Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
File: x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json)
Hash identifier: jshw8oXAdrsUpchWZdYTdHm1PIxYownB3oQ3Li+rg8g=
Subject key identifier: C3:F0:4E:09:17:E0:C2:19:32:2C:1C:43:8F:34:87:3E:DE:3B:1F:A4
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial: 019A4D07578CC910A6663234F5E7AFB81755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
Manifest number: 1107
Signing time: Tue 04 Nov 2025 04:01:58 +0000
Manifest this update: Tue 04 Nov 2025 04:01:58 +0000
Manifest next update: Wed 05 Nov 2025 04:01:58 +0000
Files and hashes: 1: 9QkZQFFq52UED9EyY0jKnFH-pX8.roa (hash: qLNZsCVw5BE1cHr6HyybImHSaQWc8kutbUnGNRzqfeU=)
2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: js2DnTNwl4OBCqP48SgBLLLbBvmivj1Z7T2zeKiwe68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:57:8c:c9:10:a6:66:32:34:f5:e7:af:b8:17:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Validity
Not Before: Nov 4 04:01:58 2025 GMT
Not After : Nov 5 04:01:58 2025 GMT
Subject: CN=c3f04e0917e0c219322c1c438f34873ede3b1fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:7a:e4:e8:ce:58:97:e9:50:bd:19:66:77:
b1:86:90:3f:a3:40:6c:62:6d:98:f6:72:a1:98:52:
e7:cf:80:2e:1b:1a:a3:63:c7:4f:97:17:dd:e3:b2:
b5:60:45:04:8d:8f:59:70:13:cd:ef:2b:f7:13:69:
e4:db:cf:e5:43:28:92:25:6b:a2:91:93:20:74:8f:
4d:e2:36:b8:13:9b:b1:48:27:e4:09:01:e2:12:60:
72:c7:66:98:86:31:58:30:92:4f:43:3d:30:05:f4:
4b:bd:b6:c2:9e:35:79:3a:90:90:03:36:dc:31:b3:
dd:40:2d:08:5b:8a:39:82:bd:43:00:3a:cb:ba:f3:
16:7a:71:1a:b3:79:62:02:b4:c6:5a:df:78:84:af:
63:01:1d:5f:a4:be:19:e8:03:84:e2:9b:1c:6c:19:
f6:c0:06:a6:5e:c0:c6:eb:e0:4f:b1:fe:ce:d7:4c:
c9:03:37:8c:4e:bd:7b:16:1f:95:6b:83:bf:e8:b6:
8e:21:c9:f1:c4:41:93:eb:a7:a6:da:83:ec:b7:cf:
12:fd:27:9c:c0:a5:40:e5:c1:b4:ff:4a:44:04:f4:
2e:f4:1f:0b:c9:b3:cf:2b:d8:52:08:60:77:91:45:
86:4b:dd:87:fb:73:47:08:7b:c1:a1:d1:f0:26:fa:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F0:4E:09:17:E0:C2:19:32:2C:1C:43:8F:34:87:3E:DE:3B:1F:A4
X509v3 Authority Key Identifier:
keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:36:73:6c:bb:3c:b4:78:ce:87:7d:eb:36:e0:b9:7e:a6:61:
10:cc:64:dc:07:c0:ae:36:3a:06:a0:81:0e:e4:b3:bb:2c:66:
cc:4f:65:c0:b6:d3:f9:46:47:c5:30:f0:c8:b9:cd:66:5f:b7:
ff:75:3f:87:7a:fa:8e:88:f9:5b:20:1c:cb:63:f6:bf:f0:16:
2e:aa:d0:43:05:99:16:39:7d:7b:67:92:57:f6:c4:09:3a:d7:
04:43:9d:5c:0b:19:29:7c:5c:ff:09:3f:f2:ef:45:6c:3d:bc:
24:1f:17:2b:aa:fe:48:ae:78:9b:04:08:02:f5:b0:d4:f2:51:
66:aa:d5:d5:ab:2a:94:3d:b4:f7:75:6a:71:de:01:9b:ce:ca:
ce:8e:4d:25:ff:c8:1e:46:e1:b7:b1:47:c2:3f:5b:2d:01:9c:
51:d7:cf:6c:6c:9a:8d:6a:bb:68:97:ce:2e:ef:10:41:1e:b5:
b5:bb:e6:53:65:e8:aa:62:5f:01:a8:ee:8a:8c:10:2f:cf:ea:
69:04:cf:6b:f9:09:ab:a5:96:ab:a7:ba:35:d0:09:31:0e:ff:
1b:1d:86:d0:fe:11:fc:aa:12:8a:3f:cb:dd:c0:17:bb:13:dd:
72:7b:fa:93:b2:92:6f:64:45:56:d4:2d:72:45:f4:a3:a3:5a:
61:4d:51:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:45 2025 by rpki-client