Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: UoFr8r6AF2BEZWGOkpdZ0Jk57jgYQjZZFBGiAXwZkfM=
Subject key identifier: 5F:79:49:DD:D4:5A:40:71:51:96:32:48:17:44:32:7A:27:21:1E:60
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 019A515158D6EADBDCB0F54D857098BF878B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 073D
Signing time: Wed 05 Nov 2025 00:01:16 +0000
Manifest this update: Wed 05 Nov 2025 00:01:16 +0000
Manifest next update: Thu 06 Nov 2025 00:01:16 +0000
Files and hashes: 1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: UlFrOC1O53GX8gnS/zcPlzTLMKb+uZDPkWYkvO8g3xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:58:d6:ea:db:dc:b0:f5:4d:85:70:98:bf:87:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Nov 5 00:01:16 2025 GMT
Not After : Nov 6 00:01:16 2025 GMT
Subject: CN=5f7949ddd45a4071519632481744327a27211e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:ff:8c:3d:4b:0a:7f:08:2e:66:f1:1a:40:
76:24:08:f9:ae:73:40:a6:78:0e:18:42:e1:64:83:
da:86:ae:43:06:29:62:3c:14:9b:96:e0:71:96:46:
07:b8:06:00:11:07:38:3c:00:04:b6:f6:3e:72:fd:
ae:e1:09:1a:15:40:0f:ef:71:a3:89:a2:67:e8:71:
38:a4:ea:66:8e:4e:42:fa:e0:bd:d0:86:c5:9b:f1:
86:14:e7:58:03:37:85:59:3b:54:d5:3e:99:2f:7f:
e2:bd:93:bf:66:53:ed:87:1a:8b:f6:a2:83:9e:10:
3e:de:7a:e7:bc:c3:25:58:0d:3a:33:ad:cd:3b:75:
78:71:27:b3:12:a2:e6:af:12:63:20:c0:75:82:02:
bd:8a:32:16:7a:09:a0:d4:e6:ad:b8:56:05:ff:82:
a3:9b:b8:36:54:d7:90:5e:4f:94:29:1d:cc:02:71:
2d:9c:52:5e:7f:58:43:84:72:62:21:32:d4:5c:ee:
3e:db:3f:7d:50:b8:a3:da:45:16:62:17:87:18:a7:
81:27:68:41:a0:ee:80:50:4c:ee:78:5b:d0:72:6e:
63:52:04:1d:79:49:8d:bc:8b:33:02:13:58:2e:07:
13:30:8d:2d:e0:19:40:a9:35:4a:75:a6:15:40:06:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:79:49:DD:D4:5A:40:71:51:96:32:48:17:44:32:7A:27:21:1E:60
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:54:15:82:30:e3:2f:5b:31:4d:05:91:6f:70:58:ff:a0:bf:
6b:0e:18:c2:ac:c6:b9:5c:14:ac:e1:9a:3f:75:85:d7:81:7e:
1e:e4:57:1b:7e:2a:a0:d0:e6:7f:a6:ac:43:bc:9d:25:80:1d:
f0:14:58:f7:1c:2f:77:f8:f9:1d:d7:03:7b:60:d2:95:f0:3b:
0e:d5:67:27:0a:a3:88:02:0d:82:9c:bd:82:19:04:cc:2e:3e:
3d:1f:b1:8f:18:7e:14:5f:72:b1:0b:a0:93:58:1d:c2:6b:31:
f3:03:8b:af:0d:42:d9:f7:5c:12:23:93:a9:3e:3a:cf:d0:b4:
39:7f:48:61:e7:3b:35:28:30:b8:7a:e3:7b:50:58:fd:c6:4c:
e8:e1:51:ea:74:81:d0:08:58:54:5a:bc:05:43:f1:36:3e:7f:
fc:d8:24:8e:d4:ee:ac:2b:16:cc:5a:3f:bb:96:7b:be:5e:11:
ad:18:d5:e3:bb:e5:76:e3:15:68:5c:5c:89:93:11:76:33:17:
60:b2:a7:48:33:1e:5e:bc:53:61:7a:30:13:a0:64:8e:ea:1c:
41:7a:2c:ca:05:a9:88:ac:44:75:70:73:4e:04:aa:9c:88:09:
cd:6a:d4:da:3b:f6:47:c7:ce:f4:72:b6:9e:18:0b:b0:91:49:
32:15:1d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:53 2025 by rpki-client