Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File: V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier: 5JJ14PI+WAdFTs2NCEhU/6EwCFok7/GszPlfSnoifv8=
Subject key identifier: 59:FE:1B:77:26:37:1C:F9:4F:17:2B:3A:08:95:EA:E1:78:C0:F5:AF
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer: /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial: 0198D5BBB014F2CB2B918959E17D00BE1620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number: 01BA
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: IwKSwRXA9Ph0qRohZhJ0WEYVgOM.roa (hash: RFNUKmFIpsyvimoGalaE9V72k6NP7c6/ODYYIyEjkmE=)
2: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: hpDjDMbIKaLh6M88GA/RWOAoeuQggrR1tclcT78xerc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b0:14:f2:cb:2b:91:89:59:e1:7d:00:be:16:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=59fe1b7726371cf94f172b3a0895eae178c0f5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:02:24:4b:4a:2a:c2:7a:80:0b:ef:30:c5:69:
b2:eb:34:fb:d7:1c:81:73:32:1f:8d:29:4d:aa:b6:
69:7e:5f:7d:75:0a:c5:ee:4d:67:b9:a0:11:e5:4d:
33:ca:0e:50:5f:f3:51:a6:67:6c:3b:9c:dc:95:0d:
2a:28:e4:0a:c5:ad:8d:a9:f7:6a:e5:ee:7f:5c:0e:
e8:6b:1c:d4:58:2c:f3:c3:24:7f:42:f0:74:ab:4c:
a8:9d:67:21:64:7e:22:d0:fa:8f:29:a0:34:ff:bc:
fc:9d:e0:da:9a:52:b9:25:1d:e5:f9:30:54:a3:89:
93:07:6a:88:65:18:75:58:db:31:e2:ac:df:4d:ed:
44:80:8d:e6:21:fc:ce:e4:cd:94:a1:1a:5b:de:ea:
e3:bf:4a:4c:be:18:fd:13:46:7b:b1:f4:b0:00:3e:
78:41:e9:34:b5:80:4a:2a:4c:47:f2:a4:7a:7c:1a:
5d:00:4c:00:c9:ca:66:26:76:e8:53:f1:38:7c:c6:
64:c6:0c:97:72:44:e5:63:89:06:b3:11:04:ec:df:
24:52:70:13:67:74:33:ee:9c:d2:53:f4:66:9c:b3:
73:a6:ad:ca:cc:83:c3:69:da:c2:13:d4:17:de:83:
60:07:28:4a:db:29:23:d6:4b:b9:db:53:aa:83:40:
ac:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FE:1B:77:26:37:1C:F9:4F:17:2B:3A:08:95:EA:E1:78:C0:F5:AF
X509v3 Authority Key Identifier:
keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fa:13:8a:4e:b7:74:5a:93:3c:35:3a:21:7f:a4:76:c4:8c:
af:43:20:7d:a9:e0:dc:4f:f4:38:3f:8e:54:69:6c:9c:d5:30:
39:7d:c2:7a:06:a0:c5:2b:59:88:ca:f3:5e:36:86:82:9a:90:
47:8d:5f:d4:7b:7c:89:f4:c2:5a:e4:ea:23:dd:b4:26:b0:75:
da:3e:e2:8d:38:0a:b6:c1:6e:77:a9:d9:4e:21:0c:17:68:b5:
d6:35:c1:15:36:5b:64:5a:ee:96:bb:41:36:df:a1:66:31:cd:
82:e6:b0:82:6f:ad:73:76:75:18:b3:5d:06:31:45:d0:84:fe:
c2:f8:4a:5f:b5:2c:aa:7d:6c:9a:c1:63:3e:d4:53:4b:f9:d5:
c0:fe:b6:1d:3e:f9:04:42:e7:04:66:1f:2e:ec:13:90:3e:aa:
21:6d:eb:07:6e:4c:84:47:31:10:91:fc:59:36:ad:b3:0e:d4:
8b:c9:66:06:2f:26:1f:3a:02:f6:a1:a9:ea:5b:dd:72:7d:8a:
f2:49:86:46:19:6b:fb:84:11:8f:c3:f5:42:40:0a:3b:a0:53:
8f:22:38:f9:06:cd:87:42:82:af:ec:4b:56:d3:a9:b6:85:e6:
ee:5f:93:a5:fd:7e:66:77:36:bf:da:ce:4e:57:c9:66:51:58:
49:cf:8b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:18 2025 by rpki-client