
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
File: 87fdVNqwL-jN6KheVp-CcIiXlBk.mft (raw, json)
Hash identifier: rjyGRBnrzMaOa4ICzKY9lKc+hN66h9pqN+98yVu1GQ4=
Subject key identifier: E6:A9:EC:0A:54:9D:EC:68:72:4C:CC:74:8D:05:E5:74:3C:20:D5:76
Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Certificate serial: 01992330F1292B538844AA662027A3027A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
Manifest number: 0BE6
Signing time: Sun 07 Sep 2025 08:00:33 +0000
Manifest this update: Sun 07 Sep 2025 08:00:33 +0000
Manifest next update: Mon 08 Sep 2025 08:00:33 +0000
Files and hashes: 1: 1-Umc9hOt2tpo1ZchNi7HZONvobM.roa (hash: uKhjdfQ+p8B+ov8GKsdABY8fRu2epUYrzObWxrEfxuQ=)
2: 87fdVNqwL-jN6KheVp-CcIiXlBk.crl (hash: H6AKGlB6aq7FJqTba1eAQSnrVqX6mvxMB1B325sZ5rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:f1:29:2b:53:88:44:aa:66:20:27:a3:02:7a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Validity
Not Before: Sep 7 08:00:33 2025 GMT
Not After : Sep 8 08:00:33 2025 GMT
Subject: CN=e6a9ec0a549dec68724ccc748d05e5743c20d576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d0:86:9c:b1:e7:47:ac:97:76:49:90:a8:90:
ee:c8:f5:43:56:19:f1:a6:73:f7:9a:9e:82:5a:4b:
ac:73:d1:6f:30:34:b0:3f:b8:ba:d2:ff:9c:84:8d:
8f:b9:30:9a:20:f0:9b:da:1e:80:43:01:a7:62:59:
f0:6f:fc:00:16:96:26:90:d9:24:dd:3a:52:e1:a7:
f7:85:e5:d5:d8:28:62:33:f5:7b:3c:1f:e1:99:ff:
d1:3f:02:f4:de:06:5c:e5:6e:9c:00:aa:5b:20:53:
64:2a:88:f9:1c:7c:24:1e:63:88:d1:ef:04:14:5f:
5f:70:d9:a0:5f:47:62:56:f8:f5:33:74:a7:ab:65:
86:6e:f6:63:65:bc:12:c8:e8:7d:b0:5d:ab:23:f3:
78:d6:ff:a2:9f:1d:a5:e0:c8:35:6c:a5:d8:02:28:
3a:df:15:eb:9b:86:5a:80:7d:db:d1:3a:6e:4a:47:
5b:be:11:97:12:78:2e:a3:50:25:db:c9:59:f1:f9:
cd:4a:94:6b:c4:27:fd:a3:fa:95:bf:d6:86:2b:91:
7e:22:7f:86:e4:86:4e:ff:23:67:a4:3d:a8:b2:b5:
e9:03:cf:21:3c:b3:dc:2a:d2:71:68:4a:e5:0b:be:
b6:8c:7a:64:bd:e7:fe:c8:50:d0:d2:fc:3e:35:01:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A9:EC:0A:54:9D:EC:68:72:4C:CC:74:8D:05:E5:74:3C:20:D5:76
X509v3 Authority Key Identifier:
keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:37:44:49:4a:b3:4c:02:05:55:c2:fe:61:0f:12:3c:1e:d4:
17:67:2c:ac:d4:8d:06:01:97:5a:b3:82:96:55:39:68:d7:30:
ee:27:be:6d:c5:92:e7:c6:33:3d:e3:66:9f:15:b1:61:39:46:
2c:6b:40:37:d6:98:12:1f:a1:7f:ef:7f:8b:cb:78:dd:13:cc:
6b:07:55:a8:3c:ab:24:0e:ac:f5:92:37:bf:05:49:2d:7f:ed:
4d:5c:1b:11:d8:cb:83:72:91:56:78:e0:fd:53:89:be:80:5d:
8f:a6:d0:7f:33:01:44:30:1b:dd:ee:7b:48:88:9e:f8:13:62:
98:d9:6d:7e:86:a2:ef:dc:0c:f2:b0:7b:4a:70:bb:77:6f:3f:
fb:1e:76:d4:d4:48:0e:4b:96:54:b9:64:74:31:80:ed:79:a6:
f6:0b:0e:79:b9:f0:5b:ce:9a:27:41:39:f9:eb:ec:51:4a:ae:
0b:55:34:8f:f9:af:4b:40:c4:64:5d:f7:ef:8e:65:16:20:49:
f3:b9:e2:3d:cc:65:bc:cd:6b:93:d3:81:d0:c7:2f:59:0b:ee:
31:b8:73:2e:db:e5:a5:7b:bb:04:2b:62:3a:8c:eb:aa:c2:0b:
b2:42:1c:12:16:14:30:44:4a:0d:f5:59:7f:27:fb:24:ec:37:
54:d0:ec:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMPEpK1OIRKpmICejAnqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjdkZDU0ZGFiMDJmZThjZGU4YTg1ZTU2OWY4MjcwODg5
Nzk0MTkwHhcNMjUwOTA3MDgwMDMzWhcNMjUwOTA4MDgwMDMzWjAzMTEwLwYDVQQD
EyhlNmE5ZWMwYTU0OWRlYzY4NzI0Y2NjNzQ4ZDA1ZTU3NDNjMjBkNTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dCGnLHnR6yXdkmQqJDuyPVDVhnx
pnP3mp6CWkusc9FvMDSwP7i60v+chI2PuTCaIPCb2h6AQwGnYlnwb/wAFpYmkNkk
3TpS4af3heXV2ChiM/V7PB/hmf/RPwL03gZc5W6cAKpbIFNkKoj5HHwkHmOI0e8E
FF9fcNmgX0diVvj1M3Snq2WGbvZjZbwSyOh9sF2rI/N41v+inx2l4Mg1bKXYAig6
3xXrm4ZagH3b0TpuSkdbvhGXEnguo1Al28lZ8fnNSpRrxCf9o/qVv9aGK5F+In+G
5IZO/yNnpD2osrXpA88hPLPcKtJxaErlC762jHpkvef+yFDQ0vw+NQE8aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOap7ApUnexockzMdI0F5XQ8INV2MB8GA1UdIwQY
MBaAFPO33VTasC/ozeioXlafgnCIl5QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdmZFZOcXdMLWpONktoZVZwLUNjSWlYbEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS84NDBkYzEtODNmYy00ZjlkLWJlNWUt
MTkzOTg4M2JiMWY4LzEvODdmZFZOcXdMLWpONktoZVZwLUNjSWlYbEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS84NDBkYzEtODNmYy00ZjlkLWJlNWUtMTkzOTg4M2JiMWY4
LzEvODdmZFZOcXdMLWpONktoZVZwLUNjSWlYbEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjdESUqz
TAIFVcL+YQ8SPB7UF2csrNSNBgGXWrOCllU5aNcw7ie+bcWS58YzPeNmnxWxYTlG
LGtAN9aYEh+hf+9/i8t43RPMawdVqDyrJA6s9ZI3vwVJLX/tTVwbEdjLg3KRVnjg
/VOJvoBdj6bQfzMBRDAb3e57SIie+BNimNltfoai79wM8rB7SnC7d28/+x521NRI
DkuWVLlkdDGA7Xmm9gsOebnwW86aJ0E5+evsUUquC1U0j/mvS0DEZF33745lFiBJ
87niPcxlvM1rk9OB0McvWQvuMbhzLtvlpXu7BCtiOozrqsILskIcEhYUMERKDfVZ
fyf7JOw3VNDspA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:47 2025 by rpki-client