Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File: 82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier: zCA716kA8Sxqe8OGRLomNxQ3Yqn9R9Xe328qold8T6w=
Subject key identifier: 72:B7:E0:41:2D:B8:69:3A:0F:18:D7:27:17:7A:24:DB:F1:77:C8:CD
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer: /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial: 019A7293A8B8318B9361B24678185ED743E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number: 068F
Signing time: Tue 11 Nov 2025 11:01:10 +0000
Manifest this update: Tue 11 Nov 2025 11:01:10 +0000
Manifest next update: Wed 12 Nov 2025 11:01:10 +0000
Files and hashes: 1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: WP51UHv1DgBCWLqie4VIoS7inm3gAtEhK1Ai/UMStiE=)
2: nPeojOrbaPs45UMM5xBsx67HUyw.roa (hash: I+r6NKoTQ/LaZOROIxMVJyc2C7XDOY211tQjVI17x0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a8:b8:31:8b:93:61:b2:46:78:18:5e:d7:43:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Validity
Not Before: Nov 11 11:01:10 2025 GMT
Not After : Nov 12 11:01:10 2025 GMT
Subject: CN=72b7e0412db8693a0f18d727177a24dbf177c8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:52:a5:4e:5f:9a:ec:9a:88:b3:ea:b2:d4:
4f:8c:44:06:6a:01:16:d8:75:99:3e:d7:9f:b3:cc:
b8:e4:5a:56:cb:44:ae:84:72:48:ee:ef:dd:43:10:
54:06:c2:ac:45:28:4b:e1:8e:ed:20:5b:01:2a:1f:
d4:b4:07:1e:bf:7e:c3:77:51:3d:80:c7:9d:43:0c:
d8:b2:49:7d:7f:02:06:45:86:3f:dd:94:5c:97:4c:
55:83:1a:31:3f:10:2e:db:b6:a9:17:d3:67:a4:12:
5c:35:6a:2b:ec:fa:81:6c:40:98:9c:7f:5b:fb:01:
5d:5a:4c:97:f9:38:ff:32:22:a2:9f:d4:3d:b6:d0:
d2:eb:36:af:4b:87:45:78:9b:1b:3d:77:3d:c0:cf:
f9:28:c3:9a:df:c8:17:40:be:13:71:65:4e:13:8f:
9d:37:d6:c1:e9:f2:24:b9:59:43:e3:a0:d9:a7:c1:
e3:df:2d:fc:ce:0a:37:70:55:23:04:99:95:99:7b:
e0:65:d1:8d:a5:9f:c5:6f:21:b5:72:c6:86:1d:5d:
54:0b:62:66:51:f4:ab:6e:43:49:13:2b:29:06:8f:
96:a5:b6:86:27:ec:17:21:4e:6f:e7:d3:09:74:e0:
98:cf:88:46:bc:13:38:fc:44:5f:a8:1e:e5:5b:c5:
db:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B7:E0:41:2D:B8:69:3A:0F:18:D7:27:17:7A:24:DB:F1:77:C8:CD
X509v3 Authority Key Identifier:
keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:89:81:cc:18:43:ed:99:a7:06:f8:b5:fe:52:1e:6b:60:da:
2c:91:07:f5:47:3d:68:ac:94:ba:5d:e0:95:c8:61:29:fd:d6:
38:a5:dc:46:bb:d6:93:f8:47:63:0d:bb:ff:60:db:e6:53:38:
57:12:0a:9f:ad:8e:3e:0d:c2:b7:9d:87:ba:85:d6:d9:ec:1a:
45:3c:6d:e4:70:b1:3f:1e:22:dc:d3:84:83:3d:5e:2e:70:2e:
18:f0:96:7d:53:b6:23:0c:af:77:6e:4f:4a:77:26:1e:a2:67:
b7:27:df:95:a1:6a:5a:f0:e3:0a:e0:20:d4:21:73:3e:ef:c5:
91:97:bb:73:af:6c:63:7a:f3:fe:78:a1:be:2d:fb:12:a9:67:
1b:cb:17:fe:82:40:7b:2e:c2:7e:dd:03:21:38:f7:0a:69:65:
7f:47:eb:d7:8f:d5:ab:8e:36:64:81:fc:50:45:27:7d:2a:52:
99:9d:cf:46:d5:03:c7:bf:b7:8d:00:6b:1d:91:5b:c8:6e:7d:
ed:d3:e4:b9:de:63:f3:11:57:6c:64:9c:59:1f:4e:e0:e7:3a:
20:66:7f:25:11:9e:66:56:a5:18:89:a5:9b:b1:c5:2b:5c:d6:
8c:1f:44:5e:2a:ef:83:83:e8:a5:26:45:b0:c1:b3:97:85:7b:
2c:aa:ed:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:12 2025 by rpki-client