Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
File: V3zQhta4KSWruLuBXmWIUlIuCSE.mft (raw, json)
Hash identifier: /OfJ1AbJ6H8WJPoBAZ0XjET6SCksXuCBnMwLxGaRoa8=
Subject key identifier: 6C:D0:E8:55:03:C7:16:BC:A5:70:45:43:D0:45:4A:C1:46:08:63:AD
Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921
Certificate serial: 019874194C710EAA4DD034F4923C53525856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 08:01:11 +0000
Manifest this update: Mon 04 Aug 2025 08:01:11 +0000
Manifest next update: Tue 05 Aug 2025 08:01:11 +0000
Files and hashes: 1: 2rRfCyoNB-FJKFhJjElIAYCjuZM.roa (hash: BxYRtCrYD8JZ1KlROq/oLLjDfPXIXRywkgLQEAE4Bdo=)
2: V3zQhta4KSWruLuBXmWIUlIuCSE.crl (hash: pWoF8u7x2aYgbSqY88cNhuBTEvly6drWrjhSQ+m0+3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:4c:71:0e:aa:4d:d0:34:f4:92:3c:53:52:58:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921
Validity
Not Before: Aug 4 08:01:11 2025 GMT
Not After : Aug 5 08:01:11 2025 GMT
Subject: CN=6cd0e85503c716bca5704543d0454ac1460863ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:97:4f:6e:05:d0:86:9f:52:3f:18:85:55:
f0:f5:40:08:0f:96:d5:71:01:6e:01:56:4a:a4:10:
e0:91:c0:24:eb:7d:6f:4c:ed:8d:4d:1e:d0:be:d2:
8f:3f:e0:04:96:ae:2b:6e:56:72:2b:8f:f1:f5:b7:
cf:c7:78:42:2e:c6:fc:27:44:ad:c3:29:26:4a:8a:
3c:78:35:a5:65:34:4f:ff:24:08:dd:67:db:52:21:
0b:7e:ff:e4:b0:42:b7:8c:95:82:1a:fe:e4:5d:cd:
81:8b:9d:1e:e5:71:60:dc:69:a5:ed:ac:48:97:81:
de:a7:97:d6:4c:ad:fe:dc:e9:c7:da:10:27:10:38:
95:51:7d:93:6a:16:68:03:94:33:89:a7:45:e6:4e:
ab:dd:e4:00:72:6f:84:2b:16:8e:a5:cc:a1:94:99:
2f:2a:f0:c1:b8:85:ff:48:70:eb:e7:ec:e0:a5:34:
44:b3:91:92:80:09:af:99:25:4b:d4:e5:a4:49:5b:
a8:ae:5d:02:b6:57:4d:22:1b:b0:da:34:0a:ac:ac:
74:fd:76:d5:23:be:5b:7a:33:8c:bd:9d:12:a7:2c:
2a:a1:28:a2:a9:08:ad:2c:4b:ce:e4:da:2c:c0:b5:
ed:ed:29:5d:21:8c:a2:d7:8d:da:5a:b7:61:bb:35:
d3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D0:E8:55:03:C7:16:BC:A5:70:45:43:D0:45:4A:C1:46:08:63:AD
X509v3 Authority Key Identifier:
keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b9:21:03:12:78:0a:00:1d:59:9b:fc:30:6c:59:56:10:9c:
38:91:0f:ca:60:5f:6e:e8:9d:25:84:dd:e2:33:b3:0e:61:9a:
10:df:a4:69:2f:2b:81:e7:b4:d7:5e:1b:4a:f3:e8:ff:db:f6:
87:4e:31:d6:c6:44:6e:74:ee:82:09:e7:87:da:d0:4a:ad:77:
ca:30:8c:a4:a4:e0:5e:a6:0a:90:75:bf:62:6a:b1:52:fe:97:
83:a4:e1:62:1f:8b:8d:51:85:8b:a7:62:57:7c:68:75:d6:ca:
18:69:c3:da:42:f1:0d:55:bb:09:65:a3:31:68:83:e9:9a:f0:
0d:ac:ce:6c:cb:68:f2:9c:8c:ee:41:00:c8:e0:67:6c:d6:d9:
e3:6f:c1:55:48:8e:7c:71:c2:e4:99:92:88:f9:4b:8a:da:cb:
3f:61:80:47:4e:82:61:41:4a:bd:33:88:f7:25:bf:22:85:a9:
9f:4c:59:70:2f:0d:9c:e8:85:9a:4e:4a:f9:af:c1:9d:ad:ef:
5c:98:98:9f:3e:ac:f2:2f:d6:73:40:12:78:c8:13:25:4c:6d:
47:11:fb:7f:fb:32:af:a4:14:3f:6f:36:6a:dd:c3:3f:c1:2a:
09:20:94:73:df:51:f8:70:18:bc:57:dd:37:e1:e7:c3:22:11:
fb:cd:bd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:59:32 2025 by rpki-client