Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File: 89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier: YKtxbpsRE/3++8neqoJ5l1FwBKX2llwOgGLIUgTv8kQ=
Subject key identifier: B5:86:61:BB:F3:E3:B9:A2:F5:A8:46:FC:14:10:71:50:29:46:8E:7F
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 0198898EA3687D56BA47587240C1D800B1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number: 0B8F
Signing time: Fri 08 Aug 2025 12:01:22 +0000
Manifest this update: Fri 08 Aug 2025 12:01:22 +0000
Manifest next update: Sat 09 Aug 2025 12:01:22 +0000
Files and hashes: 1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: m3Q9z7WP03KV7f2U2Qd/4gWU5ZQKD1ZMN2J61r5xaqk=)
2: RArCPfG6cBnbfBAKLbWfL49ZMls.roa (hash: uc8AJAayCJr6PnC8hA44mAQSr2RQBPC/srP3fioA29o=)
3: Wi2RTxfTTcg3jIA6VNCxJhuXtSc.roa (hash: PN/Hitc4mDcgZ6vgsBJIh+lNS02EoNv2xNjb7IleUCM=)
4: iI96ltGCU8Eh-fXmAqschYb7j1E.roa (hash: Z5PSdW/OzuN6TE7LbGMzYDGBpKQ5aABS0hIggAHbUHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:a3:68:7d:56:ba:47:58:72:40:c1:d8:00:b1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Aug 8 12:01:22 2025 GMT
Not After : Aug 9 12:01:22 2025 GMT
Subject: CN=b58661bbf3e3b9a2f5a846fc1410715029468e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:7c:5d:c2:68:b5:4a:44:90:fb:4f:61:47:
dc:42:11:93:52:df:4e:f9:29:e9:57:c3:ec:cd:7b:
e5:7f:49:b6:e0:79:24:a5:11:3f:64:22:85:24:e8:
d0:80:47:00:0c:70:08:f7:8b:3c:bc:1a:63:d5:e9:
1c:ad:8f:5a:80:41:4e:8c:d8:1e:ae:a8:3c:c7:f1:
91:61:2c:13:65:59:fc:27:7a:8c:22:d9:41:58:0c:
c8:99:47:ab:2c:d3:7a:a4:50:3a:cd:1e:8b:45:23:
41:97:e6:4e:bd:59:48:e0:2d:94:d9:a9:f2:11:96:
b9:14:30:0d:bd:d6:2f:44:49:ef:f4:7c:ae:13:41:
6d:1f:73:ed:3b:59:1d:64:50:ed:2b:15:e7:6e:c1:
0c:a6:a8:b3:7f:cb:33:d8:a9:ae:f2:5f:d9:98:66:
be:62:ad:73:94:45:ae:f8:b7:e2:ac:ee:4e:e2:85:
c6:52:e8:96:55:99:b0:7f:8e:94:5a:8f:24:ec:cc:
28:e5:e8:0b:ab:64:14:3d:79:20:f0:56:a0:02:b0:
d1:30:24:49:95:72:79:b2:8b:e3:0a:06:4b:50:59:
d8:6b:88:9b:12:70:ac:a1:4b:b1:67:41:a3:12:3c:
60:0c:10:73:99:46:b1:cd:5c:ba:d4:09:cc:0b:2c:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:86:61:BB:F3:E3:B9:A2:F5:A8:46:FC:14:10:71:50:29:46:8E:7F
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:81:57:18:52:92:50:92:1a:fc:93:5e:e1:e0:7f:84:a6:2f:
1f:9c:d8:b4:37:9d:ca:a6:6e:e7:01:70:5a:00:2b:64:16:61:
40:0a:29:36:24:47:b2:80:67:1e:28:a5:64:9d:e1:00:c9:ae:
d8:59:91:85:66:41:85:49:a8:51:54:b7:ac:de:c5:c7:5f:cb:
15:5e:3e:10:58:6f:25:98:62:07:d2:17:42:0c:03:65:e1:cc:
61:c6:a8:a3:d0:8a:0a:04:d1:cd:61:08:6b:af:0f:7e:32:b3:
b1:81:1e:72:8b:16:1a:8d:d9:69:40:2c:77:15:f1:c7:8e:85:
88:bb:5d:78:ec:a7:23:70:ba:4f:ec:21:f2:52:80:75:dd:d3:
d6:85:d8:4a:20:91:27:5d:02:36:ec:86:4f:b4:6b:b2:b1:74:
b3:f6:a6:19:c8:28:ec:5f:d5:fb:13:de:8a:2e:00:98:b1:25:
0f:f7:4b:be:a4:6a:3b:9e:92:5e:df:8c:29:5f:ea:1d:50:97:
ad:87:69:e0:6f:cb:d1:f2:4b:2a:b9:3f:89:7e:f3:b7:aa:b2:
c5:e3:17:e8:0d:da:25:58:8d:62:b9:22:71:53:6b:ff:4f:69:
f6:11:ee:16:a0:52:18:de:0f:0b:34:dc:c6:cd:86:27:f6:26:
89:84:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:46:06 2025 by rpki-client