Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: R7M+73HeESZIxiKJp7NEhDIK3G2b8Z/gQl4mnDYIJpY=
Subject key identifier: 28:10:A6:2E:D7:C2:BF:21:97:FE:33:06:80:AC:0D:05:7B:FC:9B:FF
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 019A5187620DB1043534F9BC01DB03C45964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 01:00:18 +0000
Manifest this update: Wed 05 Nov 2025 01:00:18 +0000
Manifest next update: Thu 06 Nov 2025 01:00:18 +0000
Files and hashes: 1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=)
2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: KFRcQtlx88/ta6WIGJS+7hDCIa0doL9UgIx5tiYKojo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:62:0d:b1:04:35:34:f9:bc:01:db:03:c4:59:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Nov 5 01:00:18 2025 GMT
Not After : Nov 6 01:00:18 2025 GMT
Subject: CN=2810a62ed7c2bf2197fe330680ac0d057bfc9bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:cd:43:f9:4d:4f:a7:a7:5b:10:c2:3e:3f:
33:77:c9:5a:7d:d4:be:cd:15:1c:2c:ec:5a:5b:77:
58:d0:37:df:86:50:1d:bd:d8:2e:b4:a7:64:cd:3d:
5c:10:58:83:16:11:46:72:47:50:f8:7b:57:c8:c0:
fc:06:e4:82:a1:90:02:95:7d:55:f9:fc:45:50:6f:
36:ce:17:7b:88:07:fe:96:b0:a3:cb:cb:fe:81:d3:
ea:f8:97:fc:12:a5:41:a5:38:41:61:09:b2:ea:07:
d1:6d:82:2a:18:63:5d:29:7c:4e:f3:0c:46:6b:31:
18:9c:f0:77:6e:f6:66:26:db:7a:ef:5c:8b:80:6b:
6f:ee:61:70:73:bc:b2:85:30:14:5f:42:e9:35:d2:
f6:16:bf:b1:8e:c8:19:03:31:46:0c:dc:4f:94:53:
be:e7:64:30:bd:72:61:ff:68:15:56:7f:fb:cd:54:
2b:13:49:5c:c6:9a:e0:35:3c:55:43:a6:82:79:3e:
23:46:50:ec:a5:1b:1f:0b:37:84:0a:a5:c6:2d:aa:
c7:f7:1b:c6:8d:8c:46:ef:24:c0:29:8c:60:13:72:
e9:67:1c:29:dc:68:84:2b:de:e6:b8:df:22:2f:66:
fc:b1:87:6f:79:a3:31:e9:7e:9d:ac:24:d5:c2:97:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:10:A6:2E:D7:C2:BF:21:97:FE:33:06:80:AC:0D:05:7B:FC:9B:FF
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:27:b0:b1:d4:e2:64:8b:77:43:ac:8b:5a:14:9a:3e:0f:08:
50:26:74:1d:b3:44:86:a4:31:25:3c:59:5b:52:e7:01:51:2a:
46:c9:39:25:9f:01:a7:0b:bf:32:49:61:e0:6d:14:12:d7:25:
8a:a9:4e:e0:23:5c:bd:ee:e2:91:17:65:1d:b1:ae:5f:27:38:
ac:c1:aa:03:fb:ed:f8:2c:c7:b8:ab:b0:39:80:83:38:c9:b1:
bf:19:bd:4b:36:a8:aa:84:e0:8e:dc:63:67:c8:db:f7:65:70:
b4:91:fc:ea:00:a4:65:e2:e5:32:03:43:88:2d:d1:51:fe:5a:
5d:0c:8f:00:d0:74:a9:eb:1f:c5:19:34:94:f7:5f:61:ea:1e:
7d:6b:e1:3d:a2:84:8a:df:be:45:de:06:7a:d7:ee:a2:33:9c:
d8:d2:d9:25:74:b9:d4:d4:d1:a0:bf:67:d2:24:34:7f:03:6a:
e1:fe:57:a8:c5:30:32:46:98:07:53:f8:3c:ab:67:c5:7c:31:
b0:1a:12:64:d8:87:45:52:30:ec:8f:e2:9d:f8:0f:2a:eb:45:
3f:6f:a0:45:65:62:a8:22:8a:4b:6b:90:27:e2:8b:ce:1f:5d:
f5:8e:45:ec:97:52:a0:b4:b4:25:0c:40:09:42:2b:04:ff:37:
74:c0:89:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:07 2025 by rpki-client