Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: h9nXbXOuOKamJd9/YMoipubIBApj1LjKwYCI5m16CGM=
Subject key identifier: 55:FF:B0:2E:33:11:C1:91:59:93:AE:B8:32:7D:CB:B4:0D:84:9F:DF
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 019A5006E56E06C763173B32E85D8A982998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 08A3
Signing time: Tue 04 Nov 2025 18:00:20 +0000
Manifest this update: Tue 04 Nov 2025 18:00:20 +0000
Manifest next update: Wed 05 Nov 2025 18:00:20 +0000
Files and hashes: 1: 3TbJq9j2geNORTi2E9xTbbuvxTw.roa (hash: GEQQroPBoH2N7pLErfqXNmjkVTV09NRy63LB6YJ9qVU=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: TUYoJFa0okNds+x3vaw3G+aZfKck27oOPARl/siBV0s=)
3: O5vcxppH2hWxYYAsqunLkBWcHEA.roa (hash: q4yYQF/m9xvQmRwlkRVUClFyEqyPX8PvXIb5hdq5C/c=)
4: S074YuodosP0UuUo6De4P_sFXFs.roa (hash: pyM9pUqd+rcNeRhYxGuF9WXwPo5DNw77BSKM8YnWbDw=)
5: Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa (hash: ynVaJVBlwlWG6tSEdbng0uT/nO6dcjS+TT74OXhzdwE=)
6: TeWmN6EHoWRaSQ7AOqv2c821wck.roa (hash: nLb50bk1nICV8KXxpzGqIvnlONr6M9e61qQJa/r2Gnk=)
7: VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa (hash: ILHJodGOzQUy/1EkSV1sW3J8/BVRtZEBwh5TBOH9dR0=)
8: fpQDOceW0nAf0mI2PAXShTq2K8Q.roa (hash: AwWdNgQE53Ja7SCJFwgUtSy2nXOjhiPggUFZe7XRmBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:e5:6e:06:c7:63:17:3b:32:e8:5d:8a:98:29:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Nov 4 18:00:20 2025 GMT
Not After : Nov 5 18:00:20 2025 GMT
Subject: CN=55ffb02e3311c1915993aeb8327dcbb40d849fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:3c:36:36:c7:10:10:39:ca:e2:9e:12:d5:
f3:17:0a:2f:ba:ea:12:54:d5:1d:a0:3b:f7:50:4f:
69:55:3f:67:5d:c9:ef:f0:51:b3:95:2c:23:c9:42:
43:60:3e:f7:4a:3c:ca:18:6e:8f:e7:b6:04:ef:b8:
93:92:93:26:42:5a:76:8f:f5:71:af:61:95:20:70:
1d:63:96:e8:80:44:74:a8:f5:b2:4f:1e:43:d5:38:
c3:5a:6d:25:09:b2:ff:97:f3:44:dc:b4:81:09:34:
46:13:16:ad:9a:2d:da:7d:ac:25:df:64:3a:0f:25:
32:e2:d4:e5:2c:c5:62:8d:a5:6c:7a:90:0a:30:cd:
16:4f:21:2c:8f:43:d9:85:bf:b2:6e:b3:48:8e:0b:
81:1b:9f:9f:98:98:b3:75:41:dc:e9:ac:46:52:dd:
b9:f6:34:f2:45:55:06:53:92:c3:51:e3:7c:a5:72:
c2:a2:ad:bf:3c:64:f4:5c:13:dd:2d:ed:c7:f1:fe:
8d:c0:7c:63:6a:d3:c8:f3:3f:2a:ab:3f:aa:6f:8f:
1c:3b:3c:84:ff:0a:17:8f:cb:ac:ea:6f:f1:78:f1:
9d:ad:a2:6d:86:e0:09:dd:58:b3:d5:f2:7a:4d:ba:
58:31:6e:b8:09:1e:03:c5:6f:7b:d0:e4:1d:4b:e2:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FF:B0:2E:33:11:C1:91:59:93:AE:B8:32:7D:CB:B4:0D:84:9F:DF
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ba:fa:70:9a:55:fe:40:f0:c8:46:4f:a2:93:ce:c0:83:7f:
dc:f9:f0:c3:e0:65:37:f8:5b:18:37:b6:49:5b:74:5d:8d:bd:
89:39:95:0b:ed:87:19:15:b7:5e:f2:11:0a:51:40:a1:64:5f:
5b:77:fd:4c:98:ed:41:58:f7:e6:cd:77:e8:9b:30:7e:da:53:
50:56:f8:de:2f:f6:69:35:1b:e0:1a:10:dc:cd:b1:b3:df:5a:
c2:c3:17:31:ba:28:fc:04:1d:5a:6d:b4:d7:93:5c:04:80:62:
67:6a:67:74:18:1b:36:f7:13:59:35:0c:ac:4a:df:ba:ff:49:
3b:ab:63:b2:f3:3e:b9:d0:8e:49:5e:00:08:56:b3:dd:6b:40:
b0:29:e5:4f:95:8c:25:54:c9:f1:81:9d:7e:b7:dc:9e:82:d2:
1b:e4:ff:1b:2d:af:cc:10:50:95:1d:45:10:a6:7b:78:ae:44:
1f:27:a7:19:8c:75:6f:3b:9e:93:cf:47:11:42:86:2a:75:df:
09:54:d9:98:b6:c1:ee:0a:6b:f1:80:2a:04:10:ad:4d:60:e8:
e1:e0:b6:24:3d:f0:c0:90:82:fb:13:47:32:8f:e4:52:ca:d4:
ce:f4:4e:2e:bc:a2:3f:0a:c8:4e:65:ca:7f:26:8b:e3:42:c5:
c9:ad:e3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:46 2025 by rpki-client