Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json)
Hash identifier: 00nhoUCiP3cl8bBV6QP3gBO3cask12YDodknzGVL4fM=
Subject key identifier: BA:8F:A6:89:48:16:87:F7:22:55:32:7F:8E:78:5B:A7:A7:EC:F4:06
Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0
Certificate serial: 019872CFB337E40B33AB9592F0ECFAE51A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
Manifest number: 10C3
Signing time: Mon 04 Aug 2025 02:01:11 +0000
Manifest this update: Mon 04 Aug 2025 02:01:11 +0000
Manifest next update: Tue 05 Aug 2025 02:01:11 +0000
Files and hashes: 1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: utyi7c34SbWkD+BFpYOV0VkxhULnmwKbVj0I2CQgPRM=)
2: jCidCoQkb9m_tYCwbsjakuBhgIs.roa (hash: jOA4Ka8w8nTlTA322uZQYTOcTgRSM76k9RTxieaFemI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:b3:37:e4:0b:33:ab:95:92:f0:ec:fa:e5:1a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0
Validity
Not Before: Aug 4 02:01:11 2025 GMT
Not After : Aug 5 02:01:11 2025 GMT
Subject: CN=ba8fa689481687f72255327f8e785ba7a7ecf406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3d:64:2b:1a:ce:be:1b:1b:7f:4c:08:c3:ef:
8d:44:81:e8:4a:f0:b9:88:b6:b7:67:fa:d1:23:58:
03:53:20:6b:26:de:9d:b2:f0:e2:21:ba:4e:cf:32:
f2:f2:f6:da:2a:20:d6:f9:d3:6a:b9:86:9f:22:25:
27:db:e7:43:dd:22:7b:95:fe:e6:22:2c:70:a1:00:
ce:54:8f:ef:3d:e9:a2:4d:64:d3:b1:6b:b7:1b:7f:
d0:e4:13:d5:c7:26:47:16:ea:4e:d4:87:e9:c1:09:
2c:7d:a5:f4:b6:1b:9a:36:51:58:2c:a1:39:32:92:
e8:9e:67:58:d2:d8:5b:b4:da:bb:a1:e7:0f:a2:93:
e4:0e:aa:6b:a2:9a:50:8e:67:5e:a0:bb:6e:05:31:
c3:28:cb:ea:7a:a2:65:6f:16:51:30:d3:bb:c8:cf:
d0:20:02:3e:74:87:d0:1c:a6:6d:42:78:94:cf:b9:
b4:ff:cf:22:7b:27:91:6a:a4:4c:0c:f2:47:da:0d:
d9:23:97:1b:01:28:b9:6b:0e:20:d6:70:a9:b8:59:
9c:77:e5:52:df:54:14:2c:2f:fb:ec:93:4b:24:36:
3f:ad:8a:98:2d:52:e4:83:4e:83:bd:8e:12:92:c4:
1e:1a:17:28:7a:5b:9e:97:dc:bf:68:8e:cd:fd:2b:
06:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8F:A6:89:48:16:87:F7:22:55:32:7F:8E:78:5B:A7:A7:EC:F4:06
X509v3 Authority Key Identifier:
keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3e:6c:5f:dd:c9:8d:c5:10:c6:c1:22:3f:a5:13:cb:c5:ad:
97:f1:96:34:14:7b:59:bc:d4:86:5f:ef:a6:ce:69:54:d4:2e:
81:f4:03:af:20:8a:e7:74:b3:ec:d1:df:d0:eb:d2:4b:a7:7e:
8b:b3:15:88:ee:ea:77:ec:0c:9e:88:27:36:0c:1a:28:1b:4a:
f6:64:bc:d0:d4:ef:24:e6:b4:a1:e0:53:bf:b8:20:bf:b0:c4:
a6:16:4d:25:9b:92:ce:d0:99:ed:0d:6d:19:57:63:15:9f:89:
e0:e1:01:56:c7:f1:11:df:5c:5e:ac:83:de:fe:28:6b:cd:5e:
6a:1f:98:c1:14:0f:5e:29:1c:d9:d7:7d:17:16:4e:ec:12:fb:
91:95:98:fc:9f:f9:e4:97:41:2a:4a:c2:f6:d0:0d:5e:ac:b3:
c9:1c:08:58:cf:c5:3f:2d:e3:5b:8b:61:be:5a:45:3d:9b:ed:
02:20:ff:8a:a7:78:f5:d1:3f:4e:54:e6:24:97:6e:88:28:d2:
6e:0c:11:7e:55:e1:c5:a9:45:1f:c0:e8:4a:9d:a0:41:93:4a:
21:6e:c2:df:5a:13:c1:d7:4b:d0:1b:08:6c:2c:d7:bf:70:65:
f1:0c:25:99:5e:17:24:27:e2:dc:fb:38:05:10:27:99:15:b6:
9b:43:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:26 2025 by rpki-client