Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: wslGJYMfBfs4SDv4C1UBiR3yk2LJLl1BZP7HVy6ca74=
Subject key identifier: 79:7D:38:CB:EC:0F:90:0C:EC:13:1E:83:9F:E0:AF:F7:0E:0A:7D:6A
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 019A533F30543D35AAE73C494F43E29DA7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 1719
Signing time: Wed 05 Nov 2025 09:00:41 +0000
Manifest this update: Wed 05 Nov 2025 09:00:41 +0000
Manifest next update: Thu 06 Nov 2025 09:00:41 +0000
Files and hashes: 1: Nt8U8Z3kL0IxgChONZlb9wxsuew.roa (hash: q3bR4XOi7x1iBnBhyEpixBllLru5p/ZAb3mokEcvE1o=)
2: Zzn898alwJ-ZQ7BYnOoh1f9BcU0.roa (hash: ZfOULEhZA5KSiQObf0XfCp/rLlK21I+b+ae43OnFfqk=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: ITygbdGcN5gEK7Ob93KNR+zWDR8IDKjyL5AMp7muUZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:30:54:3d:35:aa:e7:3c:49:4f:43:e2:9d:a7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Nov 5 09:00:41 2025 GMT
Not After : Nov 6 09:00:41 2025 GMT
Subject: CN=797d38cbec0f900cec131e839fe0aff70e0a7d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:a7:54:1c:99:3d:6b:0b:21:63:01:8d:2c:
2a:0d:dc:60:53:9e:fa:16:c0:2c:aa:3c:9f:2a:06:
d8:3b:eb:bf:b2:1c:a9:15:c9:4b:6d:5e:56:0b:d8:
e9:c8:03:48:bb:10:9a:71:83:fd:64:be:50:57:23:
e4:ed:94:59:56:7d:a2:ba:cf:a1:57:d7:da:19:1f:
73:f8:25:c4:95:da:20:3e:54:43:0f:b7:86:fa:25:
4d:09:7b:e5:c7:7f:e5:be:87:0b:a1:1b:cf:f7:a6:
e3:b0:78:ca:ad:f4:d1:e3:8d:82:f5:75:37:8e:de:
ba:de:52:93:7f:32:83:cf:80:a3:81:c2:c9:23:48:
63:e8:75:0a:31:0e:7c:06:66:b3:c9:bd:0b:d4:df:
a6:d7:ef:e9:6d:ec:44:29:17:13:96:2a:62:df:22:
2f:89:60:b6:b2:2e:ab:02:52:9c:a1:de:cc:3b:f9:
ab:a7:d9:a0:a2:7e:4a:e1:c1:aa:7b:7b:d3:d6:a9:
a4:79:ef:84:43:7b:c0:4c:81:23:80:42:de:b8:25:
5f:29:3b:24:0a:7c:7c:46:7f:85:84:3a:4f:43:77:
8d:4e:66:b2:be:8e:c5:09:ff:3b:e2:f3:26:12:1a:
6a:a1:cd:32:08:58:49:df:b7:c3:d2:92:8e:00:dc:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7D:38:CB:EC:0F:90:0C:EC:13:1E:83:9F:E0:AF:F7:0E:0A:7D:6A
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:18:ab:b7:23:69:1a:2c:10:eb:5f:3c:8b:44:ff:09:ea:72:
f5:ce:ee:19:e3:5b:2f:56:09:1f:54:14:26:5f:b4:08:0e:37:
af:e7:b8:5a:53:8a:f0:90:b8:ae:23:a4:9d:f4:51:5c:17:bc:
67:f7:63:71:e3:67:78:31:ab:f7:2d:c1:10:0d:16:1e:fa:f0:
70:33:5d:34:10:46:7b:e1:89:22:9d:a8:6b:a4:79:b1:f5:8d:
ed:24:4a:35:7f:f7:60:84:bd:7f:b4:4f:fa:d3:4c:15:61:2c:
c6:64:66:f0:cb:64:25:0b:46:af:55:67:bb:d3:61:bc:07:2e:
a8:14:4d:60:e1:21:eb:b5:62:52:55:68:34:42:2a:e5:18:f2:
c7:17:55:19:c3:6b:91:2f:cb:21:93:31:64:10:27:1b:61:c6:
1a:bd:8a:fb:d5:cf:61:07:fb:da:35:33:0c:27:1e:b1:18:4f:
45:bf:9c:1a:12:10:34:74:ea:c8:4c:bd:d2:68:84:45:47:6f:
02:37:27:b1:8e:b5:7a:5d:56:49:52:46:25:a0:0e:7e:c9:ae:
ee:7c:e8:b6:8a:19:e1:09:1c:b0:7a:15:16:d4:09:c8:62:19:
19:61:f5:a9:c0:d2:a4:58:04:04:2b:b7:e5:7e:82:a6:a6:b9:
95:1e:a4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:23:45 2025 by rpki-client