
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File: V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier: JI0kI7YYrMTScrJGZairsx3Ks9DGhynta3MPzjWM9xQ=
Subject key identifier: D4:49:57:70:D3:A3:E2:82:0C:6F:D8:7A:5E:2C:F4:DD:BA:1C:D6:9A
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer: /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial: 0197B5FBD8298EAA790B60443BCE641D4D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number: 0125
Signing time: Sat 28 Jun 2025 10:01:10 +0000
Manifest this update: Sat 28 Jun 2025 10:01:10 +0000
Manifest next update: Sun 29 Jun 2025 10:01:10 +0000
Files and hashes: 1: IwKSwRXA9Ph0qRohZhJ0WEYVgOM.roa (hash: RFNUKmFIpsyvimoGalaE9V72k6NP7c6/ODYYIyEjkmE=)
2: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: WyU10T+3fep4X2/jetQBFCi7Lg1fmpesgjkcYzTJdhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:d8:29:8e:aa:79:0b:60:44:3b:ce:64:1d:4d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Validity
Not Before: Jun 28 10:01:10 2025 GMT
Not After : Jun 29 10:01:10 2025 GMT
Subject: CN=d4495770d3a3e2820c6fd87a5e2cf4ddba1cd69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:b9:73:58:f3:15:0f:59:45:c5:be:d5:97:
f8:ea:25:a8:e7:e7:cf:88:a4:69:91:34:8b:3d:e7:
83:71:42:45:14:80:0e:f9:9c:37:ee:8f:29:41:0b:
f9:85:de:05:74:a6:1b:f5:92:00:13:db:e6:33:ee:
f3:e8:3b:d1:d5:9c:e9:bc:da:f1:a8:33:07:b3:af:
e0:14:eb:aa:74:e8:2c:2e:bb:e6:d8:0f:19:59:65:
56:1a:fd:f8:25:47:bc:fd:f5:85:bc:e7:f4:50:f7:
d6:56:13:20:86:9d:0e:e8:02:46:e9:a9:11:e7:39:
fd:3b:b8:d5:b7:9a:03:9b:58:00:fb:36:0d:34:45:
fc:56:bb:b8:4f:10:8d:6e:4c:91:3a:8b:0e:09:2e:
7b:41:ea:be:01:ed:7d:de:a6:41:b3:a0:78:7b:49:
51:58:3b:ec:da:52:f6:c1:70:50:09:ba:fd:aa:27:
d8:78:fa:ce:38:97:0e:39:e0:6b:1d:3f:8e:c0:b9:
25:e3:e6:e7:1c:98:95:da:a6:80:c7:02:60:a3:ff:
b5:9b:82:cb:a8:1b:6e:2e:40:30:3b:0a:de:bc:37:
d0:3f:c0:d4:5d:e0:7f:b2:4b:f4:d6:8b:e8:eb:1d:
ba:d4:bb:2e:a4:13:48:05:72:f0:29:f6:2d:9d:f2:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:49:57:70:D3:A3:E2:82:0C:6F:D8:7A:5E:2C:F4:DD:BA:1C:D6:9A
X509v3 Authority Key Identifier:
keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:84:29:55:df:e0:f8:a9:16:e4:96:d8:d9:d9:6d:02:c6:72:
aa:3b:39:32:f7:07:fc:26:e1:c1:1c:72:58:73:c9:e6:fe:f4:
78:95:01:d7:e6:2f:a9:0f:01:0e:2d:f8:94:46:65:c5:e6:c2:
e9:ef:10:25:23:03:16:8d:59:16:e6:5b:51:ef:5e:3f:c1:ac:
8e:33:cd:fd:9c:54:2b:3e:f6:6c:9c:51:88:21:f3:70:4c:26:
3c:4c:93:25:7f:9a:cb:15:16:95:5e:df:cf:d9:c7:72:44:d7:
31:06:89:1f:bf:a3:36:e8:c8:c9:9e:06:9d:55:7f:3d:1e:17:
17:7d:29:97:14:be:a9:15:85:f6:2d:14:fe:1f:30:7d:12:9c:
60:2a:f1:11:c2:f6:0e:98:8e:e5:5e:93:2c:35:4c:2e:a7:93:
5a:d2:ed:db:10:60:4e:c0:43:1c:df:56:db:7a:72:4b:77:0a:
85:3f:f8:26:af:b8:8a:ae:0b:57:5f:f6:9f:df:50:ed:d2:94:
61:6f:07:3d:e3:69:21:b9:bc:3d:bc:80:f4:fe:4e:57:bd:08:
7c:48:e7:7a:5d:72:f5:00:fc:64:79:68:5f:33:0b:b7:e5:9a:
78:08:d0:26:b1:fa:f5:f3:f3:4f:98:98:83:64:a8:25:04:4e:
38:62:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:01:41 2025 by rpki-client