Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: i5WzUvkBX6QX8vdEhXWELS+byw/1DdnONA/JI+Jxz1k=
Subject key identifier: 9B:48:A9:70:62:D4:91:DE:DA:9C:50:59:A2:EA:6C:E0:E4:29:65:66
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 01987418D5CC6ACD0117B0B76EDEA2989D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 08:00:41 +0000
Manifest this update: Mon 04 Aug 2025 08:00:41 +0000
Manifest next update: Tue 05 Aug 2025 08:00:41 +0000
Files and hashes: 1: Bt61Duabnrfk_tvUxqrlxq35pFs.roa (hash: 3mTb4E/hZOVdEv0TkUnMgMT0a7EJ9fK0ZGjFdNjhe4g=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: aKqeFJ31VntiYyeKKxC57cxOHx8E0EIuMiAdEIp0IR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:d5:cc:6a:cd:01:17:b0:b7:6e:de:a2:98:9d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Aug 4 08:00:41 2025 GMT
Not After : Aug 5 08:00:41 2025 GMT
Subject: CN=9b48a97062d491deda9c5059a2ea6ce0e4296566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:0f:06:9b:43:14:56:f9:16:7e:c6:da:13:
20:ac:0c:16:17:5a:09:5e:ef:5f:ba:78:b0:7e:1a:
d8:26:e1:38:d9:91:31:a0:2a:f9:6f:fe:b3:5f:39:
41:eb:8b:18:bf:4a:66:2f:a1:c7:ad:88:98:1d:49:
ae:f3:aa:6f:47:ef:62:e1:9f:23:46:d0:21:3b:06:
3f:da:ef:10:e6:e4:dc:16:d9:09:f5:7b:05:d2:04:
af:72:1a:6b:6f:96:86:18:89:82:f9:3c:91:c1:f1:
da:f6:7c:8d:e5:e8:d8:67:92:54:23:e5:39:a1:03:
f5:aa:ee:99:2e:15:16:c1:71:e9:dc:1c:f3:df:3e:
93:5f:0d:bd:34:81:7e:65:a5:95:4e:b7:c2:24:cc:
4d:3a:4f:8f:f9:e8:1c:c6:b6:37:cf:d4:fd:71:79:
ad:55:b0:a2:14:df:3f:1b:a6:6c:7b:12:f0:17:d6:
b0:52:a0:b3:4d:ee:51:d4:1a:76:27:d2:ae:cb:9b:
b0:2f:d8:e8:e4:a2:31:8d:ba:ec:1e:99:67:eb:d4:
dc:00:7d:d5:82:a8:dd:2b:eb:3a:44:6b:15:19:36:
30:b9:22:15:15:06:5b:e3:e1:0b:86:7f:8e:19:4b:
8f:b0:87:5e:02:69:4f:ae:35:74:1b:a6:3b:4d:d0:
88:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:48:A9:70:62:D4:91:DE:DA:9C:50:59:A2:EA:6C:E0:E4:29:65:66
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:fa:df:cc:92:30:16:7b:e7:df:ac:21:b6:65:f4:88:ca:86:
a6:f3:2e:cf:4d:b7:bc:5e:5f:dd:1d:e4:b8:38:3d:49:ca:74:
4d:32:ab:96:14:41:12:c5:db:28:ee:8e:57:ab:0b:e0:19:09:
d1:72:1a:74:d5:1c:d9:69:18:5e:f1:05:40:a1:a2:ac:62:22:
94:24:89:74:d7:d4:d7:62:39:c2:e4:01:b5:38:f7:b4:7c:2c:
6c:05:37:12:65:f7:7f:40:6e:a6:d9:97:ac:b3:3d:2e:74:20:
18:7d:0e:5a:38:5d:50:cc:4b:87:f7:46:9d:23:56:14:6b:fe:
ef:ce:4b:55:b1:6a:47:19:90:0a:8c:16:f1:28:1e:70:35:bf:
a9:7b:15:5a:59:57:3a:12:2f:84:3e:98:e9:21:5e:9a:a2:40:
d5:c0:7b:c1:ea:c4:1b:2c:41:29:ed:4b:0a:6c:20:05:24:06:
dd:0f:ba:58:68:43:fc:74:5b:33:9a:1e:a4:b9:8b:de:e7:3d:
de:fe:45:08:98:62:82:e8:d1:ab:79:6c:09:fa:59:4a:11:be:
48:58:0f:cf:dc:72:69:01:40:75:b5:cc:60:a3:6e:ea:8f:d8:
13:b9:fc:9c:78:00:6c:78:79:c0:d4:51:41:a6:1d:0d:78:ee:
01:b1:b4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:54 2025 by rpki-client