Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
File: 87WowAlYJeE_Rr2zcLf9ypufilI.mft (raw, json)
Hash identifier: zO0IwaHXPQMMRozc98S0HfQey9wX48USbLW4jpvwx50=
Subject key identifier: 61:B0:05:DA:E3:20:7C:52:2D:05:52:E3:0E:68:BD:BF:7F:5C:1D:40
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Certificate issuer: /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial: 019A71B76FA3C92130FEE1C0E7AAE1A5C4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
Manifest number: 028A
Signing time: Tue 11 Nov 2025 07:00:38 +0000
Manifest this update: Tue 11 Nov 2025 07:00:38 +0000
Manifest next update: Wed 12 Nov 2025 07:00:38 +0000
Files and hashes: 1: 87WowAlYJeE_Rr2zcLf9ypufilI.crl (hash: +7oWJVFpNfQoXUP2o5zx603q5B1gw311GI0Lbz81ZUQ=)
2: Dyuv8Z__vkGHwwVg87zPgkG7J-4.roa (hash: ilCGUeVqOl6irP7EZ7ynRXvcKUKAauHP7YFg6+r0+3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:6f:a3:c9:21:30:fe:e1:c0:e7:aa:e1:a5:c4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Validity
Not Before: Nov 11 07:00:38 2025 GMT
Not After : Nov 12 07:00:38 2025 GMT
Subject: CN=61b005dae3207c522d0552e30e68bdbf7f5c1d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:c2:8e:72:85:ce:f3:58:b5:28:54:85:79:
f0:f6:d1:81:0a:da:9d:32:88:fd:9a:2a:cc:8f:60:
d7:fd:04:b7:8e:ae:6f:f6:bd:80:b1:73:77:16:e1:
23:a3:71:00:2e:b5:68:74:b4:88:e3:ff:77:3e:4d:
ee:94:62:2b:6d:c2:5e:96:d2:f9:64:cf:3a:09:b0:
d3:e4:2a:3f:05:ef:ef:18:a5:5c:2d:0f:01:0f:61:
1f:10:7d:d2:c2:95:3c:85:99:c6:50:36:8b:40:ac:
68:b5:33:2f:1c:69:2c:62:1c:d8:63:37:16:92:8f:
ec:92:42:3d:bc:03:cf:fa:90:49:3c:9e:4f:58:ee:
ea:b9:a1:55:8a:01:fd:31:2a:d1:b8:92:8f:d4:ed:
4e:3d:bf:53:ef:b0:ad:0e:de:e7:66:a2:9e:05:f7:
0f:66:b1:63:28:b7:48:d0:ed:c6:71:2a:3d:67:41:
5f:49:53:be:08:db:6a:0e:3f:ff:a4:c4:a7:4a:65:
30:ce:0b:21:58:3f:ce:cd:3b:58:e7:1a:f2:cb:15:
9b:3c:fa:ae:5b:be:ce:ba:4e:4a:a5:fe:47:64:da:
e1:5c:94:e5:68:30:54:bb:29:41:b4:b5:de:a3:62:
d1:50:b1:02:d1:46:27:9d:67:bb:a1:1f:0f:0a:b4:
5a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B0:05:DA:E3:20:7C:52:2D:05:52:E3:0E:68:BD:BF:7F:5C:1D:40
X509v3 Authority Key Identifier:
keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:74:34:9a:77:bd:5f:ea:fa:f2:a6:0f:dc:42:7a:56:e8:56:
a6:29:9a:82:92:31:9a:bb:b3:c7:3d:36:81:2f:83:9b:e1:52:
ff:03:9d:ad:0b:95:8f:5e:9f:b5:7c:ef:a5:93:15:9d:e9:e2:
61:38:61:1c:66:de:a5:41:b0:fe:87:8e:34:cd:84:65:87:be:
52:0b:91:9d:0b:bf:be:cf:04:19:43:6e:d7:85:00:c1:e3:b9:
88:50:7f:54:6f:4e:cb:68:26:58:28:b9:73:6a:6d:84:ad:df:
12:f0:e6:b0:78:ec:ce:d1:10:66:65:91:75:c5:8a:71:f1:a4:
50:e3:cb:bf:7b:4e:51:ae:73:29:61:25:b6:c1:d2:16:fc:f0:
2d:87:a7:17:92:b0:f3:bb:44:a3:b7:30:df:2b:1a:fa:ca:7b:
d9:6f:97:b1:76:23:04:0b:cd:13:d4:f2:5a:0d:96:77:53:0a:
8a:43:16:32:f2:1f:97:37:03:bf:e7:ba:13:5c:55:66:30:fc:
05:72:ba:c2:31:80:86:62:05:1f:0d:3a:69:93:87:4a:e7:1d:
33:f4:fc:e9:bb:6b:0e:38:8b:79:cb:86:c6:9f:30:b0:21:7f:
cd:c0:fd:40:1e:0d:28:88:83:c4:48:3e:83:37:81:4a:08:45:
8e:9f:a9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:42 2025 by rpki-client