Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: GEmI/dzPAVfM+GX6xFwffxKD7gUSSLkm26SKTwvya80=
Subject key identifier: C8:7A:ED:B7:9F:5F:61:B8:71:63:04:07:B4:5F:F1:78:A3:2B:1C:DE
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 01984BF816B9DCF198920915F7062828D151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 13:00:06 +0000
Manifest this update: Sun 27 Jul 2025 13:00:06 +0000
Manifest next update: Mon 28 Jul 2025 13:00:06 +0000
Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
2: 4kfMtLYb8t9NTo-YJ69UVZNvndE.roa (hash: mU2QRRVA7Ec6TMwp/iR1nKH5zbtHggkJvnoHoV9eFuY=)
3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: Vm2ICX+fzW6K/31oqE06fzj1EnDamrlG6B4SECND/9A=)
4: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
5: cWqhhGQ2nwF4u5SVS7GOVj8_H8Q.roa (hash: tE3zP2hfr/4EiGnnKAeQTDpDnqcSls7BckOuw6iyYdQ=)
6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
9: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:16:b9:dc:f1:98:92:09:15:f7:06:28:28:d1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Jul 27 13:00:06 2025 GMT
Not After : Jul 28 13:00:06 2025 GMT
Subject: CN=c87aedb79f5f61b871630407b45ff178a32b1cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:09:11:4b:2f:4f:01:6e:c1:c8:d8:27:db:
04:3b:e0:ab:05:8f:6a:40:36:65:2d:a4:4a:53:87:
8a:6b:ec:2a:97:f8:25:53:80:0a:9c:c1:09:93:da:
73:f0:c0:99:81:11:4e:4a:98:3b:fc:a3:4d:68:35:
6c:e6:73:09:dd:ab:69:0d:35:6c:70:5a:1a:3c:48:
5b:ac:0f:b0:75:9e:85:62:71:13:dd:45:47:a7:65:
ef:b5:f7:17:0e:82:e5:6c:85:9a:d2:26:09:80:a4:
b8:d7:51:43:c9:95:7e:8f:b0:b1:c9:5b:2e:2c:6e:
5d:6c:f8:a1:6f:56:de:5d:5e:40:8a:78:fb:05:91:
8b:c8:3f:1c:cf:a1:89:37:8f:48:86:af:aa:71:07:
70:51:5d:66:25:0e:96:7b:2c:df:fb:a7:3d:99:66:
d4:d4:88:0f:d1:95:db:90:f0:43:3c:a1:2c:e6:3e:
1a:3b:10:f9:ab:c8:94:8b:e5:7d:04:a9:0e:0f:fa:
9b:3c:77:3c:55:81:45:40:88:93:e9:d9:68:67:38:
9d:1d:4e:14:5d:7f:e6:65:5d:55:46:c9:10:ac:b7:
2a:eb:57:5f:2c:48:ed:2b:f1:7d:9c:ad:51:46:b4:
40:50:ed:fe:5e:36:fa:4c:d7:2d:41:fb:2b:30:8f:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7A:ED:B7:9F:5F:61:B8:71:63:04:07:B4:5F:F1:78:A3:2B:1C:DE
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f2:65:7c:a0:c5:87:af:e1:4d:6f:55:45:f3:18:96:d4:6b:
20:94:70:aa:fa:1f:c7:01:33:4e:03:a2:97:ad:de:8a:92:72:
29:8b:67:71:42:4e:57:b2:41:7c:d1:5b:49:85:6a:c7:24:54:
07:87:30:7b:99:43:ef:a5:1c:47:33:8e:73:9a:0c:54:b5:02:
a8:1d:5e:22:92:75:e3:b0:e8:1f:7c:9b:e2:b1:b2:43:58:c9:
fe:3b:2a:67:25:eb:0d:0a:ad:8d:f7:31:c2:10:a0:d5:43:73:
38:5e:db:3e:d2:f4:b8:b3:2a:ff:3c:14:5c:d5:10:4a:ef:b3:
f0:15:40:f1:9f:f8:65:8a:02:8d:6a:d6:7f:3e:b9:e6:68:5a:
f3:4c:90:06:ae:53:99:93:d7:2c:7e:dc:da:d1:e0:9c:44:a9:
39:c0:ce:17:59:5e:15:d2:d7:6f:22:77:c8:a1:20:5a:46:47:
2c:23:ba:68:13:21:24:c9:11:09:ce:91:ee:cf:d0:03:c6:49:
04:2c:83:4c:7c:32:26:da:bd:2d:72:8d:15:ef:20:bf:ee:da:
31:98:1e:8d:ab:30:1e:39:5e:e7:17:11:c9:bf:61:5d:35:df:
f8:a1:6f:41:1d:38:96:be:71:16:16:cd:e5:2c:4d:a6:1d:a2:
2e:7c:ed:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:47:24 2025 by rpki-client