Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: yPs8BY6YT1x23b0FL//L7tj3T7t1p6FRZwXvP2KrJks=
Subject key identifier: 0D:3B:C9:40:2C:E4:7A:24:BF:B1:A3:1B:0E:84:01:0C:5F:B7:85:AF
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 0198917E38665AAA0B054722F9B6AE498675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 162C
Signing time: Sun 10 Aug 2025 01:00:24 +0000
Manifest this update: Sun 10 Aug 2025 01:00:24 +0000
Manifest next update: Mon 11 Aug 2025 01:00:24 +0000
Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
2: 4kfMtLYb8t9NTo-YJ69UVZNvndE.roa (hash: mU2QRRVA7Ec6TMwp/iR1nKH5zbtHggkJvnoHoV9eFuY=)
3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: pAZ0tkWpIMsCawB9kxWj5srSDp7QuSmnn386mDqXlgQ=)
4: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
5: cWqhhGQ2nwF4u5SVS7GOVj8_H8Q.roa (hash: tE3zP2hfr/4EiGnnKAeQTDpDnqcSls7BckOuw6iyYdQ=)
6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
9: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:38:66:5a:aa:0b:05:47:22:f9:b6:ae:49:86:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Aug 10 01:00:24 2025 GMT
Not After : Aug 11 01:00:24 2025 GMT
Subject: CN=0d3bc9402ce47a24bfb1a31b0e84010c5fb785af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:be:7b:42:5d:93:f6:87:b5:e2:6e:d6:df:
d2:b9:45:99:cd:6d:71:28:f8:f7:7f:09:67:6b:a8:
d1:5f:e6:00:e7:c8:c5:d0:da:48:96:25:07:c8:9c:
39:f2:a5:16:82:df:45:ec:07:48:5d:87:72:f4:2d:
d9:90:b2:d0:fd:d5:4a:bd:67:d4:d5:41:c8:a6:4d:
6e:d1:21:96:07:15:95:c8:45:26:52:dd:05:4b:aa:
68:13:d2:7c:a3:18:83:4e:5c:3a:fd:bf:e8:08:e8:
30:ed:04:fc:26:27:b4:db:e9:40:0d:78:cd:68:d5:
9f:da:f9:6b:ed:a7:84:19:e8:1b:e2:7d:97:af:14:
3c:61:78:bf:b1:2f:66:9c:74:0d:a5:c2:e0:d8:7f:
dc:5a:59:c8:9e:1d:a1:c2:2b:0d:d9:17:cf:7c:f0:
8f:50:75:c0:b8:45:28:a4:f0:d3:3a:54:1b:7d:71:
05:8c:86:05:33:a4:4e:a5:77:79:e6:3a:37:15:b8:
7a:41:fa:9c:1d:fd:28:13:39:10:cd:a3:b2:1b:0b:
39:7f:08:b1:00:28:98:b8:bf:e6:7b:8a:b6:44:b1:
d4:c5:c1:83:00:2f:5a:67:b0:cd:a7:61:4d:d7:cd:
db:0b:82:c4:26:92:d0:f4:ae:a4:79:78:79:44:fe:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3B:C9:40:2C:E4:7A:24:BF:B1:A3:1B:0E:84:01:0C:5F:B7:85:AF
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6b:50:15:9c:6d:ad:11:24:ea:d3:22:a8:67:96:b0:a9:00:
3c:41:fe:b0:95:ad:e6:9c:1c:c0:bc:93:1d:2c:47:78:4b:6b:
fa:d1:2c:a7:d1:79:16:fc:92:2a:02:ab:80:51:91:79:c1:d6:
a6:59:a6:f6:aa:88:9f:0e:ff:9b:02:16:6f:34:b2:9c:ec:77:
2e:ce:a7:94:39:52:6a:17:5c:27:a3:31:be:2d:35:f5:8b:2c:
a0:84:95:73:bb:ee:ed:59:26:23:6f:ee:8e:51:49:a8:2b:f3:
89:9a:32:2a:d6:83:60:c4:e9:ae:af:12:d3:c6:5f:47:13:37:
6d:70:d0:1a:de:d0:bb:e1:56:ba:8f:25:ba:c4:1b:56:a3:c2:
98:37:9c:01:a3:6d:ab:87:d3:1b:f1:57:a6:bf:ea:22:26:a0:
b9:4f:83:43:38:d1:1b:18:2a:c8:dd:23:4d:aa:f3:b8:0f:2c:
96:ab:af:1d:c9:3b:9e:b2:e0:d2:35:24:c4:ee:14:87:9e:3c:
ae:ce:29:95:9a:c8:b1:85:56:9e:e8:a9:9a:21:a1:4b:0c:9e:
1f:53:bf:7f:2c:0f:45:30:f0:d0:33:d1:49:51:42:9e:fd:50:
70:50:b9:dd:6f:b4:91:67:ae:71:29:9b:37:54:dd:8c:23:41:
0d:36:6d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:20:58 2025 by rpki-client