Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
File: 87qQxx60ywFpyUhD5ccv13dQGQY.mft (raw, json)
Hash identifier: FG+gtKC03YCBege3BTp8zppYbQhzq/KOymWs8ll50z8=
Subject key identifier: B8:76:E0:08:BB:D2:41:8A:EA:F0:7C:8F:5F:24:C3:2F:BC:A9:4C:1D
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial: 01993802CEFCAA0C2BAA68C3B2A3FE8A88A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
Manifest number: 14D4
Signing time: Thu 11 Sep 2025 09:02:11 +0000
Manifest this update: Thu 11 Sep 2025 09:02:11 +0000
Manifest next update: Fri 12 Sep 2025 09:02:11 +0000
Files and hashes: 1: 87qQxx60ywFpyUhD5ccv13dQGQY.crl (hash: 1X7+ONuK6rs95kAo4VE4Nw5J2pgrwxQjX630ajwAX3Q=)
2: JysSz_R1K3TNaznJ02DbQNBve_s.roa (hash: BaOSaAFh8MSaQI0AxI9H+YSRs1439Nfg5CR//S5kRHM=)
3: cPSt1cBK1yUkGNEnPd-jB0H0f98.roa (hash: 6XTiW18fxhFDL+0aNweHaTDamcOXmMJdNCPIYbjuHV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 09:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:ce:fc:aa:0c:2b:aa:68:c3:b2:a3:fe:8a:88:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Validity
Not Before: Sep 11 09:02:11 2025 GMT
Not After : Sep 12 09:02:11 2025 GMT
Subject: CN=b876e008bbd2418aeaf07c8f5f24c32fbca94c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:a1:31:73:73:df:71:33:43:17:5f:2d:37:
be:47:99:96:d8:c8:dc:dc:b6:b9:c7:14:09:f6:d4:
57:f1:18:e9:e6:3b:c8:52:5f:04:a9:07:0d:01:17:
97:5d:67:17:1b:4c:74:0e:f6:bb:8f:94:7c:c3:db:
e0:b6:83:b5:ab:39:02:a8:1d:fd:11:8e:39:ef:ba:
39:29:64:b9:96:5e:88:9a:48:d2:e5:74:62:9e:3f:
33:50:1f:58:c4:1b:08:f9:db:8c:cf:e5:ef:30:b8:
61:8c:d0:36:a3:b3:dd:1b:3e:63:de:c4:ab:23:bb:
87:dd:ad:5e:d2:58:37:ee:ef:e6:1f:d7:64:1f:61:
aa:16:f5:0f:c2:10:36:8e:0e:25:2b:c8:f3:3b:78:
46:42:3a:ea:ef:b5:68:c2:63:93:21:23:ad:84:5c:
9c:91:34:3b:ce:64:2b:38:60:a6:51:51:c7:27:a3:
6b:10:3e:bb:6c:93:f9:5d:8c:6f:75:68:05:5d:fd:
ea:15:37:10:8d:51:18:01:13:83:44:fa:29:f0:77:
7c:f2:8d:bd:3f:22:64:37:d7:14:b5:cd:71:1f:dc:
fa:e5:64:80:53:a7:d7:10:65:15:f2:9c:d3:19:51:
f6:7e:2c:25:89:6d:36:4e:11:6c:e2:9a:23:de:97:
05:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:76:E0:08:BB:D2:41:8A:EA:F0:7C:8F:5F:24:C3:2F:BC:A9:4C:1D
X509v3 Authority Key Identifier:
keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fc:77:fd:dd:39:44:5b:0c:6b:83:bf:2e:43:d7:36:81:87:
52:91:2f:9e:40:29:b3:19:16:67:29:9e:70:7b:15:24:50:91:
70:1a:74:dc:b0:1d:d9:ae:f4:18:3d:ba:b8:94:c4:ea:da:14:
cd:1f:4e:e8:e5:db:25:cd:b0:3e:f3:f3:02:33:11:9c:29:34:
81:cb:a8:be:03:96:c8:73:fe:d3:6d:72:cc:ba:8c:cd:f3:0f:
a8:e7:62:db:37:03:fa:db:da:28:bc:a9:c7:b2:c5:58:23:ff:
d9:96:fd:a8:56:34:4c:12:0f:8b:df:fa:4b:a9:d2:83:3d:af:
fa:50:69:86:6b:3a:8f:0d:b4:2b:90:7a:5a:09:34:39:9f:7b:
00:ff:f4:24:49:96:f3:dd:d1:61:a1:0b:ae:62:27:14:b7:d4:
40:3b:05:cd:7a:ab:dc:fa:d2:70:0f:8e:c5:92:12:24:4e:19:
76:26:55:51:88:30:ae:7b:3f:dd:5d:22:97:bf:99:8d:b7:98:
a9:bc:a9:ba:25:8d:57:f5:44:aa:30:05:1a:67:9f:07:41:e1:
d3:66:75:4b:d8:25:b2:9c:37:3b:32:04:3f:ff:59:e9:78:67:
c6:e7:b5:83:53:23:7b:41:07:c5:9b:25:d9:76:53:1d:71:29:
bf:7e:06:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:01:19 2025 by rpki-client