Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: jTGKtkApuS+Uy5z0cbZ5yZt4e3ZfY2tf/4m+LHvWY1A=
Subject key identifier: 7F:55:57:AA:CD:8D:64:F7:1A:BF:CB:E1:82:16:DB:EE:7F:1E:30:C7
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 019752D8A7DB6AC0E888502A924D3DDEBD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 1587
Signing time: Mon 09 Jun 2025 04:00:19 +0000
Manifest this update: Mon 09 Jun 2025 04:00:19 +0000
Manifest next update: Tue 10 Jun 2025 04:00:19 +0000
Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
2: 4kfMtLYb8t9NTo-YJ69UVZNvndE.roa (hash: mU2QRRVA7Ec6TMwp/iR1nKH5zbtHggkJvnoHoV9eFuY=)
3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: 9hB7mB7aVLFa9zCsCOa+c/T9BH7KbfRbUZAZhNSqS2E=)
4: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
5: cWqhhGQ2nwF4u5SVS7GOVj8_H8Q.roa (hash: tE3zP2hfr/4EiGnnKAeQTDpDnqcSls7BckOuw6iyYdQ=)
6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
9: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:a7:db:6a:c0:e8:88:50:2a:92:4d:3d:de:bd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Jun 9 04:00:19 2025 GMT
Not After : Jun 10 04:00:19 2025 GMT
Subject: CN=7f5557aacd8d64f71abfcbe18216dbee7f1e30c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:de:9e:08:38:91:50:7c:59:ab:e6:cd:ab:
fa:c1:0c:f8:90:f0:ba:06:f0:0f:44:74:c6:d0:09:
ee:6f:54:93:90:c7:bc:43:98:d3:59:68:15:20:5d:
72:2f:87:72:89:cd:47:0a:0e:df:e6:24:9f:9f:c2:
4c:2d:a5:4a:bd:f7:c7:09:f6:b6:72:0c:fe:60:a7:
8b:8d:94:85:4c:1f:e4:ad:e7:ed:2f:4a:10:28:bf:
b1:0d:fb:6c:c8:3e:22:4d:f3:2a:1d:7f:f1:a5:89:
8c:64:5b:4a:7b:12:e3:65:4d:b3:17:59:a6:7c:fd:
b8:6a:77:f1:61:24:7a:79:f7:be:49:4a:ee:ee:c1:
df:5a:02:20:82:77:77:eb:18:e7:b6:3d:5e:49:24:
aa:52:6e:06:a7:d0:bc:17:19:1e:2b:45:95:78:57:
7c:0b:e3:8d:b2:73:f8:9c:92:13:33:db:81:4c:54:
52:92:99:e1:a8:5e:ea:f5:0d:11:00:cb:6a:e5:28:
c5:90:50:91:49:07:64:15:ad:d0:04:f4:3a:dc:7b:
8e:4c:20:85:12:67:4d:24:5a:81:ee:17:6a:40:f5:
9d:bb:f5:67:88:7c:3e:32:e1:99:e2:a1:03:6e:b2:
20:e8:0b:3f:d1:40:21:00:af:1a:4d:b9:b5:72:ae:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:55:57:AA:CD:8D:64:F7:1A:BF:CB:E1:82:16:DB:EE:7F:1E:30:C7
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c4:eb:79:01:8b:e6:7d:c4:b1:8d:08:f5:b9:2a:d9:4d:d2:
85:1f:fa:59:2b:3f:94:6b:57:72:79:3d:3b:8b:15:b1:8e:c0:
e0:22:84:e5:5a:71:58:cc:de:d8:03:a0:8a:75:71:9e:0e:7a:
53:46:4c:d2:88:0e:91:46:e2:f5:cb:48:c3:73:24:24:79:72:
19:8f:90:54:9f:4d:2c:12:82:48:1b:83:d5:de:15:bd:c4:39:
ba:d7:63:c5:4a:4c:7a:b3:5f:48:bd:6f:6d:3b:b5:10:1f:5b:
fb:fe:35:94:f5:3c:9a:96:3d:77:69:d2:c1:c1:92:b6:4c:2e:
1f:9a:09:63:46:a3:cb:7c:07:13:75:44:01:7f:5d:74:41:39:
10:26:b2:e7:c1:ff:75:c3:1f:80:04:9c:17:9e:a2:73:6c:d2:
81:57:05:b1:f3:09:89:99:39:b9:29:5c:21:d8:84:d8:7b:e1:
f7:70:a6:7e:9a:c6:42:90:4e:1d:94:d0:01:e3:98:7e:19:6c:
02:ed:9c:66:bf:44:5c:61:f1:b1:5c:39:57:3e:7a:71:76:b5:
69:51:fa:5c:fe:d8:14:aa:19:e3:49:44:62:ec:78:d2:52:2d:
c5:2e:44:4a:b7:a9:5d:23:bd:c8:fb:27:ce:d0:03:9c:f5:69:
68:65:bb:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdS2KfbasDoiFAqkk093r2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz
YjJjYTIwHhcNMjUwNjA5MDQwMDE5WhcNMjUwNjEwMDQwMDE5WjAzMTEwLwYDVQQD
Eyg3ZjU1NTdhYWNkOGQ2NGY3MWFiZmNiZTE4MjE2ZGJlZTdmMWUzMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14/engg4kVB8Wavmzav6wQz4kPC6
BvAPRHTG0Anub1STkMe8Q5jTWWgVIF1yL4dyic1HCg7f5iSfn8JMLaVKvffHCfa2
cgz+YKeLjZSFTB/kreftL0oQKL+xDftsyD4iTfMqHX/xpYmMZFtKexLjZU2zF1mm
fP24anfxYSR6efe+SUru7sHfWgIggnd36xjntj1eSSSqUm4Gp9C8FxkeK0WVeFd8
C+ONsnP4nJITM9uBTFRSkpnhqF7q9Q0RAMtq5SjFkFCRSQdkFa3QBPQ63HuOTCCF
EmdNJFqB7hdqQPWdu/VniHw+MuGZ4qEDbrIg6As/0UAhAK8aTbm1cq57KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9VV6rNjWT3Gr/L4YIW2+5/HjDHMB8GA1UdIwQY
MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct
NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1
LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8TreQGL
5n3EsY0I9bkq2U3ShR/6WSs/lGtXcnk9O4sVsY7A4CKE5VpxWMze2AOginVxng56
U0ZM0ogOkUbi9ctIw3MkJHlyGY+QVJ9NLBKCSBuD1d4VvcQ5utdjxUpMerNfSL1v
bTu1EB9b+/41lPU8mpY9d2nSwcGStkwuH5oJY0ajy3wHE3VEAX9ddEE5ECay58H/
dcMfgAScF56ic2zSgVcFsfMJiZk5uSlcIdiE2Hvh93CmfprGQpBOHZTQAeOYfhls
Au2cZr9EXGHxsVw5Vz56cXa1aVH6XP7YFKoZ40lEYux40lItxS5ESrepXSO9yPsn
ztADnPVpaGW7/A==
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:53:22 2025 by rpki-client