Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier: aBC6tbynM+zdOD3OnskKPGak54InsY7n+kKOMTjTFiQ=
Subject key identifier: F9:9E:BE:1C:96:C9:D0:C1:E6:23:24:BB:16:82:4A:65:CA:47:39:88
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 019A4C98088504CF39B566C897050148E9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number: 100D
Signing time: Tue 04 Nov 2025 02:00:23 +0000
Manifest this update: Tue 04 Nov 2025 02:00:23 +0000
Manifest next update: Wed 05 Nov 2025 02:00:23 +0000
Files and hashes: 1: ZfJgayjX3ZyY4keMrrK5ie3SiNQ.roa (hash: I356ijiy3DFzBI7A3YL8pZIG42TC++pOhoxAzv45n5Q=)
2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: 5VuY9BGoQompCWs2mxmox4zlDR5+pqMGXHrbAh0M7lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:08:85:04:cf:39:b5:66:c8:97:05:01:48:e9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: Nov 4 02:00:23 2025 GMT
Not After : Nov 5 02:00:23 2025 GMT
Subject: CN=f99ebe1c96c9d0c1e62324bb16824a65ca473988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:11:f9:0e:95:5f:b2:6e:05:63:41:9a:d6:
98:c6:c2:db:6a:5a:ac:77:34:6b:8c:42:24:52:8b:
f0:d1:48:fd:0f:10:da:e0:82:66:52:5d:53:b3:01:
af:31:6e:21:68:70:9d:aa:7e:83:08:28:b3:cb:9f:
6b:56:17:93:1e:34:61:89:e8:f6:55:2e:10:95:e3:
1f:94:93:ef:52:ea:33:16:15:a4:94:18:db:4b:7b:
d0:9d:fd:0e:0f:4b:a4:d8:99:b9:64:1f:65:f1:77:
d0:37:c5:7e:1e:83:74:36:22:66:c2:c4:32:4c:03:
97:02:8d:ef:66:1c:f4:90:0c:32:a0:b1:3b:56:bd:
03:f8:d0:7b:bc:8b:28:e3:74:55:2b:20:1c:ea:e5:
c6:5b:34:c0:7f:33:43:8f:7c:28:e0:71:0d:1e:db:
a9:0b:0d:d4:e4:6b:21:c2:81:ca:34:12:cf:2f:51:
d5:00:dc:38:aa:38:63:00:74:05:e0:2f:41:e0:dc:
13:17:df:b7:c9:47:75:00:7b:96:2f:b3:cc:9b:29:
2e:f4:45:2c:13:84:26:2a:d6:5a:73:6a:92:1d:1d:
f3:e0:58:fb:04:18:07:a7:ca:a3:52:ae:a3:ec:e4:
30:c1:a7:f1:97:49:41:3c:3c:3d:ad:93:8e:c8:6f:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9E:BE:1C:96:C9:D0:C1:E6:23:24:BB:16:82:4A:65:CA:47:39:88
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7e:0e:a6:cd:00:96:09:86:c4:d0:86:a9:0f:6c:b4:4f:24:
19:a2:25:1f:bc:2b:a3:99:e2:20:6d:39:c7:b5:9f:ca:13:f8:
19:63:16:ee:1e:5a:2a:25:60:f7:cd:3b:49:a5:cb:45:dd:ee:
cd:93:4b:cc:c3:4e:d1:de:15:81:8a:06:8c:cc:5b:e6:6d:1e:
59:a4:cf:97:3e:16:bc:f7:04:c9:7d:b2:a6:a2:be:a1:59:39:
ab:1b:15:a5:72:4c:24:7a:4b:59:05:69:8a:9e:95:d9:33:40:
fa:47:d3:6a:aa:c8:fb:48:c2:08:aa:05:20:df:47:31:f5:b3:
ab:7a:2a:11:8f:06:76:a2:09:b1:14:ff:4e:9e:7b:be:fd:ed:
13:63:44:45:cd:fa:dc:7f:5d:cc:90:78:51:83:38:15:94:ad:
51:3c:19:3f:66:1b:6a:b8:cb:35:12:b6:bd:44:be:37:44:c3:
f8:43:71:e0:17:8c:59:4c:85:c9:11:5e:36:0e:a6:8c:8c:5a:
e5:47:88:c0:bd:bf:4a:bd:1e:30:c4:d8:ec:66:93:54:47:e9:
59:ae:c4:82:eb:59:48:53:75:5c:54:1b:e9:2b:af:c3:c3:2b:
dc:0f:5d:60:20:02:a0:fc:5f:04:d4:5f:39:12:8f:4e:5d:be:
7b:05:79:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:39 2025 by rpki-client