Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File: 87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier: YXoWHzBzR+ihBfdGLhuvmBd5ao1mbyeO9s4sLZC6AUI=
Subject key identifier: BC:70:B8:91:C3:A4:A0:87:7A:EF:A7:E2:CE:35:FC:30:80:4A:83:BA
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 0199578D21F2318C87AA95DCD8A67F90AF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number: 0FC2
Signing time: Wed 17 Sep 2025 12:01:30 +0000
Manifest this update: Wed 17 Sep 2025 12:01:30 +0000
Manifest next update: Thu 18 Sep 2025 12:01:30 +0000
Files and hashes: 1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: ad+oaDq6hkOb76ElvtrTIBJK4zvafKMFN/aMYylVd+8=)
2: 8LQo-NmzGy5l2r5NZYIeKNdXs14.roa (hash: ilvAF3/ySzxVBGtuDQdjN+a1IHb253ip3G4kBn3IpkA=)
3: 8s7vHKE6FBZYlH7mxDn7_1ykPk4.roa (hash: fgNyBR69p7xJvQXl06eoPq2tjnGBemgh7E+PjbLx9mo=)
4: KBnV22O0C3tEALoBBJIOxcHb15g.roa (hash: Y3gI4bcoG8A3aqSjWcRxoni0bjtg/AtMO88Pu/MJNWg=)
5: Lq77aAwST8RILyM-oL6rNeFnjCE.roa (hash: Loe+ahaVydEMf0Ago+iaNs6AzxcPRts/E2zKD5WoQYs=)
6: ZoIewHefhjHP2Vd9cNeP-TAR-vM.roa (hash: IG+hitjDPUIZMjcFs/DHXrxqndBqaN9wlOddbrMn1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:8d:21:f2:31:8c:87:aa:95:dc:d8:a6:7f:90:af:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Sep 17 12:01:30 2025 GMT
Not After : Sep 18 12:01:30 2025 GMT
Subject: CN=bc70b891c3a4a0877aefa7e2ce35fc30804a83ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:f0:66:68:27:4b:34:b7:45:ea:bf:40:8f:
c5:85:e6:61:88:69:1f:01:8c:ef:4d:a0:cc:1f:53:
ba:38:70:8a:21:d5:75:9f:7e:98:2e:4e:2b:4c:5d:
6e:88:ed:cd:3e:fe:e8:58:e7:b7:7a:4b:71:9c:00:
49:bf:88:0d:1a:a8:8d:66:9e:6f:ea:f6:84:d2:06:
8f:14:1e:73:e8:a3:c3:3a:75:d5:2f:0d:60:aa:b7:
18:73:e8:d5:72:6e:28:7b:a1:6e:8e:67:b7:83:22:
f1:81:ec:bf:57:65:8d:c6:7d:4c:6b:49:0b:16:cc:
6c:7a:ea:29:b6:30:29:c3:32:01:7b:dc:75:5b:cb:
01:4d:92:40:96:1d:2a:17:70:1e:0e:ea:ae:06:f4:
1a:14:33:db:1e:94:e9:f9:26:8c:e1:c6:29:36:91:
a5:f3:80:aa:18:46:f0:20:a3:fd:21:a4:1b:28:6e:
4c:56:6c:69:5a:a3:94:5d:35:85:fd:76:3f:e6:6e:
49:26:bc:a4:5d:ab:33:df:15:d5:1e:11:13:f7:f7:
99:e0:f2:7d:5f:9a:55:62:05:3c:c5:55:3c:21:dc:
99:9c:02:b8:44:21:23:7c:36:99:d2:6e:38:21:45:
01:c6:dd:f5:74:9b:19:9b:0e:9c:0c:2f:5b:c8:01:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:70:B8:91:C3:A4:A0:87:7A:EF:A7:E2:CE:35:FC:30:80:4A:83:BA
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a0:49:89:8b:6a:dc:65:78:d2:bb:58:9a:76:3c:46:1c:9b:
d8:d3:03:2c:dd:d0:db:6a:a9:5e:b6:7c:0d:14:56:52:7d:69:
5a:8c:ca:dd:f9:e5:6f:9d:6c:0a:86:f6:a1:6e:8c:85:24:d0:
f2:0a:14:13:67:b3:d7:52:e5:d8:35:d4:47:ec:10:38:49:57:
44:46:b6:f4:38:81:16:42:75:7d:1c:2b:6c:31:be:bd:0f:bf:
78:9b:d8:f0:bd:de:3f:03:07:2f:33:71:30:b1:65:50:0a:28:
da:68:47:c5:c8:4a:5d:48:8e:70:15:c9:5f:18:09:dc:8d:62:
76:43:a9:41:23:a1:89:9a:e0:f3:39:85:c8:95:df:34:37:ed:
b2:cf:4f:d6:f4:1a:c7:94:0a:27:94:b4:bd:99:55:40:68:94:
87:c8:5e:4c:1b:80:7a:33:c2:75:eb:01:c2:9d:e7:0a:62:08:
f4:7d:5a:c2:94:96:52:a0:63:e7:e4:ad:41:a9:61:b3:0b:99:
e7:17:38:3c:3b:83:14:f0:13:90:3f:33:0b:6b:65:1a:d6:89:
36:c6:03:10:f9:4f:da:da:7f:39:fd:28:db:fe:75:1d:bd:0e:
98:cc:42:23:30:e2:59:04:a1:77:5b:9f:a3:b1:3f:47:6a:b7:
e8:26:dd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 18:27:05 2025 by rpki-client