Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
File: x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json)
Hash identifier: oRmNZWmGvVfLZLERy5i/COODs9Z6FNCHdDR9T1vOGuM=
Subject key identifier: A1:0C:85:0A:E7:48:B6:D8:2C:9C:FC:E0:7F:93:5A:43:D8:5A:D9:EB
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 019A4D06FF5B83815B7BE74E7DBFC6343243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
Manifest number: 0BB2
Signing time: Tue 04 Nov 2025 04:01:35 +0000
Manifest this update: Tue 04 Nov 2025 04:01:35 +0000
Manifest next update: Wed 05 Nov 2025 04:01:35 +0000
Files and hashes: 1: 2HWaYe8To0qjjtVdcy7I7ttFbbg.roa (hash: va5+QSQ1VvFYIrECNgHjVJbI88Ftr5DD+GPYmuN05H8=)
2: 8RHKnf43EnDTyj22kIIfanQSEQc.roa (hash: HbgpO2hUs5v1oFq30hojEK1YQFHOK9Zr5sDwHkBpSCg=)
3: OHUMAhwuz8j9ycFP0uC93_9dMsI.roa (hash: K0wUqFGby+8hOwpjxyeCuygnkldFbJEc1krNUlngfaA=)
4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: y6y8N5fIP+oTCqimlbTB0ux1RxT9Zus8/UMVpHQAiNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:ff:5b:83:81:5b:7b:e7:4e:7d:bf:c6:34:32:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Nov 4 04:01:35 2025 GMT
Not After : Nov 5 04:01:35 2025 GMT
Subject: CN=a10c850ae748b6d82c9cfce07f935a43d85ad9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e2:96:13:fa:51:fd:16:0d:e3:cd:1e:95:08:
6e:81:bd:66:a7:1e:d5:ff:9c:20:06:56:86:e7:c9:
7a:1e:38:f7:b4:c1:f6:1b:51:76:1c:6e:ce:ab:33:
37:90:b7:f8:77:81:b5:81:17:6e:e3:92:26:67:69:
8c:ed:9a:15:da:12:a9:5b:5a:29:b0:97:a9:d6:88:
1b:59:94:c0:ec:17:d6:3d:cf:30:d5:c4:b6:ec:c4:
ac:83:b3:ca:20:b5:27:2e:62:42:8a:89:80:14:c7:
56:66:6a:24:65:5e:ab:aa:f0:91:19:ad:f8:59:ea:
38:19:93:1c:5a:43:07:c5:f5:93:5e:84:79:7c:ee:
97:f0:61:43:2a:61:66:b7:da:67:84:3c:a9:1e:17:
5a:05:cc:6a:e8:61:e4:da:2d:e7:a7:52:bf:88:66:
63:9c:33:90:24:dc:c1:d9:82:80:15:ef:4f:bc:6a:
8f:6c:06:86:97:d7:d7:9e:3e:7f:5e:72:3d:8d:b4:
41:a3:e8:01:2a:f1:93:9b:fc:0b:ee:64:1b:d0:8f:
f7:c8:ba:b8:d6:3d:36:5d:45:5d:ea:bd:29:89:2c:
cf:2b:32:0d:c2:73:87:d6:c9:e9:7d:cc:68:dc:57:
74:c0:1f:d1:8a:36:ea:ac:02:3d:74:48:17:60:1b:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0C:85:0A:E7:48:B6:D8:2C:9C:FC:E0:7F:93:5A:43:D8:5A:D9:EB
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:44:e4:c9:a1:2e:99:e0:73:f5:fd:86:51:53:de:05:9e:2a:
60:a9:44:ad:2c:38:71:11:da:bc:a7:c6:92:70:ba:b3:7f:8f:
d2:ee:37:39:14:ea:25:8c:04:00:2b:a3:c8:0b:12:bf:55:95:
bd:fe:1b:f1:db:6e:ed:d6:57:ff:89:5e:ed:7a:05:fc:98:58:
0e:e3:cf:55:0d:3c:48:c3:d7:1b:ed:04:a8:bf:83:03:87:27:
1b:2a:6f:46:b7:68:af:2a:46:dc:04:ce:ec:4d:66:ec:26:dd:
1a:98:7f:c3:3a:80:45:3f:1d:65:77:eb:b1:03:1b:a0:ab:be:
8e:6b:82:fa:52:d9:49:c6:99:4e:ca:0f:3e:9f:9f:b9:df:e6:
b8:53:7d:1e:89:0e:b6:57:71:13:ac:b6:15:18:54:59:09:5c:
f4:c1:5b:63:31:de:c4:2a:50:c3:5f:31:3a:e2:e9:d8:72:72:
5e:7a:bd:2a:05:2c:ae:37:94:ff:b7:2c:c5:f7:43:7c:17:fe:
14:6c:c6:73:8e:df:3c:10:7d:e8:3d:6d:b1:c6:72:a2:d0:72:
b1:89:89:91:59:8f:be:8c:21:56:61:e6:52:ae:19:43:20:76:
50:b3:1a:cf:9a:e0:fb:db:ec:48:a3:ea:82:86:e0:0c:36:42:
cd:db:d9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:51 2025 by rpki-client