
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: e1T03Y88/3S3o9gfuYte7n7JVOLA2W86QvFYL8Y0bwk=
Subject key identifier: 85:83:FD:D4:C7:CF:39:D7:E6:13:5A:FF:B1:6A:54:6A:D3:90:AF:B2
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 01992E5A320F9028A303BC5413AF126D881B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 080D
Signing time: Tue 09 Sep 2025 12:01:26 +0000
Manifest this update: Tue 09 Sep 2025 12:01:26 +0000
Manifest next update: Wed 10 Sep 2025 12:01:26 +0000
Files and hashes: 1: 3TbJq9j2geNORTi2E9xTbbuvxTw.roa (hash: GEQQroPBoH2N7pLErfqXNmjkVTV09NRy63LB6YJ9qVU=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: nok8pwQru0dm57Lw9ni5uLEb4lHsMywVK/e1BWUNaRk=)
3: O5vcxppH2hWxYYAsqunLkBWcHEA.roa (hash: q4yYQF/m9xvQmRwlkRVUClFyEqyPX8PvXIb5hdq5C/c=)
4: S074YuodosP0UuUo6De4P_sFXFs.roa (hash: pyM9pUqd+rcNeRhYxGuF9WXwPo5DNw77BSKM8YnWbDw=)
5: Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa (hash: ynVaJVBlwlWG6tSEdbng0uT/nO6dcjS+TT74OXhzdwE=)
6: TeWmN6EHoWRaSQ7AOqv2c821wck.roa (hash: nLb50bk1nICV8KXxpzGqIvnlONr6M9e61qQJa/r2Gnk=)
7: VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa (hash: ILHJodGOzQUy/1EkSV1sW3J8/BVRtZEBwh5TBOH9dR0=)
8: fpQDOceW0nAf0mI2PAXShTq2K8Q.roa (hash: AwWdNgQE53Ja7SCJFwgUtSy2nXOjhiPggUFZe7XRmBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:5a:32:0f:90:28:a3:03:bc:54:13:af:12:6d:88:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Sep 9 12:01:26 2025 GMT
Not After : Sep 10 12:01:26 2025 GMT
Subject: CN=8583fdd4c7cf39d7e6135affb16a546ad390afb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:b0:18:9b:16:f3:58:ce:79:30:a1:8e:b5:
65:08:b3:38:72:2b:f1:56:1a:c7:2a:01:fe:05:fe:
45:db:9e:22:ad:13:8f:71:3f:fd:5a:9c:7a:38:3e:
bd:44:f4:9b:85:39:3f:df:9b:c1:5d:f5:f3:da:e8:
6c:d2:1a:c1:46:2f:03:1d:d2:04:d0:99:50:08:d1:
1e:11:f6:42:a9:c0:c0:fc:48:c0:e2:61:fc:7e:80:
45:2f:9a:8e:06:11:fe:75:ae:f5:14:6b:cb:3b:d8:
56:88:9a:04:28:55:f0:c0:f2:05:3b:eb:71:90:53:
45:29:2b:cb:c2:b5:3a:81:9b:33:a3:c4:10:f9:8f:
4a:c6:56:b2:35:31:9a:d6:ea:47:5d:04:39:49:a6:
b3:12:bd:0c:b5:5d:69:25:0f:5b:e7:08:74:7d:02:
e4:61:42:9a:ac:49:76:df:d7:13:6e:25:de:40:3e:
46:9d:0d:bf:dc:ea:d6:92:ff:42:b8:53:da:1a:12:
c8:5e:ca:22:e5:e6:5d:43:d7:77:e9:ce:21:44:cb:
ee:2a:4b:f3:85:61:8b:81:46:3b:39:4f:0f:e7:8c:
ae:64:d2:a8:69:51:75:33:6d:42:4f:e0:8b:6c:e9:
d3:e2:32:8f:4e:d6:bb:56:0e:65:0f:d2:f5:56:00:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:83:FD:D4:C7:CF:39:D7:E6:13:5A:FF:B1:6A:54:6A:D3:90:AF:B2
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e5:37:ce:0e:39:16:3c:73:1b:f7:cc:08:04:cc:ff:00:d3:
cd:0b:38:59:34:e8:3d:ff:47:6a:a5:c0:b0:7e:0a:bb:59:51:
88:a9:aa:a0:80:64:21:2f:25:31:ba:87:13:54:13:7c:12:75:
c9:51:d9:c8:32:c9:23:65:a0:71:93:cb:b7:97:cb:21:ba:b6:
1b:3e:77:0b:61:8f:9d:ce:28:79:5a:d5:5d:f3:eb:b0:78:28:
ec:82:d0:11:2e:58:16:e2:41:7b:5e:27:04:4c:8d:84:b6:d2:
59:8e:b5:71:66:77:1c:17:60:3f:35:1a:a3:25:1b:2d:86:db:
b8:9c:76:74:5d:bf:f4:9b:e5:68:4a:09:0b:c0:d7:ee:97:23:
1b:b6:e5:3b:48:85:28:07:7d:7d:75:f5:7b:1b:99:50:ce:8f:
d6:36:f9:69:8a:db:20:7f:df:60:c3:35:44:73:09:dc:bb:9b:
a7:75:4b:20:55:a2:f5:b1:ae:48:d1:e0:cb:91:dd:bc:91:cd:
0d:8b:6c:4f:f2:22:8e:2c:e4:cd:1a:ce:b6:f1:98:df:f8:0f:
e5:b9:44:c4:de:e8:13:7f:c5:2b:43:82:a9:68:f6:5b:18:10:
8d:42:52:2a:20:71:3a:a4:68:09:66:9f:86:c3:9c:40:61:a3:
2a:18:17:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:24:27 2025 by rpki-client