Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
File: V3zQhta4KSWruLuBXmWIUlIuCSE.mft (raw, json)
Hash identifier: Tgb13I9Ud4OSMkGBz9ZSas3pRxtmfrdNXaZWyD4piYU=
Subject key identifier: 4C:C7:7C:53:2D:D0:F7:DE:76:E0:53:92:C1:7E:D5:48:F4:E0:F1:8D
Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921
Certificate serial: 0199FC217156CBCC833CCDCCEF33D182B2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: 2rRfCyoNB-FJKFhJjElIAYCjuZM.roa (hash: BxYRtCrYD8JZ1KlROq/oLLjDfPXIXRywkgLQEAE4Bdo=)
2: V3zQhta4KSWruLuBXmWIUlIuCSE.crl (hash: +V2YbGi5+RNDCMdpIt4C1da8B85TUng6R0FU+yJOXeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:71:56:cb:cc:83:3c:cd:cc:ef:33:d1:82:b2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=4cc77c532dd0f7de76e05392c17ed548f4e0f18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:43:4f:59:77:91:a9:49:37:b1:71:6d:e2:c1:
4a:1a:ee:9f:25:90:2f:20:b0:36:9e:bf:d0:78:32:
c2:3a:56:ae:fb:49:d4:44:77:c7:22:f7:3a:35:53:
49:86:e4:21:77:f1:7c:e1:44:85:b0:68:d6:d0:70:
ba:54:55:0e:37:4f:7d:07:73:ce:6f:be:f1:31:7b:
9a:1d:0e:d4:86:ac:ef:8e:be:a8:c2:a0:e3:0b:df:
f7:62:c3:de:c1:4d:51:df:ea:42:44:ff:84:e1:b0:
c1:8a:04:74:23:d4:57:40:ee:c8:62:5d:ac:8f:0b:
21:6a:c6:97:f3:2e:03:fd:ef:4c:1a:51:1c:8e:8f:
f3:1a:d9:50:54:72:6d:17:97:f1:28:e2:5b:d8:e4:
8a:14:80:44:ea:ad:a1:c7:85:36:1a:ea:8f:4d:20:
2c:20:34:3d:2b:89:c2:e5:3f:b3:c3:10:45:af:57:
19:89:e1:d7:81:24:54:2e:e0:54:ac:31:e8:20:73:
e9:1d:34:4b:45:cc:ef:60:35:d9:19:6b:cf:0b:d2:
ae:fb:9b:e9:86:84:19:3e:e2:77:70:0f:cf:4b:0b:
2c:88:60:9a:52:d4:37:56:5b:ee:f4:fd:74:62:92:
f9:49:15:c3:c1:61:5c:80:f4:51:a5:0b:e9:da:85:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C7:7C:53:2D:D0:F7:DE:76:E0:53:92:C1:7E:D5:48:F4:E0:F1:8D
X509v3 Authority Key Identifier:
keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:09:f0:44:dd:a5:f0:02:94:37:a7:19:c3:79:c7:97:9f:7d:
e9:93:bc:72:59:7f:11:d2:37:35:97:40:45:8c:d7:5f:5b:b8:
d1:c1:b3:27:b2:8d:6c:f7:bf:c0:7a:21:74:42:c0:15:73:c6:
c4:ae:f4:0e:3d:bf:85:b5:23:52:fd:a3:4a:bd:85:70:f1:f5:
99:28:3e:85:2b:d7:b4:fc:44:85:04:cf:b3:9d:da:8e:90:f8:
06:63:6f:33:77:59:6c:1d:20:ee:fb:f3:e5:1c:e3:3c:9c:24:
bd:94:33:21:ba:c5:a5:4d:df:87:5d:b9:0b:7a:c4:d0:6f:2e:
f8:76:69:35:5a:2a:ba:84:df:b3:b7:58:46:59:da:96:6e:72:
36:6e:7b:2e:bd:b1:c6:e9:10:53:89:64:62:a8:0e:30:f2:f1:
bc:bd:0c:a7:68:65:88:8e:cb:02:a9:3d:80:2d:7d:bc:c1:d2:
06:ed:e3:4b:cd:cb:44:e3:8f:82:b1:56:94:e2:62:d6:db:0d:
2a:75:3d:49:79:65:38:79:86:3b:59:af:11:c5:a1:5a:96:aa:
65:21:2d:04:c1:49:98:82:3a:8c:94:a8:2a:9e:ed:ef:ca:a8:
c1:12:9a:2f:61:75:7d:63:f3:1b:cd:b3:c1:f3:02:f4:ce:50:
49:f3:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:12 2025 by rpki-client