Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
File: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft (raw, json)
Hash identifier: /cmHatyWFNqrOK4Yno/KyW933wb47I8Ye9bUrxYkuSE=
Subject key identifier: F1:C2:64:4F:88:2A:06:73:5A:D0:7D:53:72:5F:87:09:79:CF:0B:1E
Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
Certificate issuer: /CN=f37063a85445019ab845a5b7e54395cdd39927f6
Certificate serial: 019A72267A602C882A33340987D6B8DD04C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
Manifest number: 1259
Signing time: Tue 11 Nov 2025 09:01:55 +0000
Manifest this update: Tue 11 Nov 2025 09:01:55 +0000
Manifest next update: Wed 12 Nov 2025 09:01:55 +0000
Files and hashes: 1: 55zACBEV4ZrkKgA_PfqKETWoChA.roa (hash: B0R4BgAeGvCI3HMcrqcW5pltBvObBUfBObcQdCL+Wog=)
2: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl (hash: nu7g3FyUhQTSr4YbeikQQOwNiMF7c/CSHSwvXKYyUrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7a:60:2c:88:2a:33:34:09:87:d6:b8:dd:04:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6
Validity
Not Before: Nov 11 09:01:55 2025 GMT
Not After : Nov 12 09:01:55 2025 GMT
Subject: CN=f1c2644f882a06735ad07d53725f870979cf0b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:da:29:0f:9f:e4:04:f1:42:74:36:d7:68:99:
9a:9f:7e:d6:8b:cd:02:4a:24:1f:2c:70:8c:a9:42:
4b:8f:92:55:52:7a:97:c5:04:02:1e:5e:60:36:69:
9f:c9:7c:28:a1:2f:54:9c:ce:47:de:32:2b:6d:e7:
8c:a4:00:aa:3c:b6:56:cd:4e:dd:3b:4e:d0:26:25:
ea:9a:99:55:54:24:f8:c2:af:d7:88:b3:aa:c0:34:
02:24:d5:b9:b7:f6:4d:3e:05:6c:3d:ac:2f:9f:06:
25:60:4a:24:42:02:cb:0f:a8:d7:2c:b9:66:c7:b0:
3b:b0:38:8e:27:71:9a:ac:51:12:9c:f3:5b:48:16:
ae:c3:6f:a3:19:07:db:b5:f2:a3:7a:a9:c6:25:d0:
46:0a:71:bd:51:1f:49:c2:2d:a3:6f:56:ea:52:6e:
ff:45:1f:c7:3c:ff:52:76:79:4b:ee:17:e7:88:2d:
d8:40:22:9d:46:18:99:1c:4d:39:4a:ed:15:5e:f7:
9e:51:7d:6b:df:af:a7:66:0f:1a:e0:50:1c:c0:fb:
08:6c:fd:51:c0:d6:d3:57:86:60:19:f8:58:fc:83:
ec:e2:88:0b:8e:cf:60:39:ee:ed:a6:5f:f4:75:63:
2c:2a:73:b0:e5:6c:d4:6c:91:f1:8f:6e:10:88:4f:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C2:64:4F:88:2A:06:73:5A:D0:7D:53:72:5F:87:09:79:CF:0B:1E
X509v3 Authority Key Identifier:
keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:e7:1a:03:81:71:69:d5:78:26:e1:b7:3d:00:d2:82:33:71:
f9:76:da:9d:ee:69:52:39:c0:46:3d:14:09:67:bc:e9:16:81:
6f:f3:be:f8:d3:8c:a1:b6:37:af:b5:ef:db:35:84:aa:8d:38:
00:14:3e:68:d8:ea:6c:c0:4d:b1:6e:52:f0:e7:0d:83:e8:01:
ec:dc:6f:56:79:b0:05:cd:09:23:97:93:c3:d3:d9:60:5e:63:
0d:d4:b3:e4:45:f2:aa:0f:f8:c4:39:cf:c9:a3:ee:38:9d:f7:
df:a6:a4:a3:98:c6:3c:e3:6f:e4:83:83:8d:c5:43:5f:c3:ff:
70:0b:8f:14:ae:32:db:4c:0b:ee:89:23:5c:41:d1:d1:8d:f4:
62:44:f4:5c:94:69:7d:4d:3a:16:a4:f5:08:ae:f1:04:53:57:
be:1e:89:a6:8a:4f:ba:90:ca:9f:fa:e6:ed:17:39:d4:e6:5e:
7d:60:ba:96:02:8e:09:f4:85:12:e9:7b:66:59:de:f9:3c:74:
a2:b3:b7:15:dd:44:aa:53:2a:e5:15:f1:49:6b:bf:11:70:bd:
34:c5:86:10:4c:76:d6:7b:5b:3a:41:40:b0:68:24:56:22:4a:
60:b2:ea:10:45:0b:a8:6c:01:b1:cb:d2:fe:a3:68:da:00:5c:
6a:6f:9f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:49 2025 by rpki-client