Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
File: 83Uc-MOi02yXRMllGYmZRaxgeCA.mft (raw, json)
Hash identifier: Sx7077IN3/Pd/lZ735M7LVvZNhakWB+E50NYkCriZC4=
Subject key identifier: 11:CE:79:4A:89:1E:1B:10:81:A0:C5:D6:21:E7:FD:85:E9:0D:68:21
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Certificate issuer: /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial: 019A722659DB8A5E3C8615755056484AB52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:47 +0000
Manifest this update: Tue 11 Nov 2025 09:01:47 +0000
Manifest next update: Wed 12 Nov 2025 09:01:47 +0000
Files and hashes: 1: 83Uc-MOi02yXRMllGYmZRaxgeCA.crl (hash: 6G86r33XALEkhHpjXbk01Qk4nCjPtrAzwaEQkNkMxmo=)
2: RQIIwfPKKX5p7u0Y-C_D5Y-bKBI.roa (hash: KiLJtwlRDmcGob+kpYuioRY1Q/RLPjcl0rdsa4MFnrs=)
3: xelQwmSnZUsP7vwyXYG-OjnLzks.roa (hash: VANd7e1T8sboSWcnlJJpwtTBZNkVD3ZVwPQJ+ivjoHw=)
4: ycYE11LlQ1a-t4T_yP1coVz5lU0.roa (hash: aqEuNcxSiCWBJQINtSpWdlIDutYbO4J8N5pMivaTnAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:59:db:8a:5e:3c:86:15:75:50:56:48:4a:b5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
Validity
Not Before: Nov 11 09:01:47 2025 GMT
Not After : Nov 12 09:01:47 2025 GMT
Subject: CN=11ce794a891e1b1081a0c5d621e7fd85e90d6821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f2:f5:72:13:a2:10:d5:3d:67:f1:b6:1f:28:
fe:25:87:dc:47:9a:0b:d0:68:10:63:d8:7b:56:60:
62:f8:d2:7e:2a:dd:19:e4:dd:47:57:31:14:11:9c:
11:ff:12:12:2c:74:ba:55:76:2f:73:fb:30:be:e0:
f2:8b:bc:9a:94:1a:4d:60:da:a9:39:ac:e8:8f:b7:
a2:d0:6f:7a:4d:12:b5:c0:66:0c:ee:72:cf:96:c9:
c2:c7:b4:1c:7d:9e:7a:5f:2c:ad:70:c2:54:0a:27:
36:f5:49:47:16:fe:bc:63:c2:c1:15:2a:b9:5a:dc:
6c:10:4e:4a:90:be:8e:0c:7c:f2:2e:ea:cc:ad:c2:
91:32:62:05:24:f3:54:ba:b2:66:c3:07:c0:0f:07:
40:6a:2b:be:c8:98:6a:79:ca:b0:4f:87:93:d2:74:
60:e4:7e:d7:d3:b2:d7:23:1d:96:7a:74:6c:13:c0:
27:04:84:b6:1b:48:35:ce:2a:7b:dd:1f:1b:05:e2:
c2:6d:85:9a:aa:89:00:9a:ed:06:08:cf:83:20:bb:
9e:44:09:67:26:ca:94:a8:b8:26:4c:d9:25:6e:9c:
07:52:a0:83:c7:f7:ca:b0:64:1a:e5:c1:69:a6:61:
f9:cd:8d:ed:da:32:bc:29:ad:be:2d:cb:e7:de:c3:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CE:79:4A:89:1E:1B:10:81:A0:C5:D6:21:E7:FD:85:E9:0D:68:21
X509v3 Authority Key Identifier:
keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:62:aa:20:0c:c0:72:de:2f:9a:46:6e:23:41:9a:a1:c7:93:
bb:4f:5e:aa:6d:18:08:b8:53:ca:76:03:a9:8b:2a:b1:c0:d3:
a2:3d:8f:ec:72:e3:07:d3:d4:c7:d8:0f:c9:2a:94:6e:14:e0:
6c:0a:ce:3d:fc:9c:4e:31:ee:32:41:3d:1e:a3:44:a1:1d:40:
79:db:8f:8f:e6:ea:7f:b1:bf:81:cb:30:a3:3e:86:ab:38:30:
ab:ed:d6:cb:de:39:c0:b6:79:c9:da:36:c0:53:fc:be:1f:6b:
ac:c1:78:90:1a:e1:bd:bf:3a:50:02:fd:40:d9:e6:7f:e4:04:
4f:30:3e:f9:a1:38:e6:c6:b2:58:01:43:34:f8:ff:33:75:cc:
24:a5:ba:a7:a2:10:5a:93:5b:5a:c3:49:8f:22:19:47:8d:c5:
34:5d:dc:7c:7b:5e:1e:d7:8e:1a:c8:d9:c3:a0:ce:b2:2b:a5:
c9:90:f1:fa:6d:96:59:4d:66:29:a4:1a:91:b7:0b:28:dc:b8:
79:5e:aa:ad:4b:c9:b3:ee:03:4c:b0:69:86:60:64:4a:54:86:
09:67:4c:8f:79:88:8a:ae:74:8d:0a:59:da:50:4d:5e:f0:8a:
31:ee:15:d3:e7:d5:c2:50:02:3d:a5:da:2f:9d:7a:d1:5f:5b:
da:aa:b7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:16 2025 by rpki-client