Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File: 87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier: PgGgK3BEs0f5Jp17eFVZLzzTrO9vm+XmFW9869u3sEo=
Subject key identifier: 03:F7:81:34:1E:6A:EA:08:03:AA:5B:E8:08:EE:0A:4B:28:86:F1:CC
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 019A50AB8FCED0096444892090F47B984E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number: 1043
Signing time: Tue 04 Nov 2025 21:00:11 +0000
Manifest this update: Tue 04 Nov 2025 21:00:11 +0000
Manifest next update: Wed 05 Nov 2025 21:00:11 +0000
Files and hashes: 1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: LAyAoSCmJ4Rdak4MhLN5OKsmJuddO6pFPMLsNK6+kjc=)
2: 8LQo-NmzGy5l2r5NZYIeKNdXs14.roa (hash: ilvAF3/ySzxVBGtuDQdjN+a1IHb253ip3G4kBn3IpkA=)
3: 8s7vHKE6FBZYlH7mxDn7_1ykPk4.roa (hash: fgNyBR69p7xJvQXl06eoPq2tjnGBemgh7E+PjbLx9mo=)
4: KBnV22O0C3tEALoBBJIOxcHb15g.roa (hash: Y3gI4bcoG8A3aqSjWcRxoni0bjtg/AtMO88Pu/MJNWg=)
5: Lq77aAwST8RILyM-oL6rNeFnjCE.roa (hash: Loe+ahaVydEMf0Ago+iaNs6AzxcPRts/E2zKD5WoQYs=)
6: ZoIewHefhjHP2Vd9cNeP-TAR-vM.roa (hash: IG+hitjDPUIZMjcFs/DHXrxqndBqaN9wlOddbrMn1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:8f:ce:d0:09:64:44:89:20:90:f4:7b:98:4e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Nov 4 21:00:11 2025 GMT
Not After : Nov 5 21:00:11 2025 GMT
Subject: CN=03f781341e6aea0803aa5be808ee0a4b2886f1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:13:40:0f:c8:4f:d3:7c:9c:72:cf:05:66:
57:e2:9e:f8:28:9e:82:31:45:41:17:d5:ea:8a:59:
3d:a8:04:0a:12:e3:b9:95:13:2e:5a:f1:5e:32:b4:
b0:05:f5:fa:15:85:f7:13:cd:73:70:ab:a6:29:3e:
56:92:79:47:d1:7b:9b:34:c0:89:f9:68:af:cd:dd:
c3:ee:e5:5d:5f:ce:a0:b4:5f:33:52:df:1e:69:92:
e4:f6:23:9b:3a:79:8f:63:48:6f:7b:a6:0c:d0:43:
05:c1:80:84:45:91:ee:a5:d7:7e:57:f5:38:79:73:
a2:cf:e8:7f:c1:be:67:8f:98:26:b1:b9:bb:10:af:
c0:0f:52:c5:47:12:db:2f:4b:60:3f:78:9f:a0:c5:
e5:45:a8:6f:94:eb:f5:8c:13:d2:c2:ac:c6:a8:81:
d3:d9:82:04:0b:2e:48:c9:6f:3e:3c:f1:52:a0:f0:
fd:e0:c7:25:85:2f:8f:d7:9c:6e:54:ca:53:04:0b:
13:3d:8c:3d:8f:1f:34:d3:34:2f:4b:41:26:9d:1b:
12:96:7f:8a:52:ad:3f:81:9e:a7:cd:d9:9b:f2:ac:
76:15:7a:d8:bb:36:ed:3c:23:59:e6:b2:b0:d8:e8:
b1:5c:96:e5:cf:1d:5a:74:6e:de:ae:85:18:4e:e4:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F7:81:34:1E:6A:EA:08:03:AA:5B:E8:08:EE:0A:4B:28:86:F1:CC
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ca:cf:05:4c:ce:0b:6e:6a:76:35:44:57:b7:62:69:b9:c4:
2a:4a:f0:b8:48:a9:a7:95:f9:34:1c:c8:ba:eb:ac:a6:da:35:
c6:f7:e5:9c:32:12:eb:b9:18:c6:7a:70:8b:0a:ee:e9:60:46:
7c:13:49:8f:60:ab:8d:1a:71:f0:a5:2a:d6:f2:3c:15:a3:ea:
6c:f9:ba:23:b6:a2:b1:6e:c9:72:e4:1c:ab:a6:37:58:66:50:
e9:fa:92:f1:2f:48:7f:25:22:52:31:82:3b:0d:39:e7:38:4e:
08:56:ed:0a:88:ed:da:8f:5a:8e:92:b9:b2:73:4f:a6:aa:ba:
fa:c2:22:97:76:4e:96:1a:20:3b:3f:a0:de:18:53:5c:dd:b4:
e8:01:ae:98:fb:4d:c9:fc:2a:c4:39:44:28:5c:06:ad:24:64:
56:c9:b1:3d:98:4c:32:a0:4a:5b:b4:f8:f6:89:1c:87:54:4f:
cd:7d:03:0d:f4:10:bb:90:19:f8:34:bd:04:52:23:a7:c0:70:
11:ec:4d:cb:e9:70:d5:ef:0e:b2:b4:e5:17:46:2e:33:3a:87:
80:e4:b6:34:3a:ca:dd:27:97:df:b7:ef:bc:e4:6a:cb:dd:48:
ec:36:4c:a5:56:a7:5e:f5:17:87:63:70:87:e6:f2:c4:d2:2c:
f1:6a:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:11:30 2025 by rpki-client