Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: Rius5VFz7YdCHGgFed8l6p56vqWm8TwYjTjzrO9UOjM=
Subject key identifier: 92:45:67:C0:A1:39:5B:36:22:23:E8:B6:2B:1F:97:1F:34:DF:E7:52
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 019A4D3D3BF9B848E9EC120366EF08D6C894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:49 +0000
Manifest this update: Tue 04 Nov 2025 05:00:49 +0000
Manifest next update: Wed 05 Nov 2025 05:00:49 +0000
Files and hashes: 1: Bt61Duabnrfk_tvUxqrlxq35pFs.roa (hash: 3mTb4E/hZOVdEv0TkUnMgMT0a7EJ9fK0ZGjFdNjhe4g=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: bivpBx0VC7UTmufNk3g5K4zjORso6CEEBwsmQ5DsyQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3b:f9:b8:48:e9:ec:12:03:66:ef:08:d6:c8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Nov 4 05:00:49 2025 GMT
Not After : Nov 5 05:00:49 2025 GMT
Subject: CN=924567c0a1395b362223e8b62b1f971f34dfe752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:cd:5b:44:c9:fa:48:92:6a:69:7a:d7:4b:
78:66:c9:32:e0:54:73:15:05:2c:68:5c:91:44:7e:
b0:fe:47:91:3a:06:2d:78:75:5f:e8:94:cc:f3:22:
d6:c6:13:13:10:64:83:50:9f:ed:8c:36:9b:94:82:
29:b3:6f:0f:1a:34:d7:6c:37:9e:5b:c0:29:d6:7d:
a6:8d:c1:2e:30:6d:44:4e:b5:16:e6:bc:28:25:d3:
13:1c:0a:31:bc:71:71:b9:4c:b5:a0:3c:f5:c2:d8:
f2:e8:bd:ff:34:a4:42:f5:93:94:25:3d:ed:37:41:
9b:8e:c9:7f:bb:1b:45:16:04:cb:97:73:89:f2:0f:
4d:7c:b5:12:05:07:2a:f0:b0:b5:75:bd:da:f2:05:
9d:16:c8:0f:4d:9c:d3:65:06:b9:a0:b4:6f:8d:3e:
31:33:51:8f:92:af:28:21:5c:3b:5e:f1:9f:3f:5d:
e8:8b:ae:4c:fc:48:ac:78:e8:cb:30:d8:82:da:5f:
64:e5:11:8a:01:22:95:72:50:d5:da:31:e9:93:85:
62:4f:be:2c:e2:97:7b:2d:c8:07:9f:30:93:29:6c:
01:bd:25:0d:98:ec:b3:e8:e3:ac:23:b7:44:01:d6:
fc:74:89:11:dd:b6:9f:94:df:5c:59:9b:1e:17:cf:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:45:67:C0:A1:39:5B:36:22:23:E8:B6:2B:1F:97:1F:34:DF:E7:52
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fe:6e:0e:c4:bf:6e:b4:c5:fa:52:e7:6c:d4:a8:14:da:04:
16:f7:14:0f:72:93:24:8b:50:ba:1c:9e:e4:fe:b7:20:6b:46:
9e:e9:9b:de:4f:ef:61:45:b8:32:38:99:5e:d3:9d:44:a8:e7:
82:5c:93:23:19:ae:45:88:0a:9f:08:b2:71:c3:91:7d:07:11:
98:f8:60:f7:23:b6:d2:9a:e7:ce:90:30:f8:65:9a:94:90:0c:
d1:54:50:48:33:92:46:8c:24:aa:85:ab:55:33:6e:0a:bf:c7:
d0:a6:f7:5c:f5:b4:cd:4c:c9:ef:02:aa:f6:5a:72:db:2f:33:
1b:56:ed:13:35:08:dd:23:a4:91:48:bb:ec:a2:ed:d5:ce:f6:
c1:5d:18:c4:a7:6e:b7:54:6a:4c:25:ce:7a:98:30:ce:48:2a:
b3:92:ba:d2:58:4e:9c:38:2e:08:b1:42:1a:f2:cc:ec:1e:70:
fc:d3:f9:99:48:45:cb:97:63:e1:9e:9f:37:25:e2:db:2b:7f:
ab:b2:76:1a:cd:33:92:62:b2:a3:a8:11:9e:94:a6:33:e7:34:
f3:37:ac:ae:97:72:77:b8:63:54:e0:88:34:00:69:78:5e:a1:
c2:dc:f7:34:19:30:8f:ac:26:45:19:3c:8c:98:1e:7c:82:c0:
31:59:51:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPTv5uEjp7BIDZu8I1siUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2E3NjM5MjU1NjExOGEwY2VlYjU0MTMwNjY5YzhlNjk2
ZjE1NWIwHhcNMjUxMTA0MDUwMDQ5WhcNMjUxMTA1MDUwMDQ5WjAzMTEwLwYDVQQD
Eyg5MjQ1NjdjMGExMzk1YjM2MjIyM2U4YjYyYjFmOTcxZjM0ZGZlNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruTNW0TJ+kiSaml610t4Zsky4FRz
FQUsaFyRRH6w/keROgYteHVf6JTM8yLWxhMTEGSDUJ/tjDablIIps28PGjTXbDee
W8Ap1n2mjcEuMG1ETrUW5rwoJdMTHAoxvHFxuUy1oDz1wtjy6L3/NKRC9ZOUJT3t
N0Gbjsl/uxtFFgTLl3OJ8g9NfLUSBQcq8LC1db3a8gWdFsgPTZzTZQa5oLRvjT4x
M1GPkq8oIVw7XvGfP13oi65M/EiseOjLMNiC2l9k5RGKASKVclDV2jHpk4ViT74s
4pd7LcgHnzCTKWwBvSUNmOyz6OOsI7dEAdb8dIkR3baflN9cWZseF8+FbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJFZ8ChOVs2IiPotisflx803+dSMB8GA1UdIwQY
MBaAFMd6djklVhGKDO61QTBmnI5pbxVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQt
ZmZiM2E5NjUzOGFkLzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84YjFkZWItYWVhNy00OGQzLWIxZmQtZmZiM2E5NjUzOGFk
LzEveDNwMk9TVldFWW9NN3JWQk1HYWNqbWx2RlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATP5uDsS/
brTF+lLnbNSoFNoEFvcUD3KTJItQuhye5P63IGtGnumb3k/vYUW4MjiZXtOdRKjn
glyTIxmuRYgKnwiyccORfQcRmPhg9yO20prnzpAw+GWalJAM0VRQSDOSRowkqoWr
VTNuCr/H0Kb3XPW0zUzJ7wKq9lpy2y8zG1btEzUI3SOkkUi77KLt1c72wV0YxKdu
t1RqTCXOepgwzkgqs5K60lhOnDguCLFCGvLM7B5w/NP5mUhFy5dj4Z6fNyXi2yt/
q7J2Gs0zkmKyo6gRnpSmM+c08zesrpdyd7hjVOCINABpeF6hwtz3NBkwj6wmRRk8
jJgefILAMVlRsw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:42 2025 by rpki-client