Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
File: 87qQxx60ywFpyUhD5ccv13dQGQY.mft (raw, json)
Hash identifier: s2WzSsgkw058jUin7QSMg253XGrUdAb5U4HDB+8l2Nc=
Subject key identifier: C7:1F:DD:57:AC:FB:34:82:4B:05:49:3C:48:9F:FA:04:A5:14:D3:D2
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial: 019A70DBE12A5FBEE0DF606CABB4CC48F954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
Manifest number: 1576
Signing time: Tue 11 Nov 2025 03:00:49 +0000
Manifest this update: Tue 11 Nov 2025 03:00:49 +0000
Manifest next update: Wed 12 Nov 2025 03:00:49 +0000
Files and hashes: 1: 87qQxx60ywFpyUhD5ccv13dQGQY.crl (hash: uPw3cgZT7HSyMmxESt4kdpz1rT80ath67ReJg1wzzgA=)
2: JysSz_R1K3TNaznJ02DbQNBve_s.roa (hash: BaOSaAFh8MSaQI0AxI9H+YSRs1439Nfg5CR//S5kRHM=)
3: cPSt1cBK1yUkGNEnPd-jB0H0f98.roa (hash: 6XTiW18fxhFDL+0aNweHaTDamcOXmMJdNCPIYbjuHV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e1:2a:5f:be:e0:df:60:6c:ab:b4:cc:48:f9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Validity
Not Before: Nov 11 03:00:49 2025 GMT
Not After : Nov 12 03:00:49 2025 GMT
Subject: CN=c71fdd57acfb34824b05493c489ffa04a514d3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:98:26:73:23:df:e3:97:a2:e5:e9:4a:71:
f4:c2:e0:0b:9b:d8:db:5a:86:3a:ee:e8:db:ee:03:
88:4b:62:c2:71:99:27:5a:a9:6e:2d:b0:ad:5d:fa:
f5:b2:86:9e:24:0e:ce:71:eb:4d:0e:0d:6d:81:e4:
09:22:3d:3b:c8:a1:f4:47:01:2c:1c:5f:d8:0d:e3:
ef:2e:81:c7:4c:3d:cc:9d:06:af:7c:df:8e:6f:97:
64:31:11:f2:37:e6:3c:17:2b:e4:51:f9:53:ed:1c:
06:40:39:7b:fa:77:95:c6:be:f7:ef:c5:63:26:d5:
86:6f:90:32:aa:20:39:be:69:7a:4f:4e:b3:55:d1:
da:e5:45:6f:66:e1:6c:18:59:e1:77:25:da:c8:35:
f8:6d:70:76:8e:0c:90:c1:95:ad:fd:f1:1d:d3:f6:
d8:06:24:50:6e:e1:b0:0c:45:c1:24:9b:3b:08:29:
d2:42:83:06:ca:e2:74:36:b4:fd:c2:a5:e2:d3:e9:
b6:34:3e:07:eb:37:09:13:fc:03:4c:eb:7f:27:94:
34:fc:5c:89:ab:b4:0b:59:e7:ff:bd:f6:92:c4:2f:
de:de:bc:22:0d:40:2e:7c:c4:a7:2b:25:08:ec:40:
69:5a:e5:44:80:80:fa:92:58:3b:59:0c:97:bb:3c:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1F:DD:57:AC:FB:34:82:4B:05:49:3C:48:9F:FA:04:A5:14:D3:D2
X509v3 Authority Key Identifier:
keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ff:9b:be:cd:62:68:59:34:06:ab:29:a6:5c:14:fd:ef:d0:
ff:70:a3:4a:90:9a:0e:fd:6a:a0:15:a9:47:f3:da:27:b8:9d:
9e:9a:29:ed:b7:da:f2:23:7a:41:fd:a7:28:1b:20:2e:e6:a9:
27:d2:e4:67:a4:44:4f:6c:66:13:0a:62:e6:b7:50:58:99:53:
54:62:ce:ee:5e:4b:63:ff:2e:02:27:ed:b4:b4:5c:dd:43:ce:
84:30:7c:1f:5e:14:85:68:63:6e:0f:24:55:ef:9f:a2:6c:85:
40:37:c2:81:7b:1f:3f:ec:b7:3b:20:b3:32:f3:fe:61:0c:e8:
53:55:01:f9:4e:5a:7d:cc:3c:3b:f4:45:a0:cb:18:ce:b5:c1:
51:d1:cd:3d:10:71:1d:86:13:08:45:05:9f:86:76:0e:4b:4c:
fa:f9:d1:a0:25:38:33:1a:cd:18:bf:cd:55:67:42:3c:80:d9:
0c:cb:c0:b0:f6:2e:bd:25:e2:86:96:1b:4a:21:18:25:cc:37:
59:ca:19:79:62:f9:f7:a2:8b:12:1d:02:62:de:f1:86:77:df:
ed:dc:21:71:34:fd:09:b3:29:f2:9f:7d:9b:b2:3f:b1:76:87:
fc:43:15:d1:9d:18:cd:0d:84:57:92:0f:5d:c6:95:1c:4b:81:
b5:aa:87:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:49 2025 by rpki-client