Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier: upcq+P1TJUfqhqgn9nZJEoJH0buDMdq5xQ3906tyrz4=
Subject key identifier: D8:25:B4:75:47:64:09:71:70:77:97:52:3C:FB:B9:F2:C3:18:30:47
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial: 019A4EF488F2DA1975DAD0FBC7DA8A3C17F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: iMH-2vRf9YeMGRgtztJPUn14aQA.roa (hash: 76FrL/HDDuxO7pj6zl8q4Zgif4vNwjOmJyQV7tycvQk=)
2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: YA232caxl3ACzYi1M7oinvmBNKVU+0+GQ7+nGgvbDK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:88:f2:da:19:75:da:d0:fb:c7:da:8a:3c:17:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=d825b47547640971707797523cfbb9f2c3183047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:a6:07:72:b4:e3:29:96:e3:61:47:75:f0:
0c:14:97:c0:df:eb:0d:9b:76:2a:de:54:c0:b2:80:
e0:be:70:8d:fa:20:1e:de:ec:c3:49:a5:fb:58:1b:
a1:03:c4:59:59:db:23:44:a6:51:bd:31:df:f7:c1:
b6:cd:bd:fb:43:9e:65:4c:bc:b0:3b:92:09:8a:49:
b9:6d:3a:e5:01:0e:c9:65:20:37:fd:2f:1a:51:ae:
29:a0:53:20:14:37:15:19:bf:3b:e5:93:4b:ed:ea:
43:66:cd:93:cf:8f:4a:33:a2:bf:cd:11:90:10:b5:
89:0e:d1:4b:d4:4d:f4:cf:bc:ca:15:9b:4e:03:03:
ad:75:cd:0a:ad:43:3a:0b:b7:67:dc:1a:08:6b:4b:
54:19:0d:7a:2b:ed:46:bd:3d:02:09:ab:90:7a:5c:
06:18:e7:a5:91:b1:cc:79:90:34:61:30:e4:d5:8e:
bc:4d:5a:1a:ef:97:2d:2a:37:94:14:ba:f0:d7:07:
36:07:f6:08:17:95:b2:f3:10:1b:78:70:28:a9:a3:
cc:3a:69:17:9e:2a:91:c9:d4:cc:7a:04:32:ea:7f:
f3:10:da:b0:08:93:86:63:47:ef:44:4e:3f:54:5c:
80:2c:47:dc:53:5c:6b:83:45:27:42:da:d3:f8:bd:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:25:B4:75:47:64:09:71:70:77:97:52:3C:FB:B9:F2:C3:18:30:47
X509v3 Authority Key Identifier:
keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a8:ae:6b:d6:9c:ab:68:82:ea:d7:c8:65:96:a9:fd:d7:99:
3f:b9:8c:b5:07:c7:99:15:1d:9f:bd:e7:4e:9b:97:83:6f:78:
44:19:8d:92:e1:a7:50:ee:55:4f:d6:a9:1b:cd:10:cb:96:77:
6d:1b:02:de:3c:7a:23:da:fd:c1:16:1c:61:26:6a:41:e0:ae:
a0:22:be:98:16:b1:31:e8:78:03:09:7a:31:29:99:c1:16:b4:
57:24:15:86:97:38:d2:64:4c:12:62:7f:34:33:9b:a1:f8:56:
f6:e6:25:cb:cc:68:4a:47:51:c7:79:b1:06:9e:70:f6:8a:81:
8d:20:da:ca:11:c3:5d:3a:54:5b:cd:58:5c:18:fc:d6:2a:e1:
cf:c5:31:65:28:5f:f5:34:d9:7e:7e:a6:de:ea:c5:78:93:d8:
44:ab:dc:f6:bc:29:b3:e5:09:98:cc:ce:eb:e9:81:e0:43:12:
00:d4:51:a7:a3:6a:3a:19:a0:ba:3f:e8:e8:a1:e6:c4:5b:4f:
d4:fa:64:a3:ad:b3:9f:e5:ed:42:09:ed:9d:2c:33:14:4d:8f:
d7:c9:10:5a:a9:67:95:27:49:30:d4:92:2c:2e:be:be:a7:1b:
57:2e:09:8a:10:a1:41:ee:f7:3d:08:52:df:7a:d3:3d:6c:1f:
bb:79:b1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:27:59 2025 by rpki-client