Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File: 89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier: CHQ3K0y/QTamE2DmaIGQc1NZ4S6ekG6TTQsehGrlVUU=
Subject key identifier: 02:D4:4F:29:68:60:51:57:86:2A:DB:C5:86:E2:FB:8E:17:94:10:F0
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 0199394B787DDA975F516ED991FF09DAB598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number: 0BEA
Signing time: Thu 11 Sep 2025 15:01:11 +0000
Manifest this update: Thu 11 Sep 2025 15:01:11 +0000
Manifest next update: Fri 12 Sep 2025 15:01:11 +0000
Files and hashes: 1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: 5eEBypoJXqn/Eze/JKCPvUOHydXk359UKWHFo+gj0Qc=)
2: RArCPfG6cBnbfBAKLbWfL49ZMls.roa (hash: uc8AJAayCJr6PnC8hA44mAQSr2RQBPC/srP3fioA29o=)
3: Wi2RTxfTTcg3jIA6VNCxJhuXtSc.roa (hash: PN/Hitc4mDcgZ6vgsBJIh+lNS02EoNv2xNjb7IleUCM=)
4: iI96ltGCU8Eh-fXmAqschYb7j1E.roa (hash: Z5PSdW/OzuN6TE7LbGMzYDGBpKQ5aABS0hIggAHbUHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:4b:78:7d:da:97:5f:51:6e:d9:91:ff:09:da:b5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Sep 11 15:01:11 2025 GMT
Not After : Sep 12 15:01:11 2025 GMT
Subject: CN=02d44f2968605157862adbc586e2fb8e179410f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:e1:b6:08:35:7d:1b:c4:c0:d0:1d:56:c3:
bf:57:97:1b:8e:3f:e6:02:c4:eb:2f:29:b0:63:a7:
28:66:d4:c0:9e:00:19:6f:bd:54:3a:77:6c:44:41:
50:89:e2:13:33:cf:87:0c:76:58:27:1b:53:2f:8c:
f4:3d:72:3a:2d:d6:32:61:55:1b:64:1c:0f:77:1b:
86:5c:d8:5b:53:c5:78:d6:80:f6:df:ca:5f:35:8c:
d9:03:f0:e1:72:e4:fc:b7:36:6f:f1:2d:c2:79:29:
d4:94:96:f7:7d:da:3a:7c:ee:53:3f:fc:b3:e2:d7:
3c:31:69:e8:9b:13:cd:ae:bb:72:cb:91:93:3e:a0:
19:3a:c2:67:8a:9e:d2:92:ce:ad:3d:32:04:c8:45:
4a:ab:f4:ea:95:9d:7e:c9:cb:c5:cd:33:b2:9c:06:
76:82:63:c4:71:7a:9d:30:b0:7a:a4:56:c1:4d:30:
21:e2:06:40:d1:df:aa:4d:1a:94:97:4e:32:03:75:
fe:2a:ea:77:fb:3b:be:c4:c2:ea:2c:2b:9c:4e:cf:
2c:ee:7e:6b:80:b8:66:d0:f9:ff:e6:fc:8e:22:ed:
a5:16:ec:8e:ab:c8:8d:66:fc:25:67:83:77:b4:14:
66:62:00:13:9a:04:99:8c:66:1d:b5:ab:03:f9:4c:
48:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D4:4F:29:68:60:51:57:86:2A:DB:C5:86:E2:FB:8E:17:94:10:F0
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:55:54:5f:6f:d6:57:27:ab:5d:49:d3:a8:2e:69:e3:ea:eb:
e2:38:c6:aa:ad:5f:3e:00:12:0c:f7:aa:14:ec:d5:99:84:c3:
83:9c:28:fa:b9:0c:34:b6:54:64:6b:f8:fa:4f:27:26:08:ac:
a1:50:b9:89:6b:ed:63:e4:1e:83:59:22:48:02:48:18:b9:00:
95:cc:94:f5:d5:60:dc:e2:ad:5b:32:9a:09:ae:61:2d:72:af:
f7:55:eb:9a:1b:1c:e7:fc:0d:6b:e4:f4:d1:e4:be:97:3a:15:
ec:2c:bc:3c:ab:9d:0e:6c:b3:d0:27:06:8d:a6:5f:87:c5:38:
1c:ea:05:72:0a:5a:78:b4:42:c7:e9:aa:be:d9:ee:e9:67:53:
11:52:09:53:1b:97:94:1c:a2:56:a4:56:ef:19:31:74:1a:db:
e4:2e:0e:13:9e:6a:9f:1f:d5:e1:4a:f7:ae:7c:e0:e5:c1:9b:
d1:cd:12:89:eb:70:01:72:8f:8e:cd:1f:35:ed:04:d2:cc:39:
96:f3:e9:62:9a:e1:28:2c:7f:97:3e:3b:a3:9d:0c:8d:30:c9:
20:94:29:a8:23:12:0d:4f:ee:dc:e4:1f:12:e9:10:3d:26:e2:
7f:4d:5c:07:8d:83:67:88:03:9c:fb:45:ed:07:a3:c6:e0:63:
34:dc:68:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:26:21 2025 by rpki-client