Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File: 89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier: hohnI/0VNXpKLYR9tu07oRWnic/5LrZtoqNyrtFcPF8=
Subject key identifier: DE:1D:0D:65:C3:DB:63:07:29:EC:45:11:72:D7:D9:E2:C0:F2:5B:14
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 019A722666AB9192565DB0B0994D5901E447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number: 0C8C
Signing time: Tue 11 Nov 2025 09:01:50 +0000
Manifest this update: Tue 11 Nov 2025 09:01:50 +0000
Manifest next update: Wed 12 Nov 2025 09:01:50 +0000
Files and hashes: 1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: FYeaF5LlDfJ2Rea6qvbYgi4KfvpImEV7hT8mVoZ7TZI=)
2: RArCPfG6cBnbfBAKLbWfL49ZMls.roa (hash: uc8AJAayCJr6PnC8hA44mAQSr2RQBPC/srP3fioA29o=)
3: Wi2RTxfTTcg3jIA6VNCxJhuXtSc.roa (hash: PN/Hitc4mDcgZ6vgsBJIh+lNS02EoNv2xNjb7IleUCM=)
4: iI96ltGCU8Eh-fXmAqschYb7j1E.roa (hash: Z5PSdW/OzuN6TE7LbGMzYDGBpKQ5aABS0hIggAHbUHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:66:ab:91:92:56:5d:b0:b0:99:4d:59:01:e4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Nov 11 09:01:50 2025 GMT
Not After : Nov 12 09:01:50 2025 GMT
Subject: CN=de1d0d65c3db630729ec451172d7d9e2c0f25b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:15:08:fb:40:72:86:77:41:30:7f:a8:2f:
96:0b:ad:fc:70:f8:e5:7e:69:c0:4b:4e:7d:83:18:
96:1c:04:fd:a6:64:dc:5c:cf:af:54:0e:dc:6a:bc:
f6:aa:86:99:42:7a:ed:0d:73:89:52:31:45:23:8d:
ce:90:d6:8f:21:4d:bc:48:bc:2a:cb:50:d3:b5:66:
ea:be:62:cb:01:1e:1b:aa:04:b9:87:f4:88:fb:30:
34:2f:4b:e9:6d:4f:74:58:01:d9:b4:13:35:4b:3e:
f5:f2:59:a4:10:32:ab:2b:b2:4a:db:63:df:84:24:
a1:83:29:89:da:29:6e:1c:95:3e:b5:62:ab:d7:01:
0a:3a:e1:d4:33:06:d6:9f:5d:b5:18:76:a5:97:c8:
8f:f1:02:6d:73:29:ed:db:9e:88:f4:4f:ad:07:fc:
a2:df:51:29:25:3c:b7:fb:c7:71:3e:01:fd:38:62:
80:fe:f3:b0:fa:5a:44:9c:14:5d:bc:aa:0a:3a:44:
17:3b:fd:52:b9:21:68:89:27:3d:31:9c:9b:30:54:
12:7a:0f:99:10:38:ab:03:72:d6:2b:b8:56:8e:93:
7b:f8:9a:d5:5e:1a:90:5d:b5:ba:a7:b6:df:f3:78:
5b:c5:1e:3d:a5:8a:3b:b4:89:4f:05:65:fc:8c:e0:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1D:0D:65:C3:DB:63:07:29:EC:45:11:72:D7:D9:E2:C0:F2:5B:14
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d4:3a:ef:10:23:40:e1:dc:48:00:30:e0:59:bc:9e:08:a9:
34:c7:c0:29:8f:02:74:6e:65:75:de:c8:50:15:78:2e:92:e6:
13:ca:d7:a6:fb:a8:ae:1f:23:f1:16:25:7a:55:a5:c6:67:25:
ea:41:8b:44:03:da:a3:08:1f:98:09:15:7f:21:f0:57:f3:de:
02:d0:2a:6a:ee:9c:0d:1f:d2:32:0d:4a:9f:bc:64:38:39:a2:
99:2d:49:37:4f:3d:9c:f8:c4:d5:bc:97:74:c6:50:7f:06:30:
d3:fe:ea:de:10:b7:9c:d4:bf:3d:46:42:e3:6e:2c:09:af:0c:
31:b3:af:77:49:d6:12:a8:41:a4:18:44:65:87:27:f6:88:94:
bd:57:b5:72:01:8d:23:51:57:e7:11:eb:da:a3:bf:79:40:91:
50:44:65:bc:1f:eb:7c:d7:0c:96:e9:91:0b:53:bb:c0:0a:97:
8d:29:23:04:ca:16:6f:d9:7d:b3:41:46:52:f6:86:43:04:d4:
10:e2:18:8c:4e:b4:1c:dc:5b:2a:3c:7f:be:d3:a6:46:59:60:
68:c2:b3:b3:ab:3c:17:dd:b6:53:92:13:43:44:f3:0d:50:a4:
91:35:d0:01:d4:c3:8e:45:db:7f:8c:1c:85:7d:92:3a:bf:45:
dd:34:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:56 2025 by rpki-client