Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
File: 83Uc-MOi02yXRMllGYmZRaxgeCA.mft (raw, json)
Hash identifier: h6m4xsOIKpTy+EkeHGgIK6o94W+R/1Q2awEf+E+xFCI=
Subject key identifier: FA:13:E8:1F:EE:4A:DC:60:8A:C7:0E:29:44:62:9E:48:46:76:67:43
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Certificate issuer: /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial: 019A4D73AEE92948858C051BCCE4134D8A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:18 +0000
Manifest this update: Tue 04 Nov 2025 06:00:18 +0000
Manifest next update: Wed 05 Nov 2025 06:00:18 +0000
Files and hashes: 1: 83Uc-MOi02yXRMllGYmZRaxgeCA.crl (hash: RyoYbbSimcV8DzS5lzAjOjm85UNGtk2YdT1vg4XXxGw=)
2: RQIIwfPKKX5p7u0Y-C_D5Y-bKBI.roa (hash: KiLJtwlRDmcGob+kpYuioRY1Q/RLPjcl0rdsa4MFnrs=)
3: xelQwmSnZUsP7vwyXYG-OjnLzks.roa (hash: VANd7e1T8sboSWcnlJJpwtTBZNkVD3ZVwPQJ+ivjoHw=)
4: ycYE11LlQ1a-t4T_yP1coVz5lU0.roa (hash: aqEuNcxSiCWBJQINtSpWdlIDutYbO4J8N5pMivaTnAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ae:e9:29:48:85:8c:05:1b:cc:e4:13:4d:8a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
Validity
Not Before: Nov 4 06:00:18 2025 GMT
Not After : Nov 5 06:00:18 2025 GMT
Subject: CN=fa13e81fee4adc608ac70e2944629e4846766743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:87:cf:37:fa:67:94:28:c5:2e:af:86:fc:
01:52:36:a2:89:2b:b6:7d:f9:83:9d:6e:c1:8c:f2:
c4:0a:a8:89:9e:49:ca:19:d9:f9:9d:e4:ad:2d:46:
25:ba:07:e4:82:96:8d:1c:4d:74:2c:ba:45:f8:68:
9d:9a:af:f8:4e:63:b1:f3:42:a4:ef:0e:1d:a4:2e:
99:93:6f:21:c2:51:90:f7:ff:d6:4f:4e:22:05:72:
41:36:d8:db:a7:8d:17:13:ae:12:1c:b8:b9:da:21:
c9:6f:0b:0c:92:8f:29:48:9d:08:59:43:a2:3b:e6:
d2:bd:f0:f8:38:c8:ce:22:49:b3:43:67:e9:77:79:
ee:09:08:bb:dd:43:6f:67:7b:50:8e:c8:22:64:83:
10:6e:e7:b5:ff:22:a6:3e:70:ce:41:3b:b8:37:70:
01:1e:fa:b8:6f:83:2d:cf:66:ff:75:04:58:bd:60:
6e:1e:7f:1a:c1:42:1c:73:46:30:53:0b:c5:09:31:
eb:b9:08:8d:8b:ff:31:f3:51:67:2b:2d:86:5d:3e:
2b:4a:cc:45:46:1f:37:27:e5:4a:f2:b0:96:35:e2:
79:19:aa:6e:1d:83:01:5f:48:58:27:7f:6e:f8:a8:
e0:0f:18:97:7c:be:8b:8e:8a:54:d2:1e:2c:6b:f8:
9e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:13:E8:1F:EE:4A:DC:60:8A:C7:0E:29:44:62:9E:48:46:76:67:43
X509v3 Authority Key Identifier:
keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b4:c4:f3:b2:40:15:20:b1:96:8b:61:01:6b:e7:70:92:f1:
4c:ec:cc:0c:de:c3:b0:3e:91:29:5f:8b:bc:6b:0b:c5:5f:85:
89:18:1e:08:63:04:9a:30:1c:b1:06:fa:ca:fa:5c:b0:10:88:
08:67:89:be:0e:6d:18:49:75:e5:00:33:b6:85:fa:85:4e:52:
d9:07:75:34:30:70:7d:cd:84:1d:fa:88:1d:db:13:37:ac:5f:
43:03:07:f9:55:af:43:f0:5e:61:d9:9d:a0:cd:3e:47:93:89:
54:10:7f:5a:62:ec:2e:85:82:28:8e:d8:08:2e:8b:a8:44:2e:
99:2d:ec:53:b7:ff:eb:9b:ee:eb:39:ae:f1:c9:64:a8:e5:6a:
a7:1e:9d:f2:6b:f0:e9:28:d7:75:07:9b:c6:26:c4:e4:67:78:
c4:79:63:e3:fd:bb:32:23:24:5a:03:bd:ae:ed:16:94:0b:a3:
90:88:ff:86:a1:6a:d9:a1:77:7f:2f:94:02:c8:6a:e1:09:ac:
a6:ef:2c:f6:cf:99:67:1e:3c:76:c6:e0:e9:35:6e:37:00:98:
1a:b4:5c:34:9e:61:d2:ca:1f:ea:e9:84:da:d3:a7:b7:e3:0c:
5a:0e:e6:df:b6:ef:1b:db:50:50:04:74:29:92:a9:7e:f1:0b:
12:41:6f:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc67pKUiFjAUbzOQTTYoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNzUxY2Y4YzNhMmQzNmM5NzQ0Yzk2NTE5ODk5OTQ1YWM2
MDc4MjAwHhcNMjUxMTA0MDYwMDE4WhcNMjUxMTA1MDYwMDE4WjAzMTEwLwYDVQQD
EyhmYTEzZTgxZmVlNGFkYzYwOGFjNzBlMjk0NDYyOWU0ODQ2NzY2NzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqreHzzf6Z5QoxS6vhvwBUjaiiSu2
ffmDnW7BjPLECqiJnknKGdn5neStLUYlugfkgpaNHE10LLpF+Gidmq/4TmOx80Kk
7w4dpC6Zk28hwlGQ9//WT04iBXJBNtjbp40XE64SHLi52iHJbwsMko8pSJ0IWUOi
O+bSvfD4OMjOIkmzQ2fpd3nuCQi73UNvZ3tQjsgiZIMQbue1/yKmPnDOQTu4N3AB
Hvq4b4Mtz2b/dQRYvWBuHn8awUIcc0YwUwvFCTHruQiNi/8x81FnKy2GXT4rSsxF
Rh83J+VK8rCWNeJ5GapuHYMBX0hYJ39u+KjgDxiXfL6LjopU0h4sa/ieCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoT6B/uStxgiscOKURinkhGdmdDMB8GA1UdIwQY
MBaAFPN1HPjDotNsl0TJZRmJmUWsYHggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wOGY5YjQtMTE1Yy00NDg4LWI1Njct
NWNmN2MwNjIxMDY1LzEvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wOGY5YjQtMTE1Yy00NDg4LWI1NjctNWNmN2MwNjIxMDY1
LzEvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLTE87JA
FSCxlothAWvncJLxTOzMDN7DsD6RKV+LvGsLxV+FiRgeCGMEmjAcsQb6yvpcsBCI
CGeJvg5tGEl15QAztoX6hU5S2Qd1NDBwfc2EHfqIHdsTN6xfQwMH+VWvQ/BeYdmd
oM0+R5OJVBB/WmLsLoWCKI7YCC6LqEQumS3sU7f/65vu6zmu8clkqOVqpx6d8mvw
6SjXdQebxibE5Gd4xHlj4/27MiMkWgO9ru0WlAujkIj/hqFq2aF3fy+UAshq4Qms
pu8s9s+ZZx48dsbg6TVuNwCYGrRcNJ5h0sof6umE2tOnt+MMWg7m37bvG9tQUAR0
KZKpfvELEkFvUA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:51 2025 by rpki-client