Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: zZ9+YCNrhQuv40/YLK4uvunrT2vbnpMgYLmMKTewqVA=
Subject key identifier: D5:3F:2A:C2:C5:91:74:6B:BE:57:BC:FE:C5:CC:28:00:0C:00:16:1D
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 019A552E14E1D11F4A21FF8F4330A5CC310B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 1716
Signing time: Wed 05 Nov 2025 18:01:14 +0000
Manifest this update: Wed 05 Nov 2025 18:01:14 +0000
Manifest next update: Thu 06 Nov 2025 18:01:14 +0000
Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
2: 4kfMtLYb8t9NTo-YJ69UVZNvndE.roa (hash: mU2QRRVA7Ec6TMwp/iR1nKH5zbtHggkJvnoHoV9eFuY=)
3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: fsSPniLnLHtubY4Pa0yAJaxMA9oSALGsWcZl5zCSahM=)
4: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
5: cWqhhGQ2nwF4u5SVS7GOVj8_H8Q.roa (hash: tE3zP2hfr/4EiGnnKAeQTDpDnqcSls7BckOuw6iyYdQ=)
6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
9: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2e:14:e1:d1:1f:4a:21:ff:8f:43:30:a5:cc:31:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Nov 5 18:01:14 2025 GMT
Not After : Nov 6 18:01:14 2025 GMT
Subject: CN=d53f2ac2c591746bbe57bcfec5cc28000c00161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:4a:c5:6a:ae:ca:88:4f:ac:7a:31:b4:56:
ac:55:ad:8a:d7:f4:ff:ef:12:2d:c5:e1:32:e5:a4:
16:8b:ab:a1:c7:43:53:d8:e5:c5:82:b8:19:42:a6:
bf:9b:dd:3e:d2:0d:c3:1f:04:c7:18:43:f9:96:17:
12:df:76:5e:44:4c:ca:7f:49:4c:f6:1b:3a:68:36:
87:86:63:84:61:37:13:17:e6:f2:f2:f1:a6:89:e6:
ce:c8:bc:77:5c:cb:e2:7d:db:97:d7:04:ac:a1:36:
44:80:59:83:93:64:83:cf:6c:e2:5c:c8:c1:eb:02:
60:00:20:e2:ae:e3:bd:43:5b:ec:cc:b3:30:ab:b6:
50:dd:bf:ac:68:70:6c:f9:b1:a2:c9:27:03:1d:7b:
9e:0d:2b:f6:87:45:f1:6b:a9:e0:c8:b9:be:9a:ad:
06:5e:da:dc:12:d0:02:bb:8c:cc:2d:5f:97:ad:a2:
d1:d0:35:f3:82:16:f6:90:d6:d4:bb:cf:d4:21:0b:
70:bd:1d:48:b6:5f:61:e7:b4:60:11:f6:c5:63:a3:
b1:3c:b3:34:fd:c5:a3:60:83:39:f1:ed:27:e9:c5:
cd:bc:0d:23:60:fe:9e:ce:d5:14:d9:f2:b3:67:bd:
e9:fb:10:9a:5f:ca:8f:7c:a3:90:32:67:8a:ec:00:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3F:2A:C2:C5:91:74:6B:BE:57:BC:FE:C5:CC:28:00:0C:00:16:1D
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bb:ba:0e:64:0e:de:81:a3:c2:98:c0:f5:71:4b:d5:40:6d:
b8:bd:5a:8e:18:69:75:88:6b:a5:d3:f6:bd:03:2b:66:36:a4:
5c:79:c2:4e:4b:9b:8e:70:cd:01:21:bd:02:d4:87:d3:4a:fe:
fa:2c:d3:a1:59:4b:07:39:63:ab:7d:f4:31:c6:5e:f9:a3:46:
96:14:c5:be:1e:3f:de:05:cd:eb:c8:03:21:52:39:20:fb:79:
d9:44:f0:f2:1d:7c:42:59:f0:0f:a1:32:ec:34:ea:74:44:93:
ae:c4:2f:72:d7:fc:75:e5:89:04:4b:96:93:91:5c:84:80:25:
69:6b:e9:1b:9a:b1:bd:fd:a6:87:b7:e9:26:5f:f8:8f:03:78:
6f:a6:93:c0:ff:57:84:72:b5:50:e2:ee:4f:bc:8e:9e:72:90:
be:33:21:84:33:f2:2f:b8:78:eb:43:93:93:11:69:64:cc:89:
7a:83:84:ba:a3:cc:6f:f8:8e:77:bf:80:ef:42:59:b8:01:ad:
de:49:2a:65:5c:4d:3f:e6:7f:05:a7:b2:ca:5f:c6:52:ec:ca:
8e:85:0a:8c:49:fd:88:b4:c6:7d:8c:86:61:bc:5d:e7:db:19:
9e:04:d3:cc:52:c3:e1:f5:e6:a0:b9:9e:a2:ff:63:09:3c:53:
5a:54:04:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVLhTh0R9KIf+PQzClzDELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz
YjJjYTIwHhcNMjUxMTA1MTgwMTE0WhcNMjUxMTA2MTgwMTE0WjAzMTEwLwYDVQQD
EyhkNTNmMmFjMmM1OTE3NDZiYmU1N2JjZmVjNWNjMjgwMDBjMDAxNjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XZKxWquyohPrHoxtFasVa2K1/T/
7xItxeEy5aQWi6uhx0NT2OXFgrgZQqa/m90+0g3DHwTHGEP5lhcS33ZeREzKf0lM
9hs6aDaHhmOEYTcTF+by8vGmiebOyLx3XMvifduX1wSsoTZEgFmDk2SDz2ziXMjB
6wJgACDiruO9Q1vszLMwq7ZQ3b+saHBs+bGiyScDHXueDSv2h0Xxa6ngyLm+mq0G
XtrcEtACu4zMLV+XraLR0DXzghb2kNbUu8/UIQtwvR1Itl9h57RgEfbFY6OxPLM0
/cWjYIM58e0n6cXNvA0jYP6eztUU2fKzZ73p+xCaX8qPfKOQMmeK7ADAJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNU/KsLFkXRrvle8/sXMKAAMABYdMB8GA1UdIwQY
MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct
NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1
LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYru6DmQO
3oGjwpjA9XFL1UBtuL1ajhhpdYhrpdP2vQMrZjakXHnCTkubjnDNASG9AtSH00r+
+izToVlLBzljq330McZe+aNGlhTFvh4/3gXN68gDIVI5IPt52UTw8h18QlnwD6Ey
7DTqdESTrsQvctf8deWJBEuWk5FchIAlaWvpG5qxvf2mh7fpJl/4jwN4b6aTwP9X
hHK1UOLuT7yOnnKQvjMhhDPyL7h460OTkxFpZMyJeoOEuqPMb/iOd7+A70JZuAGt
3kkqZVxNP+Z/Baeyyl/GUuzKjoUKjEn9iLTGfYyGYbxd59sZngTTzFLD4fXmoLme
ov9jCTxTWlQEjw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:16:03 2025 by rpki-client