Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: Faj7T+9zjHsl52okRVm+tSYlNYkqcXDldlYacQ/Di1M=
Subject key identifier: EE:0B:2D:BF:CB:51:D2:18:40:0C:E6:A4:65:C3:88:F5:79:FE:49:33
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 019A0BCB401AC186FFB9EF071CE244FC9933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 16F0
Signing time: Wed 22 Oct 2025 12:01:00 +0000
Manifest this update: Wed 22 Oct 2025 12:01:00 +0000
Manifest next update: Thu 23 Oct 2025 12:01:00 +0000
Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
2: 4kfMtLYb8t9NTo-YJ69UVZNvndE.roa (hash: mU2QRRVA7Ec6TMwp/iR1nKH5zbtHggkJvnoHoV9eFuY=)
3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: UfWXePKmtiDqPLCj1Ad9DC0u1K8JuHggLYe64eO55cE=)
4: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
5: cWqhhGQ2nwF4u5SVS7GOVj8_H8Q.roa (hash: tE3zP2hfr/4EiGnnKAeQTDpDnqcSls7BckOuw6iyYdQ=)
6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
9: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:cb:40:1a:c1:86:ff:b9:ef:07:1c:e2:44:fc:99:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Oct 22 12:01:00 2025 GMT
Not After : Oct 23 12:01:00 2025 GMT
Subject: CN=ee0b2dbfcb51d218400ce6a465c388f579fe4933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:37:e4:b9:bd:b2:55:f0:82:0f:de:5b:be:29:
d6:be:52:e8:ff:5c:f1:bd:0c:af:86:d4:d4:f8:d8:
67:36:ac:24:84:c1:58:f0:47:a0:22:c7:a4:2e:63:
c8:ce:12:18:ca:1f:89:9b:86:cb:72:68:06:b5:33:
b6:6e:a7:d5:e4:e8:09:a2:7f:16:41:b2:71:e8:0c:
0a:c7:dc:60:48:f0:71:8d:a9:a8:77:ea:9c:0a:bd:
37:d3:89:06:d4:14:78:a4:6e:7f:b8:d1:59:6d:de:
bf:ed:5d:1a:09:65:21:33:a8:7c:dd:98:97:36:68:
c0:0d:27:66:62:17:5a:d9:6e:4f:2e:0d:e2:c7:d9:
29:4f:75:56:7d:f2:be:87:73:ec:69:ba:69:09:ee:
12:80:11:fe:bb:c5:1b:de:78:d2:93:5e:2d:85:38:
c3:d3:ae:9d:57:56:75:57:52:5a:50:e1:4f:09:dc:
f1:fb:13:df:30:cf:91:24:25:03:35:5f:48:5c:96:
d9:82:06:5b:e5:91:24:c9:a3:fa:59:c6:df:53:94:
b1:79:0e:d9:bb:e0:80:3b:99:4e:bd:11:79:4d:e5:
7d:a7:a3:5b:a2:82:99:18:fd:e0:7c:ad:da:35:eb:
f2:81:b0:6e:1f:c0:f0:67:a4:35:73:67:57:eb:b8:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0B:2D:BF:CB:51:D2:18:40:0C:E6:A4:65:C3:88:F5:79:FE:49:33
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1c:35:1f:57:df:17:b1:71:d7:d5:4f:77:a5:69:7a:14:77:
d4:e8:70:43:59:1a:a6:43:5d:eb:7f:8b:d0:31:69:c7:67:26:
2a:d8:bf:d1:a9:13:73:60:f6:2a:42:44:7c:3b:f7:26:ad:96:
3f:39:08:40:ca:4b:e7:6f:5d:2b:81:82:e4:6f:88:87:39:10:
89:10:33:c6:59:c8:7b:9f:e7:78:ba:3a:07:fb:80:2f:22:2b:
a1:ff:15:bc:f0:fd:d0:a9:5e:51:d7:ea:7f:84:1a:32:0b:a3:
62:c3:55:05:be:70:a2:64:7b:0a:03:52:5a:1a:75:2b:e8:b6:
c0:ac:43:89:cc:ca:1c:53:e7:16:3c:17:18:7b:3c:68:e7:0b:
ad:bf:39:83:c4:3d:96:01:9a:08:e6:ae:99:db:a8:ad:c9:c8:
11:e0:26:ea:f8:32:d5:56:eb:dc:b8:04:79:7b:58:66:de:f6:
ca:02:65:8f:e7:84:17:f0:b7:fa:aa:98:f5:89:21:60:0f:9b:
d6:4a:1e:5c:09:5e:79:2e:98:a2:a4:f2:c4:c6:ca:45:2c:4d:
ce:e7:c1:d7:c4:af:38:ff:88:f4:0e:bb:a5:ac:8e:de:fe:ef:
7b:12:7b:c0:bb:96:65:4f:77:47:38:02:9b:87:b9:78:a4:1f:
38:2f:10:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:06:19 2025 by rpki-client