Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier: Hy8HYNzAvACRUlNvs/T6phXg0uSJyGUlJ63DEEaXrZY=
Subject key identifier: AF:96:58:CE:18:89:DD:9E:14:AA:35:A2:9A:59:05:2F:D2:A1:AF:B6
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 019873E35A4D9FB2618EFB1DFC624C64AA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:02:16 +0000
Manifest this update: Mon 04 Aug 2025 07:02:16 +0000
Manifest next update: Tue 05 Aug 2025 07:02:16 +0000
Files and hashes: 1: Hspj5PzkfsluTEqLIOwJGoQGOOc.roa (hash: gOBFADglYE5G0b4X+8zSKnsYq9fnevgLZFWvJSsuL9M=)
2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: 9xLuom0O1hsg5clFNywMNWvt+cdojZ1Q1lOa9EiYD5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:5a:4d:9f:b2:61:8e:fb:1d:fc:62:4c:64:aa:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Aug 4 07:02:16 2025 GMT
Not After : Aug 5 07:02:16 2025 GMT
Subject: CN=af9658ce1889dd9e14aa35a29a59052fd2a1afb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:67:db:67:46:f4:74:6d:46:20:25:f2:ab:
24:09:4a:5f:b8:1f:0a:8b:84:1a:de:b7:fb:f3:07:
16:86:de:a1:49:cf:72:42:2d:33:e4:79:b0:5f:ec:
88:eb:07:5c:4c:c4:b7:24:79:01:27:16:a9:27:f4:
a7:34:5c:1c:c3:96:15:cc:08:e6:a5:b7:0b:49:fa:
20:43:be:ba:52:5b:35:c6:b2:49:44:68:ca:59:f7:
07:e7:d8:d2:24:d8:82:f9:ad:78:29:0e:f3:0a:6b:
81:ee:39:65:83:84:bd:a2:c6:1d:87:16:6a:31:20:
4e:02:a9:76:a6:29:1e:7b:ec:9a:b8:c8:6d:23:b8:
37:37:68:ed:2f:91:1f:d5:68:f8:5f:6b:62:e6:fe:
f2:9c:df:c5:73:08:7f:1c:17:ac:fa:df:56:d1:49:
72:31:1d:b2:ef:9d:2c:c3:e8:9f:9b:34:26:17:eb:
60:3b:a2:17:68:77:97:3a:56:98:dc:ab:32:fc:f0:
db:0f:75:0b:4b:4a:f2:22:61:10:e6:16:be:32:a6:
dd:fb:ef:ed:b6:dc:c7:0d:25:cc:16:4f:f1:33:f6:
0e:07:80:b4:a0:8a:38:a6:60:f5:b7:d0:9c:d1:4e:
88:22:bb:3e:23:b8:45:ce:63:eb:96:6e:14:6d:e3:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:96:58:CE:18:89:DD:9E:14:AA:35:A2:9A:59:05:2F:D2:A1:AF:B6
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3b:f6:5e:65:20:13:88:6d:dc:ce:7f:5e:9b:41:da:7c:77:
64:08:cc:f9:8c:67:6e:27:02:aa:da:61:5b:ea:ec:a2:0c:c1:
ca:b3:7d:47:ce:34:08:cb:ab:0d:30:cf:89:1e:8e:89:8f:40:
3c:ad:b0:47:03:97:b7:49:1e:27:88:f1:b4:0b:f6:22:19:1c:
c1:c3:50:f0:39:7e:01:a8:dd:b9:d2:1d:17:06:12:d5:d5:15:
0d:d1:ba:80:6e:04:13:33:82:c2:32:33:8e:01:86:b7:e5:81:
c0:88:2b:45:01:db:5f:57:f3:80:49:a7:ec:89:86:e0:9b:6d:
54:7a:2a:d1:d4:f1:00:fe:10:43:27:56:2c:70:b7:32:50:5a:
f6:9f:03:cb:1d:14:42:81:7f:6a:05:82:e2:98:49:18:f0:28:
ab:e9:e5:b8:c2:8c:a6:ee:99:b6:a9:8f:d6:17:55:88:97:70:
5e:8e:d5:58:42:40:72:90:e9:db:0c:07:98:81:05:72:4f:6c:
fc:54:0b:b7:68:54:d7:93:80:e5:86:01:26:bd:1b:49:55:54:
1b:51:dd:19:05:cf:32:e0:c2:df:c5:a1:a9:d1:c5:c0:c4:77:
1d:0e:d4:f9:e4:86:a3:99:db:71:f6:6b:26:b2:f2:57:38:a4:
f0:71:26:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz41pNn7Jhjvsd/GJMZKojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzU0OTU1MTQwNWQ5OTQ4YzY2MmRmZTRkZTI0ZGUwNTVk
YWZmNWUwHhcNMjUwODA0MDcwMjE2WhcNMjUwODA1MDcwMjE2WjAzMTEwLwYDVQQD
EyhhZjk2NThjZTE4ODlkZDllMTRhYTM1YTI5YTU5MDUyZmQyYTFhZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof1n22dG9HRtRiAl8qskCUpfuB8K
i4Qa3rf78wcWht6hSc9yQi0z5HmwX+yI6wdcTMS3JHkBJxapJ/SnNFwcw5YVzAjm
pbcLSfogQ766Uls1xrJJRGjKWfcH59jSJNiC+a14KQ7zCmuB7jllg4S9osYdhxZq
MSBOAql2pikee+yauMhtI7g3N2jtL5Ef1Wj4X2ti5v7ynN/Fcwh/HBes+t9W0Uly
MR2y750sw+ifmzQmF+tgO6IXaHeXOlaY3Ksy/PDbD3ULS0ryImEQ5ha+Mqbd++/t
ttzHDSXMFk/xM/YOB4C0oIo4pmD1t9Cc0U6IIrs+I7hFzmPrlm4UbeOgTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+WWM4Yid2eFKo1oppZBS/Soa+2MB8GA1UdIwQY
MBaAFMd1SVUUBdmUjGYt/k3iTeBV2v9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEt
MWJmNzVmNzVmYTg3LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81YTQzNDEtYmM1Zi00MjQ2LTkyZWEtMWJmNzVmNzVmYTg3
LzEveDNWSlZSUUYyWlNNWmkzLVRlSk40RlhhXzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTv2XmUg
E4ht3M5/XptB2nx3ZAjM+YxnbicCqtphW+rsogzByrN9R840CMurDTDPiR6OiY9A
PK2wRwOXt0keJ4jxtAv2IhkcwcNQ8Dl+AajdudIdFwYS1dUVDdG6gG4EEzOCwjIz
jgGGt+WBwIgrRQHbX1fzgEmn7ImG4JttVHoq0dTxAP4QQydWLHC3MlBa9p8Dyx0U
QoF/agWC4phJGPAoq+nluMKMpu6ZtqmP1hdViJdwXo7VWEJAcpDp2wwHmIEFck9s
/FQLt2hU15OA5YYBJr0bSVVUG1HdGQXPMuDC38WhqdHFwMR3HQ7U+eSGo5nbcfZr
JrLyVzik8HEmCg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:47 2025 by rpki-client