Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
File: V3zQhta4KSWruLuBXmWIUlIuCSE.mft (raw, json)
Hash identifier: kij4gNPSNPY9RVqixOxHpVKbVVCUuNwfbCQTfGT+DrU=
Subject key identifier: 63:C3:68:AF:32:A9:62:CD:07:F3:C1:4C:AF:B6:F9:AC:88:D6:1E:AB
Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921
Certificate serial: 019A4F2B0114B6E2EDF834AA6D1E52471D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 14:00:09 +0000
Manifest this update: Tue 04 Nov 2025 14:00:09 +0000
Manifest next update: Wed 05 Nov 2025 14:00:09 +0000
Files and hashes: 1: 2rRfCyoNB-FJKFhJjElIAYCjuZM.roa (hash: BxYRtCrYD8JZ1KlROq/oLLjDfPXIXRywkgLQEAE4Bdo=)
2: V3zQhta4KSWruLuBXmWIUlIuCSE.crl (hash: tCZJzMiE5u2Br+G7gq/2LeLaJDoi9VZUMZOrEU7acSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:01:14:b6:e2:ed:f8:34:aa:6d:1e:52:47:1d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921
Validity
Not Before: Nov 4 14:00:09 2025 GMT
Not After : Nov 5 14:00:09 2025 GMT
Subject: CN=63c368af32a962cd07f3c14cafb6f9ac88d61eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:59:a9:e5:9d:35:e9:a3:79:7c:28:db:7d:
ce:bd:44:e0:a0:d7:4d:1a:5e:8a:1e:8e:a5:30:f0:
a8:e9:0c:ea:74:8c:bf:d5:ab:0a:7b:69:98:16:13:
04:3c:d8:fb:e2:76:dd:9e:de:b2:57:8d:0a:08:1f:
b5:28:9b:3d:6b:f8:32:31:c1:0c:b1:a9:28:5d:e2:
29:0f:59:50:de:c9:1f:d0:96:b9:df:7c:a2:4d:ab:
7d:97:c2:60:0f:c4:05:00:53:1b:8d:b9:b1:c2:44:
5e:23:47:f7:74:1c:7d:06:84:95:ee:e5:e6:38:1a:
56:08:93:5a:63:bc:59:9a:21:ff:35:9d:82:41:2d:
73:41:c3:94:31:c8:87:0e:cf:eb:29:92:90:3b:ab:
8d:af:cd:32:26:8a:01:bc:67:23:11:39:d1:62:66:
e2:de:5f:f4:4f:af:db:ea:82:1a:d7:74:4e:c8:ab:
13:87:72:ba:cb:1b:e6:cb:a2:2e:8f:d6:2e:8c:08:
be:6e:41:ea:a3:41:72:99:5e:61:78:a9:1c:ae:90:
9c:44:af:1f:7c:de:8a:2d:b8:de:6c:4f:01:37:7c:
80:71:c5:81:72:27:2c:e7:76:7a:2f:5d:c5:e4:f9:
c1:f7:02:97:67:c7:f4:c2:21:da:52:16:dd:ec:80:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C3:68:AF:32:A9:62:CD:07:F3:C1:4C:AF:B6:F9:AC:88:D6:1E:AB
X509v3 Authority Key Identifier:
keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0d:01:a3:f1:24:ef:a0:51:c7:ca:6c:31:17:69:cf:eb:66:
02:e6:17:83:90:da:ee:32:4e:37:62:ba:6a:98:95:94:f0:47:
6f:17:2b:eb:45:f8:85:45:b3:94:86:0f:7e:69:9c:9b:ea:b3:
0f:0c:7c:bc:bb:57:e9:1a:47:f2:08:89:be:59:bf:c4:0c:05:
ba:26:2a:39:20:f7:0c:20:a0:e6:9c:bc:99:b1:02:0c:96:23:
ff:f2:c9:ac:36:d0:d8:d3:d7:a5:68:97:dd:45:73:d5:18:51:
63:f0:63:a1:ec:bf:33:29:c6:de:21:d1:05:9d:8f:34:61:ca:
9e:c0:9a:87:8c:d0:8c:ea:d4:7d:61:e3:38:3c:fa:9f:fb:b8:
9d:dd:6d:59:55:ea:7a:4f:47:06:d3:9c:66:71:0d:c2:4f:ce:
6c:5a:b7:2d:ea:1d:d1:dc:c3:1b:9a:94:15:b3:0e:3b:1f:fd:
03:4b:ce:0f:73:12:dd:b5:aa:48:f7:8f:a6:14:aa:19:ca:41:
b9:99:f2:5b:95:04:a0:e4:8b:7c:b9:97:75:93:e1:92:cb:d6:
35:01:be:fa:e0:4f:d7:56:59:dc:c6:db:ed:90:43:75:45:d9:
82:30:15:8a:1b:5f:03:2c:6f:85:04:70:fe:4a:2c:d2:18:10:
d5:5a:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:33:24 2025 by rpki-client