Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File: 85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier: 4f0gU1/p+eFzBmifcImPIz383ZTr6VB0PkN5UkIgsrI=
Subject key identifier: 90:C3:60:B6:17:7D:9D:B0:4F:21:3E:48:AB:FA:79:58:A5:70:EB:8A
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial: 019A09DC7BD93AB1055070D86FED9E5600AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number: 16E8
Signing time: Wed 22 Oct 2025 03:00:35 +0000
Manifest this update: Wed 22 Oct 2025 03:00:35 +0000
Manifest next update: Thu 23 Oct 2025 03:00:35 +0000
Files and hashes: 1: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: 1f48cIqbQZqp4yLae8ayZ8Id7Sbx94xdFXiyCFS7Ya0=)
2: DgSG9NAY-GeZhhQF_9nz_5bnH4g.roa (hash: HVd5RwrEtlWn4VmR//6rMsJVil50z8bOvrCZBZiqbC0=)
3: KW9AN_X4Hh4VKuAnb6bJtRrKymg.roa (hash: J21F/I0zRgekIus74H7I/v2eoj4Bzdqg85T8XsMU8eI=)
4: KaCCbIDfk6xPLr8lzeQM2ayQkYY.roa (hash: stYyC3DZ280ukMQVQAStdzjvt9KMG36guiRh8dH8BRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:7b:d9:3a:b1:05:50:70:d8:6f:ed:9e:56:00:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Validity
Not Before: Oct 22 03:00:35 2025 GMT
Not After : Oct 23 03:00:35 2025 GMT
Subject: CN=90c360b6177d9db04f213e48abfa7958a570eb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:4d:12:52:44:87:33:2b:f0:4a:7a:51:b5:
52:75:d2:3c:90:e6:5a:3d:f3:1b:f7:59:42:4c:b3:
22:bf:64:c2:b3:5a:ee:96:6f:64:b8:fa:68:59:7b:
d0:71:87:17:a2:af:26:0b:cc:09:5d:4f:b2:7d:b2:
03:a8:ed:ac:a4:3c:70:ff:13:4b:8b:a3:c2:0b:dc:
da:f9:24:22:06:70:8f:9f:db:6f:2d:b7:b8:49:24:
d3:ba:91:f2:a3:83:f6:c1:dc:66:c5:39:38:85:6e:
2b:fa:70:7e:60:c0:9a:0c:00:a2:c8:af:d3:ac:f2:
9b:77:ee:bb:61:3a:4a:f1:5c:ed:98:50:9b:ce:b8:
df:e3:72:e7:ee:e5:b9:9b:01:c1:bb:be:40:65:bf:
d7:30:e9:99:35:84:04:73:fe:47:72:b9:2c:5a:9a:
a3:1d:bf:1c:3d:fe:78:67:c5:34:99:98:d8:7c:a3:
ed:db:47:bf:81:7e:63:5f:f7:68:ae:aa:c7:5a:28:
02:75:63:13:44:55:56:5c:e8:cd:12:ac:fb:f7:04:
7d:14:6a:df:95:f9:b8:f2:0e:c7:74:2a:76:73:ea:
6f:19:4f:f4:45:76:84:ee:e9:56:e7:4b:8a:74:e6:
7d:aa:b6:86:b9:49:23:84:cc:63:27:31:28:87:08:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C3:60:B6:17:7D:9D:B0:4F:21:3E:48:AB:FA:79:58:A5:70:EB:8A
X509v3 Authority Key Identifier:
keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5f:08:19:0e:1c:bf:2d:41:d2:3d:96:59:01:9a:9c:47:a6:
38:d0:7a:fd:10:91:4a:50:ae:f7:c6:1e:f0:a3:b1:2f:73:05:
6c:2e:7d:e0:3b:c1:31:e4:2d:cd:b6:c0:43:df:76:f7:97:8f:
35:56:9b:39:ac:f2:22:43:47:a3:8e:bd:86:ff:9e:07:01:6e:
77:29:21:c8:37:e1:f6:92:74:1c:1c:f1:f4:f4:1a:d0:ba:9f:
44:34:19:09:a9:ba:52:0e:75:ca:ca:85:55:37:3c:b1:9f:c9:
7f:96:48:e1:af:34:11:19:97:34:00:cc:dc:70:fb:29:e2:45:
e1:c0:2c:22:13:fc:99:f2:33:9e:35:b2:7c:f9:3e:25:9d:f2:
cc:f9:f5:b8:7e:dd:4a:21:18:69:1a:5a:b5:3d:2a:1f:fa:2c:
7e:19:e9:14:52:b7:1c:33:9c:7c:a1:62:1c:7c:3d:f4:b6:5e:
d5:1d:ae:91:98:de:ae:e1:09:79:47:3c:d8:ec:77:5d:7c:8a:
8e:39:da:ac:df:ea:14:4f:d9:e2:c7:09:da:dc:b3:37:50:c7:
ce:48:cc:4f:07:68:df:60:5b:b5:c6:a7:72:7f:24:8a:a8:bc:
7b:bf:18:18:91:5a:4d:68:8e:d6:91:16:62:80:fd:13:26:2b:
4d:2a:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:08:49 2025 by rpki-client