Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier: 4P3SMvh6cq3BG22HD3goyzkBuQNvpwShuhJcCIIyKYo=
Subject key identifier: 7B:F3:36:00:E3:DF:04:15:D0:C4:1A:21:EC:BA:6E:EB:A0:98:99:9E
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 019A4EF50CD325A74C10B5EFAB4AEF8A4FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:13 +0000
Manifest this update: Tue 04 Nov 2025 13:01:13 +0000
Manifest next update: Wed 05 Nov 2025 13:01:13 +0000
Files and hashes: 1: Hspj5PzkfsluTEqLIOwJGoQGOOc.roa (hash: gOBFADglYE5G0b4X+8zSKnsYq9fnevgLZFWvJSsuL9M=)
2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: 1LwhIvyRkeqEqBUCeDKaINCo0KZbu+mKvMwT84V3GPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0c:d3:25:a7:4c:10:b5:ef:ab:4a:ef:8a:4f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Nov 4 13:01:13 2025 GMT
Not After : Nov 5 13:01:13 2025 GMT
Subject: CN=7bf33600e3df0415d0c41a21ecba6eeba098999e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:68:55:7e:80:e7:7e:4e:89:d1:a7:09:cf:
a8:92:2a:7a:09:21:aa:8c:c2:cf:aa:50:a1:91:c0:
1f:c9:74:8d:24:ad:f6:33:4f:0a:e6:83:02:48:ce:
dc:e1:c0:5e:fa:86:55:88:ec:83:d5:c8:a7:21:ba:
ef:3a:f5:f4:d9:23:ba:28:7a:c1:9a:6d:49:e0:65:
d1:1c:19:97:eb:f9:99:d6:74:d2:a8:27:10:f5:e2:
c1:af:e8:7b:79:4e:42:55:ef:b0:2f:df:ed:88:5a:
06:ba:5b:ab:d9:49:56:cf:75:5f:2c:f3:60:e4:9f:
99:31:a1:ee:1a:2c:c7:6d:cf:d6:f5:a5:c9:0e:f2:
7e:46:39:13:6c:41:95:d0:29:db:14:e9:8c:30:7b:
b2:4b:50:f8:e6:80:af:33:ad:96:62:e4:e3:9b:61:
0b:25:70:2b:42:0c:1a:06:28:de:3e:86:af:7a:60:
47:76:22:0c:c6:8c:2c:52:29:6b:89:c4:0f:0b:d1:
6e:bf:dc:8b:0d:93:42:9e:8d:71:ca:c9:27:cf:dd:
f5:b8:99:eb:15:15:41:1a:85:0b:37:45:b2:74:19:
d0:56:12:36:87:a3:0b:f3:41:6c:ea:8e:9e:b9:dc:
97:ad:e0:27:b7:0c:2b:ea:67:ca:a8:4e:9b:29:2a:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F3:36:00:E3:DF:04:15:D0:C4:1A:21:EC:BA:6E:EB:A0:98:99:9E
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e8:a2:c3:d3:c9:17:cd:c3:8e:78:af:06:93:2f:0c:cb:b4:
28:c6:51:23:9d:88:f2:a1:e6:91:aa:d7:89:72:2d:c3:8a:9e:
41:23:e3:db:ff:57:98:2a:df:90:9f:53:15:be:fd:84:6b:99:
bf:80:4d:32:44:57:85:e7:ca:00:e1:39:43:a3:9a:c8:4f:bf:
b4:17:8b:b3:71:d7:8b:39:8c:ba:20:20:c2:28:ff:98:4b:74:
19:30:7b:9d:f1:2d:f5:31:29:c5:f4:77:a8:5d:31:40:68:19:
7d:15:4b:ac:17:9d:05:45:d3:42:65:ee:10:74:6f:da:f4:75:
c0:5a:98:74:e6:78:76:84:de:6d:37:3b:70:78:62:6f:ca:53:
28:1a:b7:e9:e9:3d:ee:52:71:93:63:40:64:7c:3a:f9:a6:90:
72:e3:0a:2d:31:ef:e1:1a:f9:c9:70:4d:bf:c9:39:58:39:ca:
cb:b4:b1:1e:9f:9b:ca:d4:c7:a3:3c:b3:99:94:b5:2d:ba:bd:
33:69:0e:0d:ae:81:83:1e:21:dd:fc:a5:04:33:1a:6d:db:9e:
89:78:c2:e6:23:b6:27:bd:1a:e9:0a:f5:bf:0d:d3:ad:43:e0:
0e:cb:79:a1:b5:9a:95:8a:39:d1:81:87:f2:bf:d1:9b:ab:89:
71:7d:51:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9QzTJadMELXvq0rvik/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzU0OTU1MTQwNWQ5OTQ4YzY2MmRmZTRkZTI0ZGUwNTVk
YWZmNWUwHhcNMjUxMTA0MTMwMTEzWhcNMjUxMTA1MTMwMTEzWjAzMTEwLwYDVQQD
Eyg3YmYzMzYwMGUzZGYwNDE1ZDBjNDFhMjFlY2JhNmVlYmEwOTg5OTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqChoVX6A535OidGnCc+okip6CSGq
jMLPqlChkcAfyXSNJK32M08K5oMCSM7c4cBe+oZViOyD1cinIbrvOvX02SO6KHrB
mm1J4GXRHBmX6/mZ1nTSqCcQ9eLBr+h7eU5CVe+wL9/tiFoGulur2UlWz3VfLPNg
5J+ZMaHuGizHbc/W9aXJDvJ+RjkTbEGV0CnbFOmMMHuyS1D45oCvM62WYuTjm2EL
JXArQgwaBijePoavemBHdiIMxowsUilricQPC9Fuv9yLDZNCno1xysknz931uJnr
FRVBGoULN0WydBnQVhI2h6ML80Fs6o6eudyXreAntwwr6mfKqE6bKSri4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvzNgDj3wQV0MQaIey6buugmJmeMB8GA1UdIwQY
MBaAFMd1SVUUBdmUjGYt/k3iTeBV2v9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEt
MWJmNzVmNzVmYTg3LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEtMWJmNzVmNzVmYTg3
LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauiiw9PJ
F83DjnivBpMvDMu0KMZRI52I8qHmkarXiXItw4qeQSPj2/9XmCrfkJ9TFb79hGuZ
v4BNMkRXhefKAOE5Q6OayE+/tBeLs3HXizmMuiAgwij/mEt0GTB7nfEt9TEpxfR3
qF0xQGgZfRVLrBedBUXTQmXuEHRv2vR1wFqYdOZ4doTebTc7cHhib8pTKBq36ek9
7lJxk2NAZHw6+aaQcuMKLTHv4Rr5yXBNv8k5WDnKy7SxHp+bytTHozyzmZS1Lbq9
M2kODa6Bgx4h3fylBDMabdueiXjC5iO2J70a6Qr1vw3TrUPgDst5obWalYo50YGH
8r/Rm6uJcX1RYg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:53 2025 by rpki-client