Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: Jik2p8nW/5TlVcM6HLnPLS+AK5bfunys/XjS0VtiReU=
Subject key identifier: BC:42:B3:89:0E:65:62:10:E7:32:67:10:81:41:2C:BB:B7:E2:B6:D3
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 019893360A2FEEDDAAB0057842C9029AAF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 1631
Signing time: Sun 10 Aug 2025 09:00:48 +0000
Manifest this update: Sun 10 Aug 2025 09:00:48 +0000
Manifest next update: Mon 11 Aug 2025 09:00:48 +0000
Files and hashes: 1: Nt8U8Z3kL0IxgChONZlb9wxsuew.roa (hash: q3bR4XOi7x1iBnBhyEpixBllLru5p/ZAb3mokEcvE1o=)
2: Zzn898alwJ-ZQ7BYnOoh1f9BcU0.roa (hash: ZfOULEhZA5KSiQObf0XfCp/rLlK21I+b+ae43OnFfqk=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: 6H+wXMjkOYwtBPdAhc4ILWW2YkB1ssIc6Ck/MDl57t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:0a:2f:ee:dd:aa:b0:05:78:42:c9:02:9a:af:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Aug 10 09:00:48 2025 GMT
Not After : Aug 11 09:00:48 2025 GMT
Subject: CN=bc42b3890e656210e732671081412cbbb7e2b6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:43:5a:05:33:2f:dd:91:b0:53:43:98:cc:
40:c8:ef:f0:10:ac:1c:e5:59:7b:35:55:92:d5:6e:
97:98:eb:72:d5:73:11:f5:6d:78:58:5b:5c:7e:e1:
91:8f:76:10:9f:c1:4e:d1:17:d6:59:17:0c:3e:78:
0a:ed:73:cf:1e:2c:b3:c3:af:c4:4c:32:6c:91:7e:
12:8e:28:82:45:f2:40:84:34:5a:88:33:0f:d9:ad:
36:58:ea:e2:ae:5a:75:c2:26:71:dc:7b:75:54:01:
42:6e:e8:cf:bc:08:66:f2:71:87:59:67:8c:92:91:
c7:57:0c:c7:3d:dd:26:42:dd:49:b2:07:1f:57:7d:
4b:38:a6:33:0f:23:2c:b0:b5:7e:0c:ff:cc:dd:75:
67:f3:1c:5a:b8:61:0f:62:c8:d9:89:ca:f3:c0:77:
a5:33:4e:cb:84:9f:55:1b:5d:33:39:d5:51:33:65:
ea:69:1f:c9:7e:71:81:b2:04:f5:71:7f:c8:78:b1:
c6:0b:42:69:b4:c2:dc:65:48:c9:8a:16:cc:d8:32:
97:a0:43:eb:4b:c3:d2:7b:c2:92:a5:b6:de:1f:67:
c0:99:04:e8:c6:7c:cd:f9:cc:37:7c:eb:e5:93:c4:
5e:fe:79:ba:8e:9f:67:3d:e9:3c:70:3d:e7:bb:44:
a9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:B3:89:0E:65:62:10:E7:32:67:10:81:41:2C:BB:B7:E2:B6:D3
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fd:6b:1e:2a:4d:a3:ca:e4:5a:ad:8d:b2:8b:76:38:b6:3a:
4e:ca:73:ee:58:9e:0a:72:2b:a2:7e:c7:2f:b3:63:9b:a8:ca:
09:61:71:5e:62:e2:5c:d6:a5:e1:4a:74:1b:77:b7:11:ab:92:
bd:ff:8f:9d:87:27:05:8e:3e:d9:72:72:a8:00:82:c0:ae:40:
ee:c5:bd:a0:61:cf:d6:2e:55:63:da:69:46:1e:a2:5c:55:cc:
8c:07:28:81:17:12:5a:94:ef:39:9c:91:f0:08:b5:9b:af:79:
9e:b8:ec:b7:87:68:d3:ca:a5:e2:c4:b1:a4:4c:1d:9d:60:b4:
52:da:1a:d7:eb:75:a1:bf:43:2d:e1:9c:93:46:6c:1e:be:4a:
23:ed:de:25:be:b3:56:b6:8c:c5:66:61:b3:42:91:8c:3d:5f:
e6:d8:d0:f0:12:08:99:4f:31:fe:15:50:f7:19:db:cf:72:29:
fb:4d:1f:27:38:aa:41:d4:a7:42:5c:87:49:59:3d:77:b4:a1:
ad:fe:04:7f:b8:d2:43:b4:75:99:ba:d5:ee:b5:76:c3:df:d2:
e7:b9:fe:55:70:1c:50:0c:3a:b5:aa:39:f1:17:4f:23:71:f3:
c9:01:6c:84:58:91:b8:49:26:50:d0:ea:eb:98:41:50:ae:74:
1b:77:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:14 2025 by rpki-client