Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier: rAriuL8kW0DSCCGXZl90e1gnbHs4009KXgtTtL7GFQs=
Subject key identifier: 5A:2C:0B:99:FC:10:CE:C4:A1:8A:14:2F:2C:C8:34:5C:36:B6:7F:44
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 01988C8F26C88D70ABFC5F9A39DF306F0AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number: 0F25
Signing time: Sat 09 Aug 2025 02:00:48 +0000
Manifest this update: Sat 09 Aug 2025 02:00:48 +0000
Manifest next update: Sun 10 Aug 2025 02:00:48 +0000
Files and hashes: 1: ZfJgayjX3ZyY4keMrrK5ie3SiNQ.roa (hash: I356ijiy3DFzBI7A3YL8pZIG42TC++pOhoxAzv45n5Q=)
2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: Rr5TP+bq3Pep8NmuedJKyWUmWrpzAtUDwGjmH3GT4bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:26:c8:8d:70:ab:fc:5f:9a:39:df:30:6f:0a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: Aug 9 02:00:48 2025 GMT
Not After : Aug 10 02:00:48 2025 GMT
Subject: CN=5a2c0b99fc10cec4a18a142f2cc8345c36b67f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:f7:09:6d:94:74:3b:f3:4f:b9:04:a8:0a:
2d:03:0a:54:9f:1f:d5:23:94:30:60:80:f2:bd:7b:
f5:e7:d0:13:38:36:34:32:49:25:ac:97:6e:ef:e2:
ff:fd:66:d4:5c:b2:80:e0:1d:b0:66:4e:8e:8d:20:
bb:f2:04:51:33:04:15:70:a3:36:ba:7e:0e:4c:93:
5b:9f:9c:c9:74:7b:71:e0:dc:37:3d:c3:53:4d:ea:
cc:98:46:5e:72:f1:e0:d4:d5:eb:3b:d3:7c:c7:94:
db:2c:c4:48:18:5a:17:22:31:1e:16:b8:91:f3:ba:
e5:0c:85:62:b3:ea:4a:f9:0a:cb:d5:e4:aa:9e:4d:
e2:f2:2d:b1:90:81:c2:cd:7a:2b:49:d1:1e:99:9e:
69:65:74:45:bf:f0:f5:51:3e:ee:98:19:20:25:eb:
56:c8:69:78:8c:ac:b9:c7:b7:66:df:8f:09:53:80:
fd:08:74:0a:fc:7c:71:d5:50:21:f2:70:fb:3f:a9:
d7:59:17:6f:65:06:ec:3c:82:d6:df:e3:02:5e:1b:
56:0e:f1:fb:ad:2e:70:fb:6f:0d:dd:44:81:36:d7:
b6:cd:75:86:e3:ec:5d:ff:16:ff:1d:d1:48:24:58:
c6:6d:54:b2:04:b2:23:d5:46:5d:8f:68:8a:9c:a8:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:0B:99:FC:10:CE:C4:A1:8A:14:2F:2C:C8:34:5C:36:B6:7F:44
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3f:39:9d:d7:be:2e:dc:7f:2d:e9:b5:50:f9:96:99:15:95:
da:1a:d6:b9:2d:d7:41:34:76:6f:85:b9:12:67:36:f0:48:ed:
cb:fb:d4:56:19:96:f2:8e:97:1b:96:f7:de:d3:c1:74:36:8d:
63:f0:da:28:a5:34:5d:a7:26:8d:52:83:92:5c:6b:01:92:cc:
1e:77:d6:b8:81:43:8b:6f:16:9c:e1:86:86:c5:56:11:d0:38:
89:26:d6:02:af:7d:ae:a9:f3:39:46:7f:8c:9d:d8:41:3f:7c:
1d:be:02:6f:b4:0b:66:65:fa:0c:98:d1:e6:24:0a:89:5d:02:
d4:c3:0b:05:4b:a8:ec:5f:8a:85:1e:4a:fc:7e:ef:6e:28:54:
49:9f:a3:44:e4:c1:f2:9e:b2:47:72:19:7c:e0:61:75:cf:a3:
ea:70:73:2f:b2:ce:10:b3:a4:50:54:b9:3d:e2:a8:0f:31:7c:
31:19:b0:6b:30:37:86:74:55:1d:e6:98:0e:85:2e:47:e1:b0:
21:10:72:c8:1d:c6:f4:21:7e:a1:86:76:e9:7d:dd:9c:44:35:
6c:9a:41:3c:fa:3e:e8:09:38:37:d8:5e:1d:bb:aa:c6:ba:75:
89:0d:3d:76:0c:b4:e4:3a:98:41:0a:f4:b2:b6:41:0f:8a:53:
28:9c:ac:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:49 2025 by rpki-client