Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: HC/BtQq8UnT1WCpoDDYYlApbnZyCQ3qFU61RT0/cthg=
Subject key identifier: CA:56:7E:DB:D4:15:8C:4F:8C:11:2C:EF:46:3D:1D:C8:4E:E3:45:63
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 019A1DD0F8B30A3BA179734AD28C0F14AE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 0889
Signing time: Sun 26 Oct 2025 00:00:25 +0000
Manifest this update: Sun 26 Oct 2025 00:00:25 +0000
Manifest next update: Mon 27 Oct 2025 00:00:25 +0000
Files and hashes: 1: 3TbJq9j2geNORTi2E9xTbbuvxTw.roa (hash: GEQQroPBoH2N7pLErfqXNmjkVTV09NRy63LB6YJ9qVU=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: XK/6qwaZMdOvvJjHNRbr37v+eREQQ2Rfn7miVfjYcc4=)
3: O5vcxppH2hWxYYAsqunLkBWcHEA.roa (hash: q4yYQF/m9xvQmRwlkRVUClFyEqyPX8PvXIb5hdq5C/c=)
4: S074YuodosP0UuUo6De4P_sFXFs.roa (hash: pyM9pUqd+rcNeRhYxGuF9WXwPo5DNw77BSKM8YnWbDw=)
5: Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa (hash: ynVaJVBlwlWG6tSEdbng0uT/nO6dcjS+TT74OXhzdwE=)
6: TeWmN6EHoWRaSQ7AOqv2c821wck.roa (hash: nLb50bk1nICV8KXxpzGqIvnlONr6M9e61qQJa/r2Gnk=)
7: VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa (hash: ILHJodGOzQUy/1EkSV1sW3J8/BVRtZEBwh5TBOH9dR0=)
8: fpQDOceW0nAf0mI2PAXShTq2K8Q.roa (hash: AwWdNgQE53Ja7SCJFwgUtSy2nXOjhiPggUFZe7XRmBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:d0:f8:b3:0a:3b:a1:79:73:4a:d2:8c:0f:14:ae:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Oct 26 00:00:25 2025 GMT
Not After : Oct 27 00:00:25 2025 GMT
Subject: CN=ca567edbd4158c4f8c112cef463d1dc84ee34563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:37:20:ee:ee:ec:9d:ae:b6:0b:65:98:5b:33:
32:fc:4f:bc:4d:28:0b:18:51:81:13:27:f1:9f:13:
77:9e:cf:08:94:13:56:2d:b8:c7:04:41:84:c2:38:
d6:55:d9:84:33:97:2b:b2:bf:b8:c5:21:64:ae:41:
7d:67:de:e6:21:35:44:9d:82:a1:e7:2b:1d:1c:77:
e0:bd:70:d6:bd:bb:21:4f:24:b9:1b:dc:fe:1c:40:
0d:0e:6f:10:b2:bd:86:81:1a:16:ee:68:2e:fd:13:
43:eb:c3:b9:5f:67:5a:2f:58:09:24:5e:f0:dd:77:
74:f5:8b:ac:3a:62:03:d7:82:31:fc:53:53:c4:d6:
0f:3f:22:ce:ec:4d:33:22:5a:80:12:f4:ec:05:b9:
2b:80:ba:1b:b3:29:93:f1:e2:bf:30:c3:a6:43:a2:
2a:ba:5c:b9:c1:b1:89:a9:5b:71:4d:52:56:94:00:
e6:f9:6b:91:f5:a6:8e:22:10:71:7e:12:dc:00:ce:
77:35:0f:56:2d:09:b4:e7:b3:ea:0b:f1:15:55:1a:
7c:83:94:78:a2:5b:d2:15:63:2b:0b:b5:1a:51:2c:
2c:b6:f6:70:d1:f6:a2:24:05:f9:17:f0:40:ef:13:
c2:97:56:83:82:ad:a0:0a:d4:86:15:9f:e4:46:71:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:7E:DB:D4:15:8C:4F:8C:11:2C:EF:46:3D:1D:C8:4E:E3:45:63
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:44:a7:3c:64:d6:be:26:1a:9a:e3:58:01:43:24:ab:48:f7:
a9:87:a4:05:d2:0c:9a:4b:aa:4c:7a:da:6b:f5:cd:01:fb:40:
af:7a:5e:fe:ab:6a:54:a9:b6:02:4b:96:78:f0:e4:e3:63:ab:
b9:8f:9e:59:75:d9:a7:09:e7:10:c7:23:36:a1:d4:b6:db:76:
97:6b:5e:c2:8f:c4:14:cc:8c:15:ac:52:f1:d3:9b:e8:e8:28:
ee:3e:f4:56:8f:0a:d3:71:2c:07:2e:42:b2:3a:12:ab:f7:ab:
3e:06:4c:8d:2a:27:c7:b2:cf:7b:c0:d4:a5:2a:52:da:e2:66:
53:2a:3d:16:ea:23:c5:40:b7:93:0e:0c:56:8f:b0:91:49:61:
b8:8d:83:4b:e6:df:b2:4e:e2:d4:bc:1b:36:9b:74:ae:21:4f:
cf:9c:ec:56:ae:76:26:e6:4b:9d:fd:bf:3c:f6:ef:14:a5:8d:
e3:a8:eb:08:b4:83:97:ae:65:e5:05:b8:f4:90:7f:9a:1a:f2:
25:e7:28:ec:7d:63:63:e0:2e:95:00:d6:80:fb:21:96:18:b0:
3a:c8:92:c6:dd:87:7e:c4:da:33:6f:5b:1b:c3:f2:18:6b:e8:
19:60:a9:38:ee:20:05:26:2f:86:26:c7:f5:00:d6:e3:d3:c2:
95:01:20:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:33:27 2025 by rpki-client