Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.mft (raw, json)
Hash identifier: iBSiIuufv5ZVNCz/fLPK5IJQsxNo+4NHV85jAjijn40=
Subject key identifier: D8:BF:11:C0:60:A1:16:1C:13:63:0C:A4:F1:0D:3C:2B:E6:C8:98:A5
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial: 0199C5D8648185B109A0EBDA8A9DA6978168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
Manifest number: 0A72
Signing time: Wed 08 Oct 2025 22:01:56 +0000
Manifest this update: Wed 08 Oct 2025 22:01:56 +0000
Manifest next update: Thu 09 Oct 2025 22:01:56 +0000
Files and hashes: 1: 82BUCSXbyxoJ-2XzspAD1o8j3ms.crl (hash: nPcYWR129s9mSUUyLByAJXBneVg5MJLezJrFOomt3ew=)
2: WO4Lx-SRYYsLgDA8d_7YHDSf7BI.roa (hash: nMdj6H5AmHScUq7iFK7ub3BJ0X174BqxH7J5lRBxaFk=)
3: oI7kOSiG8h1OQh9w777ujGQ8d5c.roa (hash: 7bzozQwhPvIcjtgW8D6KNMw02ktIJKUDIRXI6dPZ7uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d8:64:81:85:b1:09:a0:eb:da:8a:9d:a6:97:81:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Validity
Not Before: Oct 8 22:01:56 2025 GMT
Not After : Oct 9 22:01:56 2025 GMT
Subject: CN=d8bf11c060a1161c13630ca4f10d3c2be6c898a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:08:3d:17:a9:b8:06:ef:aa:d6:f1:5a:af:
96:ff:ee:ca:70:ca:9e:c5:8b:a7:90:a1:f3:1e:7b:
73:00:5a:5a:48:5e:27:46:ee:cf:47:02:cf:57:89:
b9:c3:2b:fc:64:4e:bc:f0:1f:4c:cf:cc:0e:98:e2:
ab:c8:66:b7:bd:ee:56:cd:ec:5d:0f:2c:bb:20:4e:
d7:be:f8:d5:08:9a:b0:89:b6:7d:3d:9a:96:99:b6:
a7:da:92:9d:a9:69:f3:f2:4d:8d:1c:b8:de:cb:58:
71:a0:16:94:fb:20:bf:1a:b0:15:06:5a:b0:af:40:
28:cb:81:da:10:1a:35:7f:e4:0c:7c:fb:f5:9f:66:
db:fe:2c:26:88:51:80:5c:f5:d2:57:3a:35:80:67:
0f:1b:0a:3a:fa:32:8a:01:c1:82:9a:55:0b:b6:fc:
6f:62:a3:c5:7a:c3:88:c7:fe:80:b5:7b:49:bb:85:
d1:a3:7e:ac:c9:b6:03:a8:8d:12:06:47:82:3c:29:
1e:ee:fc:17:cd:86:73:de:2d:46:34:51:cb:d7:41:
17:09:37:b8:2a:36:74:c1:48:24:c5:6d:34:a4:77:
f6:a2:75:a6:10:1a:ca:bc:eb:f0:ed:bc:51:08:3d:
5f:fb:7f:91:54:ce:c1:66:a5:24:8c:2d:d2:ab:3c:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BF:11:C0:60:A1:16:1C:13:63:0C:A4:F1:0D:3C:2B:E6:C8:98:A5
X509v3 Authority Key Identifier:
keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:42:8a:bc:16:ee:c2:e8:f2:d2:b8:36:cf:50:7e:42:cd:21:
f7:28:d6:05:9b:60:6e:d1:00:7e:1f:6d:f2:46:f4:0a:43:42:
9a:83:6a:b7:45:f8:5e:c7:df:4b:fa:0a:cf:4c:07:f6:7e:c5:
8c:09:aa:69:ad:ef:6c:88:af:80:a2:76:09:b2:ee:be:bb:cd:
ef:88:63:44:75:1d:4a:06:47:d6:fe:d2:cb:d5:59:77:87:b9:
74:47:97:cf:25:3b:71:5b:bb:90:57:a2:db:64:99:c3:65:d5:
75:a0:64:ba:55:1e:ce:2f:e3:51:24:06:52:11:1c:c5:8d:ae:
56:38:08:f9:01:ec:5d:c1:8f:5a:ac:87:8f:e0:a3:3f:5e:97:
1d:1d:8d:74:82:32:25:d2:d3:75:86:19:89:65:f5:34:cd:19:
52:ce:d6:b7:d7:cf:82:ea:7f:8a:ba:43:72:a6:e9:22:d6:f2:
e0:06:91:78:88:45:11:5c:78:6d:32:d1:6c:95:30:73:90:a5:
b7:fe:6b:cd:1c:49:5c:60:da:0e:6f:0d:dd:15:d8:4a:56:fe:
c6:77:42:16:08:07:49:f2:7a:c1:5f:cc:9a:9e:83:06:90:16:
10:25:48:8a:b6:f7:39:8a:3e:a1:a4:6f:66:56:d6:8c:a8:85:
ae:fd:4b:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnF2GSBhbEJoOvaip2ml4FoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNjA1NDA5MjVkYmNiMWEwOWZiNjVmM2IyOTAwM2Q2OGYy
M2RlNmIwHhcNMjUxMDA4MjIwMTU2WhcNMjUxMDA5MjIwMTU2WjAzMTEwLwYDVQQD
EyhkOGJmMTFjMDYwYTExNjFjMTM2MzBjYTRmMTBkM2MyYmU2Yzg5OGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVkIPRepuAbvqtbxWq+W/+7KcMqe
xYunkKHzHntzAFpaSF4nRu7PRwLPV4m5wyv8ZE688B9Mz8wOmOKryGa3ve5Wzexd
Dyy7IE7XvvjVCJqwibZ9PZqWmban2pKdqWnz8k2NHLjey1hxoBaU+yC/GrAVBlqw
r0Aoy4HaEBo1f+QMfPv1n2bb/iwmiFGAXPXSVzo1gGcPGwo6+jKKAcGCmlULtvxv
YqPFesOIx/6AtXtJu4XRo36sybYDqI0SBkeCPCke7vwXzYZz3i1GNFHL10EXCTe4
KjZ0wUgkxW00pHf2onWmEBrKvOvw7bxRCD1f+3+RVM7BZqUkjC3Sqzxl6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNi/EcBgoRYcE2MMpPENPCvmyJilMB8GA1UdIwQY
MBaAFPNgVAkl28saCftl87KQA9aPI95rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODJCVUNTWGJ5eG9KLTJYenNwQUQxbzhqM21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80ZGFlN2YtYmEwZS00Mjc3LTllOTIt
YjRmMDA3ZWY3ZTg2LzEvODJCVUNTWGJ5eG9KLTJYenNwQUQxbzhqM21zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy80ZGFlN2YtYmEwZS00Mjc3LTllOTItYjRmMDA3ZWY3ZTg2
LzEvODJCVUNTWGJ5eG9KLTJYenNwQUQxbzhqM21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUKKvBbu
wujy0rg2z1B+Qs0h9yjWBZtgbtEAfh9t8kb0CkNCmoNqt0X4XsffS/oKz0wH9n7F
jAmqaa3vbIivgKJ2CbLuvrvN74hjRHUdSgZH1v7Sy9VZd4e5dEeXzyU7cVu7kFei
22SZw2XVdaBkulUezi/jUSQGUhEcxY2uVjgI+QHsXcGPWqyHj+CjP16XHR2NdIIy
JdLTdYYZiWX1NM0ZUs7Wt9fPgup/irpDcqbpItby4AaReIhFEVx4bTLRbJUwc5Cl
t/5rzRxJXGDaDm8N3RXYSlb+xndCFggHSfJ6wV/Mmp6DBpAWECVIirb3OYo+oaRv
ZlbWjKiFrv1L0Q==
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:21:58 2025 by rpki-client