Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File: 89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier: H6OCyxzwm0Dr2BI61z64iosTLmkPCDeTc633Fp+BW8o=
Subject key identifier: 55:0F:B8:99:C5:EB:FC:CA:11:D6:57:17:EF:C8:04:ED:C0:7C:61:E0
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 019A4F62ABA7A7CE9F4FBDA13A0424BA3CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number: 0C7A
Signing time: Tue 04 Nov 2025 15:00:57 +0000
Manifest this update: Tue 04 Nov 2025 15:00:57 +0000
Manifest next update: Wed 05 Nov 2025 15:00:57 +0000
Files and hashes: 1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: CS3IjzoJakwt3P4zr1/2atqIRu3L/woaCpK+8ZKlo9g=)
2: RArCPfG6cBnbfBAKLbWfL49ZMls.roa (hash: uc8AJAayCJr6PnC8hA44mAQSr2RQBPC/srP3fioA29o=)
3: Wi2RTxfTTcg3jIA6VNCxJhuXtSc.roa (hash: PN/Hitc4mDcgZ6vgsBJIh+lNS02EoNv2xNjb7IleUCM=)
4: iI96ltGCU8Eh-fXmAqschYb7j1E.roa (hash: Z5PSdW/OzuN6TE7LbGMzYDGBpKQ5aABS0hIggAHbUHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:ab:a7:a7:ce:9f:4f:bd:a1:3a:04:24:ba:3c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Nov 4 15:00:57 2025 GMT
Not After : Nov 5 15:00:57 2025 GMT
Subject: CN=550fb899c5ebfcca11d65717efc804edc07c61e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:8c:f4:a2:cd:a2:17:4e:da:15:b1:0f:ad:
7d:c6:ec:27:54:cd:99:df:41:d1:2e:67:37:1c:a2:
30:6a:5a:d7:1a:bf:3c:d5:50:ce:27:07:46:a4:11:
44:12:35:56:c4:c3:3d:37:0c:16:71:7c:f4:3b:67:
e6:43:3c:5f:aa:8d:f1:49:40:4c:77:22:ff:63:41:
ec:e9:f4:25:b2:72:26:80:15:86:bb:5c:d3:ba:3d:
78:47:94:ba:19:91:ff:9e:23:d7:11:16:18:fd:e6:
1e:dc:2a:f2:02:17:16:9e:70:33:4e:8e:ef:57:a7:
01:53:c3:8f:1b:78:82:5d:9c:3a:bc:57:b1:7d:9d:
de:dd:e8:2f:3a:62:90:1d:d2:64:f9:5b:55:20:fc:
b9:ab:b9:a0:ed:1b:e1:c0:88:be:8b:b8:75:fb:ab:
d1:c5:2e:07:ae:b0:5a:93:3a:7f:1a:f7:dc:b2:e1:
f3:23:2c:c8:de:1b:c1:7b:b1:6a:f7:a9:94:9c:39:
8f:05:db:f7:ed:6e:93:42:bc:e0:04:5d:fa:c2:5a:
ae:50:95:9e:16:91:5a:e2:32:16:02:51:2e:57:c4:
fd:5c:7d:57:24:6b:14:25:2c:9f:74:f9:f4:aa:0c:
d9:94:d4:b3:ef:24:42:a4:06:64:73:e8:af:9b:b4:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0F:B8:99:C5:EB:FC:CA:11:D6:57:17:EF:C8:04:ED:C0:7C:61:E0
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:84:1a:c9:54:d4:58:dc:97:c7:22:29:10:88:59:5c:42:e4:
ac:cb:5a:d1:17:42:95:e7:04:16:fa:00:3c:58:09:ee:81:c0:
0d:3b:5d:9b:e7:69:d9:52:46:7e:c3:9c:45:b9:39:1c:8a:77:
b1:fb:82:6e:e1:3c:32:92:e2:ae:8c:f5:fa:32:50:db:2c:a7:
73:65:86:fb:cc:62:37:c3:be:16:ef:ab:29:54:8e:8c:e3:a2:
b0:f0:d1:42:de:e1:01:d9:59:74:28:be:35:2a:ca:47:37:a5:
58:c8:9a:33:23:57:59:ce:66:eb:c7:d9:99:32:33:1d:10:e1:
ae:60:e9:89:e2:70:96:c1:1d:bf:ab:33:62:21:4d:78:1e:01:
14:cf:c6:1b:69:5e:f9:a0:bd:51:27:ee:96:67:ec:80:60:65:
2a:2d:13:da:9b:c4:f7:91:0f:4e:02:0a:62:70:06:58:4c:c4:
2a:98:1b:6b:a0:3c:41:b4:1f:86:10:0f:f3:ba:e2:c3:a9:3f:
ee:0c:7b:6c:86:61:f6:07:98:53:e7:55:ac:b0:dc:cb:7a:f4:
3e:e5:a7:9f:20:9a:f5:6a:77:5e:7d:a4:6e:f6:36:28:06:b8:
31:ae:00:01:04:b2:bd:d8:35:f9:63:fa:77:81:c4:83:37:08:
e2:c7:42:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYqunp86fT72hOgQkujzZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZDg1YzQ3ZDBiN2Q2ZGM1ZGRkYTA4NTcyYjY0NTRjMTA1
OTUxMmMwHhcNMjUxMTA0MTUwMDU3WhcNMjUxMTA1MTUwMDU3WjAzMTEwLwYDVQQD
Eyg1NTBmYjg5OWM1ZWJmY2NhMTFkNjU3MTdlZmM4MDRlZGMwN2M2MWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotqM9KLNohdO2hWxD619xuwnVM2Z
30HRLmc3HKIwalrXGr881VDOJwdGpBFEEjVWxMM9NwwWcXz0O2fmQzxfqo3xSUBM
dyL/Y0Hs6fQlsnImgBWGu1zTuj14R5S6GZH/niPXERYY/eYe3CryAhcWnnAzTo7v
V6cBU8OPG3iCXZw6vFexfZ3e3egvOmKQHdJk+VtVIPy5q7mg7RvhwIi+i7h1+6vR
xS4HrrBakzp/GvfcsuHzIyzI3hvBe7Fq96mUnDmPBdv37W6TQrzgBF36wlquUJWe
FpFa4jIWAlEuV8T9XH1XJGsUJSyfdPn0qgzZlNSz7yRCpAZkc+ivm7ShWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUPuJnF6/zKEdZXF+/IBO3AfGHgMB8GA1UdIwQY
MBaAFPPYXEfQt9bcXd2ghXK2RUwQWVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNmZiMTEtMmQwMC00ZTdiLWIyOTct
NTIxMmRiOTc1NGY0LzEvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yNmZiMTEtMmQwMC00ZTdiLWIyOTctNTIxMmRiOTc1NGY0
LzEvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIQayVTU
WNyXxyIpEIhZXELkrMta0RdClecEFvoAPFgJ7oHADTtdm+dp2VJGfsOcRbk5HIp3
sfuCbuE8MpLiroz1+jJQ2yync2WG+8xiN8O+Fu+rKVSOjOOisPDRQt7hAdlZdCi+
NSrKRzelWMiaMyNXWc5m68fZmTIzHRDhrmDpieJwlsEdv6szYiFNeB4BFM/GG2le
+aC9USfulmfsgGBlKi0T2pvE95EPTgIKYnAGWEzEKpgba6A8QbQfhhAP87riw6k/
7gx7bIZh9geYU+dVrLDcy3r0PuWnnyCa9Wp3Xn2kbvY2KAa4Ma4AAQSyvdg1+WP6
d4HEgzcI4sdCcQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:21:54 2025 by rpki-client