjUxMTExMDgwMTAwWhcNMjUxMTEyMDgwMTAwWjAzMTEwLwYDVQQD
Eyg2YzM1ZjQ2M2FhZGUwYmVkMTU4OGQyYjc2YzBhMWZlN2I4ZWQzZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntYx4RpfNMWwXbUiklQTIixRNEmi
sW+xlA/wdiK4yd0kL5vssTH2JKMX82Aj93D1t31swqs1RvJHHQAcSNmhiuBEzhQ/
6vSW5rDDOj/l+A1LJw5ca6Al3nNW6eTvDVdL7xNXvs6T80mbSRhQ9PmdUfAEVnxg
qqY0dgIKJch+Gz1XP2doVtX1yg1IOMR0ln5pakY1tG6lZ3urY9FDZdjwC9VZ7Mv7
I7khjIzmJzUvdo3lQbmI4WQP6MjsTRPl3E7KjyxwwJVL8O5dV3bfGeHv/z2mFKMj
JuxbfKAgzyt2d2smKtKw69B19a7E/EkXa0E5bmgiJ2+8lgEp6Qwy78zI0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGw19GOq3gvtFYjSt2wKH+e47T8tMB8GA1UdIwQY
MBaAFMd6djklVhGKDO61QTBmnI5pbxVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQt
ZmZiM2E5NjUzOGFkLzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQtZmZiM2E5NjUzOGFk
LzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJJm4X8o
QLWiyMLdlorMKHBYXZjFHhqaLsyeTvmZYxJfhBKlRHmx7t9mCmhxgoP9mLZT3Lw8
CLpa+G+jlfSk5kkIweB5n5X9Mq5uOhL4d1TXcTJhazbI2SFZRnDhUVwCnf2Wmak7
awjqkzczp5isbEHtoV8iFmxOVhzrs7d+Ay/gosM0bLixckO4CuT6m2xkAeVqRQYY
ybivIhDTxdsWth10FbriSNfh5ynlLDRq6uuWXNhb8hds6ueE2hRLE8tP8q8PpSPg
fc45RJ3YuVr3f0nYcK/mI2uWuVtcRK40ILNc0mkd9R2LowJDcXXWbU/7yROIe8av
1+Ld7t7qJ1GBig==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:55 2025 by rpki-client