Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
File: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft (raw, json)
Hash identifier: wfONSv5Yq4NwcGBMhI4MDiRhHJncYhB4fwUsM176E1I=
Subject key identifier: 40:09:0C:72:E4:76:70:D1:BB:DA:3C:08:FB:B8:BF:7F:F9:EE:FB:2F
Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
Certificate issuer: /CN=f37063a85445019ab845a5b7e54395cdd39927f6
Certificate serial: 019A4D743B5E4A0B249458FCE1F0B2A25F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
Manifest number: 1246
Signing time: Tue 04 Nov 2025 06:00:51 +0000
Manifest this update: Tue 04 Nov 2025 06:00:51 +0000
Manifest next update: Wed 05 Nov 2025 06:00:51 +0000
Files and hashes: 1: 55zACBEV4ZrkKgA_PfqKETWoChA.roa (hash: B0R4BgAeGvCI3HMcrqcW5pltBvObBUfBObcQdCL+Wog=)
2: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl (hash: LeBXrx3CRlgsyYg8Ryls829ObK3nTg1xbI10mbsYFOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:3b:5e:4a:0b:24:94:58:fc:e1:f0:b2:a2:5f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6
Validity
Not Before: Nov 4 06:00:51 2025 GMT
Not After : Nov 5 06:00:51 2025 GMT
Subject: CN=40090c72e47670d1bbda3c08fbb8bf7ff9eefb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:dd:3a:73:0f:2c:a1:46:6e:5a:e3:b9:cb:
17:dd:2d:a4:f9:e3:98:fb:97:1f:cd:cc:e0:a2:5f:
37:11:a5:3d:b8:01:b2:a6:26:f5:58:19:e3:59:56:
96:92:07:48:47:a2:06:4b:7a:6e:d3:0b:76:bd:56:
ef:2f:5d:8b:cc:ae:69:f5:be:84:56:39:e2:fb:f5:
8e:ed:b3:f5:d4:c0:bf:33:25:91:dd:d3:b4:75:14:
be:50:7e:e1:40:dc:f6:05:0d:44:81:19:28:43:ca:
a1:34:3a:07:6e:fe:86:20:a7:58:c8:fd:69:c0:62:
58:af:36:75:83:c9:43:7c:6f:88:87:5e:c3:a7:ea:
8c:42:a6:b3:6c:04:0e:4a:d1:f9:d0:99:0b:bc:bb:
58:b9:43:fa:01:b7:26:8b:a7:44:29:06:b5:d2:a8:
d9:b0:8d:dd:5d:88:ce:1b:ca:a6:e5:43:7a:1b:c4:
04:e6:0c:04:1a:79:3f:18:27:60:6c:1b:5d:3c:2c:
64:08:8c:2d:b3:b7:40:19:30:2b:bf:74:4a:b9:ed:
fd:ab:59:62:ed:15:66:99:3c:ff:a0:51:19:11:85:
4a:60:88:5e:82:ac:56:bd:9d:73:ba:cf:34:44:d3:
59:5d:6a:27:4e:fb:e1:55:34:51:cd:a0:90:3b:de:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:09:0C:72:E4:76:70:D1:BB:DA:3C:08:FB:B8:BF:7F:F9:EE:FB:2F
X509v3 Authority Key Identifier:
keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b3:22:c5:1a:0f:11:0e:28:b3:04:f5:02:49:3a:64:36:d8:
af:66:54:c4:a3:9b:b0:30:bc:79:28:6c:7f:e3:16:6d:b2:da:
e6:c0:a1:ab:5e:94:c7:ee:e2:e1:1a:95:a6:00:6c:60:03:c6:
db:92:0c:3a:72:b8:c6:ee:82:20:42:d0:fd:83:0f:b7:d5:fa:
dc:ce:a6:65:56:60:ad:5f:e2:41:dc:a9:6b:32:b4:48:94:3e:
c7:27:a2:6e:82:82:73:65:eb:9f:da:59:83:4e:35:7f:dd:93:
4c:c0:e6:4c:01:e0:7f:c4:bb:f0:c1:d8:a5:03:3d:5f:03:9c:
05:08:74:f2:a4:81:f4:95:08:2b:b7:4a:e2:fc:b9:76:9f:83:
8b:ef:c5:e2:34:a2:34:c1:62:72:83:e3:2d:a1:62:44:76:de:
5e:11:bf:ea:03:2f:83:4b:64:40:d1:95:b4:5d:a2:d3:0e:de:
90:e5:bc:14:66:76:1f:66:75:f4:33:16:78:a5:2c:f7:d2:fe:
80:e5:1a:73:4b:94:41:4b:13:1e:7b:af:bf:ac:91:30:54:6e:
34:13:8e:93:f3:af:ff:d0:5a:32:69:8f:82:ba:08:70:d4:d3:
f5:00:72:eb:4d:c0:d0:30:3d:2e:59:00:d0:19:e9:85:fb:74:
3c:a6:b6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:31 2025 by rpki-client