
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File: V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier: cq4+ksrwAseNjRWmK3F/E16F9w9DkgamH84V35iX40Y=
Subject key identifier: C8:E7:1B:B2:B2:8E:26:7F:6E:40:31:7B:0B:D0:45:B3:8B:28:D7:B4
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer: /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial: 0199FB45C30969BA00F5012BDE8C830C149B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number: 0252
Signing time: Sun 19 Oct 2025 07:01:17 +0000
Manifest this update: Sun 19 Oct 2025 07:01:17 +0000
Manifest next update: Mon 20 Oct 2025 07:01:17 +0000
Files and hashes: 1: IwKSwRXA9Ph0qRohZhJ0WEYVgOM.roa (hash: RFNUKmFIpsyvimoGalaE9V72k6NP7c6/ODYYIyEjkmE=)
2: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: 5kVs8pYr/Pb2w/xuhNhDMywVRR/nKNITiYTJH8cWX1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c3:09:69:ba:00:f5:01:2b:de:8c:83:0c:14:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Validity
Not Before: Oct 19 07:01:17 2025 GMT
Not After : Oct 20 07:01:17 2025 GMT
Subject: CN=c8e71bb2b28e267f6e40317b0bd045b38b28d7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:92:b1:b7:4f:a6:a0:32:e3:70:0a:d5:37:
1c:15:c7:a9:e8:3c:20:a1:29:eb:69:0d:7d:ab:0d:
0f:97:45:83:f8:35:04:94:c7:75:5a:5b:d0:95:19:
a1:82:00:24:46:54:b0:6e:09:29:70:3c:fe:cc:b7:
fe:5c:b4:27:b2:1b:53:ac:00:1c:cf:4b:56:65:0a:
02:15:b1:f0:76:5e:36:48:e0:d1:62:a8:12:ff:81:
b2:10:e2:eb:fe:e4:a7:43:23:68:d4:1f:79:27:1c:
df:bb:ea:20:21:33:8d:f1:7c:09:57:79:98:1f:d8:
70:ea:a2:40:2c:b3:72:bb:c8:f1:e6:99:8d:50:32:
7b:68:92:cd:26:57:8a:69:e3:4f:05:13:70:a4:c4:
6b:25:c8:3c:35:c4:ae:db:4e:77:48:5c:07:84:1c:
69:17:87:3b:4a:00:5b:b8:9d:a8:68:7e:f0:8c:8c:
6a:83:cb:f4:35:be:76:ad:c7:30:2f:d7:7d:80:21:
e4:6e:95:5b:a6:bf:68:85:b1:4e:e9:75:1c:da:78:
8c:75:e6:cd:75:66:8f:8a:84:15:b0:b8:a6:58:f3:
f4:6b:36:86:15:a3:6a:38:eb:85:75:59:3d:fc:54:
db:4c:f7:ab:e5:74:01:f5:79:8c:cb:3d:d0:db:7f:
c2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E7:1B:B2:B2:8E:26:7F:6E:40:31:7B:0B:D0:45:B3:8B:28:D7:B4
X509v3 Authority Key Identifier:
keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:1a:a4:08:9b:dc:30:0b:8e:50:40:e4:c9:b2:1c:d3:75:88:
43:6d:3d:2c:12:e5:99:06:4b:a9:87:2c:31:da:4c:36:57:54:
d7:fa:d7:2b:7e:63:cc:4a:f2:30:31:5a:16:a7:04:a4:79:79:
c9:b7:cb:2c:0a:77:5a:16:54:7d:80:0e:73:8b:8e:dc:45:bb:
1b:6a:97:78:a0:c4:7a:51:7f:fe:83:c9:0d:3c:ad:70:cd:07:
e8:c3:82:47:27:53:4c:f2:b6:ed:66:15:cb:91:2c:a5:34:23:
82:b2:ea:a6:b9:05:8e:bb:ee:01:98:64:48:dd:b4:06:97:66:
ec:02:03:da:4b:37:cc:ef:7e:17:32:7a:8d:ca:3c:af:50:ff:
59:7f:a7:f7:44:be:27:17:27:c7:b8:d2:f1:f7:6e:e6:a4:34:
93:56:0a:14:20:2b:3a:0f:85:cc:b2:61:8e:a5:0c:5b:7a:7a:
9a:e3:e2:21:da:08:d2:fe:de:3e:69:fb:95:d6:36:2f:7d:e3:
ac:bb:92:bd:5b:bb:18:0b:c7:e0:20:38:9c:2b:c7:51:4a:4d:
62:08:d2:59:48:0b:15:4d:bc:9d:77:f4:94:80:af:44:8c:78:
f5:5b:ca:fd:0a:b7:51:e0:f8:85:26:c2:4f:03:9f:a3:8d:96:
03:67:f2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:57 2025 by rpki-client