Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: pnerrA+ketpWBJVkUEVxEP89m0hv41C3NS3eEmwZxOU=
Subject key identifier: 93:0A:6C:9A:FB:C4:3C:A9:50:7D:B2:D1:5D:F2:6B:0A:2B:50:15:62
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 0198952442C7D897FC5A35A5964D7CF5196F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 0657
Signing time: Sun 10 Aug 2025 18:00:38 +0000
Manifest this update: Sun 10 Aug 2025 18:00:38 +0000
Manifest next update: Mon 11 Aug 2025 18:00:38 +0000
Files and hashes: 1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: QvJbAka4Tq1iHzXFWheLEpBzJ9Put7br/x7KBugSZes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:42:c7:d8:97:fc:5a:35:a5:96:4d:7c:f5:19:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Aug 10 18:00:38 2025 GMT
Not After : Aug 11 18:00:38 2025 GMT
Subject: CN=930a6c9afbc43ca9507db2d15df26b0a2b501562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:d2:72:ea:07:0e:55:f7:18:50:d5:9b:77:
88:9b:ff:22:20:ee:c7:7b:80:ec:72:d8:5c:7d:62:
01:49:cb:6f:f9:2e:49:cc:79:0d:57:30:e6:29:8d:
92:e2:27:94:b0:0f:c4:12:14:bc:82:55:af:c4:0e:
4e:1b:ee:2b:fe:f2:bd:b3:4e:2f:4a:11:e9:86:e5:
c9:db:a7:55:cd:e2:6c:6f:a7:b3:5d:98:49:0e:52:
b0:61:4b:4c:1f:9d:fa:44:40:f6:0b:58:87:74:d1:
f8:16:a6:76:ea:57:ca:4b:94:54:53:49:fe:11:ac:
96:de:84:41:24:0c:49:82:ad:b6:bd:b4:17:a6:19:
3f:4a:50:86:f8:28:39:4e:aa:27:60:f0:44:2a:4b:
16:37:76:7a:6b:74:9d:5d:c9:95:26:4b:da:b9:fe:
63:17:ec:56:9c:61:12:6a:0d:0c:54:99:67:79:97:
c7:67:65:9c:9b:ed:eb:bc:b2:6c:1a:db:77:31:f2:
8b:9a:b4:56:7e:81:33:72:82:e8:db:c9:71:63:b7:
86:44:fd:9b:01:f7:f2:dc:45:86:63:a0:46:1b:ed:
31:e3:6c:d4:d4:02:cc:ed:b7:f4:b4:03:24:ae:e5:
d4:79:9b:95:a4:5d:1a:1e:0c:85:bd:2a:7e:3e:58:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0A:6C:9A:FB:C4:3C:A9:50:7D:B2:D1:5D:F2:6B:0A:2B:50:15:62
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ba:6f:6a:7d:ba:5a:6a:4f:26:50:a5:ca:0d:0c:64:82:44:
53:99:ff:8d:52:45:5a:19:db:77:5e:12:e6:2f:ba:b3:ed:53:
2a:aa:e6:0e:9a:93:24:d0:bd:63:86:a7:a9:60:53:86:02:1b:
70:3a:29:57:a3:8a:1f:7d:10:1a:dc:17:73:90:31:af:fe:30:
cd:de:40:98:7c:07:d3:69:03:d1:76:a9:e9:08:0a:dd:a0:b2:
c6:0f:31:25:f8:46:f4:59:99:a2:74:65:22:00:93:0a:32:49:
1f:7a:19:9d:fa:b5:62:77:19:a3:44:80:d4:e4:dc:28:bd:3f:
cc:fa:ef:9a:05:74:3f:5e:80:37:05:f0:8e:ba:d4:b9:20:8d:
b7:a0:40:bf:bd:87:2e:61:d0:84:56:97:35:71:0c:47:2a:59:
fe:5d:4d:1b:35:d8:b3:1f:11:7e:c5:d7:7d:38:28:15:40:28:
35:b7:a3:75:21:9b:c8:69:be:89:45:e4:e5:ed:49:60:ea:f9:
cf:0e:2b:1c:67:a0:ee:49:29:91:61:9e:6a:24:7c:28:12:bf:
1d:98:82:eb:98:a9:4f:49:ff:07:38:2f:b9:3d:9f:2a:73:bb:
7a:9e:15:03:a0:83:6c:9b:14:58:5f:b0:a9:dd:6b:21:16:df:
59:6b:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:58 2025 by rpki-client