Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File: V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier: DlsNL7/qCpX0CQIhxasgbQWwkbo7IMT1pLxJGakfYHE=
Subject key identifier: 8E:20:8C:03:7A:0B:03:D3:33:5C:95:DA:AD:44:70:1F:2F:BE:9C:CF
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer: /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial: 019A59E661CBDB73B0690A63D8A9D4521079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number: 0283
Signing time: Thu 06 Nov 2025 16:01:01 +0000
Manifest this update: Thu 06 Nov 2025 16:01:01 +0000
Manifest next update: Fri 07 Nov 2025 16:01:01 +0000
Files and hashes: 1: IwKSwRXA9Ph0qRohZhJ0WEYVgOM.roa (hash: RFNUKmFIpsyvimoGalaE9V72k6NP7c6/ODYYIyEjkmE=)
2: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: dHcNbJxzUCynu6uXMT8i7ldA62UqL83Rku11zpfdSBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:59:e6:61:cb:db:73:b0:69:0a:63:d8:a9:d4:52:10:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Validity
Not Before: Nov 6 16:01:01 2025 GMT
Not After : Nov 7 16:01:01 2025 GMT
Subject: CN=8e208c037a0b03d3335c95daad44701f2fbe9ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9d:b9:3b:98:0d:a1:fa:9a:2f:66:d8:25:ca:
89:65:52:15:ec:b7:21:54:2a:b2:3e:51:a9:6c:a6:
e1:56:32:f6:41:c7:42:7a:60:a2:a4:3c:c6:d5:98:
b8:2c:ad:d0:84:7f:06:72:fe:f6:9d:6a:21:f4:fc:
36:97:13:19:08:f0:2d:63:0c:68:fc:60:00:ac:98:
70:b2:ac:62:ef:4b:af:1e:45:5e:7a:1c:46:33:55:
22:93:7d:f8:97:c7:75:58:6e:46:c2:b7:2e:5c:e5:
2b:b6:23:eb:fc:a2:bb:6e:82:05:24:0c:fc:e5:6c:
86:ff:0a:14:f7:53:0c:2a:d8:24:76:c2:e5:b7:55:
ad:c3:31:93:d6:62:88:03:58:03:85:d1:8d:0d:e8:
b6:2e:b2:c8:d3:7d:40:7b:49:45:b1:d1:cf:25:ae:
b8:9b:36:b3:b8:b4:3c:b3:58:a8:64:72:88:47:9b:
07:c1:45:f8:eb:f9:a2:c4:fb:dc:05:56:44:76:ca:
31:25:ea:51:c7:ea:d5:91:1d:7f:52:13:1d:f3:2c:
69:7c:3c:71:9c:6a:0b:3a:d9:8d:f1:5f:b2:c9:1c:
b6:af:8f:10:d6:2e:64:7a:21:65:fb:71:85:d2:f3:
83:a9:a7:04:e1:5f:ea:46:f2:cb:ea:66:29:57:5f:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:20:8C:03:7A:0B:03:D3:33:5C:95:DA:AD:44:70:1F:2F:BE:9C:CF
X509v3 Authority Key Identifier:
keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:2b:8a:63:fe:c0:9c:d3:ed:07:f2:07:4d:4f:c1:71:10:9e:
84:9a:90:b0:69:ba:04:35:dd:67:a7:de:b8:95:25:17:11:7d:
61:f7:4b:c8:dd:37:12:3d:73:2f:43:84:44:c0:93:e3:05:47:
28:49:67:cf:b9:39:d5:33:17:af:ca:b3:5a:96:c0:aa:08:a9:
07:b6:db:97:0e:63:54:62:19:e6:a3:fa:cc:7a:37:d1:28:57:
76:cf:f8:19:70:5e:37:ad:77:5a:e1:3f:d2:6a:04:fb:07:a4:
49:5c:e6:3b:26:fa:2d:a0:3b:2b:90:0a:e2:ac:fa:41:db:9d:
fa:11:1f:cc:93:5a:2d:a4:f0:ca:f4:f0:77:d3:f1:aa:2b:74:
97:4a:8c:6d:0c:74:29:44:1f:19:1d:30:30:3e:16:7a:4d:20:
f0:53:40:bf:b5:b2:68:db:3c:8e:cb:13:e3:4d:fa:e7:38:8b:
b2:05:ff:69:9b:9d:d8:28:55:72:2e:c7:07:36:af:d5:62:77:
3b:98:b4:81:8f:94:02:52:2b:4e:b6:4a:fe:8f:98:22:dd:a5:
09:90:8f:a2:03:a1:d0:59:ae:62:86:1d:a6:67:d8:64:fd:af:
47:b3:95:91:4b:d8:b4:fa:62:da:60:ec:7d:81:04:c4:4a:6d:
f0:fc:0a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 00:27:39 2025 by rpki-client