Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File: 87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier: umsrHe+TcmXz5080rYr6ppoNupK8m/+7VUecr5L9V+U=
Subject key identifier: FB:E4:6E:7D:B7:F7:BB:F5:BC:D9:03:96:F0:9C:C8:9C:36:BA:FE:0A
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 01987F0A78FDD4F15D2B81FF0385EAA4A848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number: 0F51
Signing time: Wed 06 Aug 2025 11:00:49 +0000
Manifest this update: Wed 06 Aug 2025 11:00:49 +0000
Manifest next update: Thu 07 Aug 2025 11:00:49 +0000
Files and hashes: 1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: rsD4AD+KtxAHEMEBVjiZ97SVk1nlpAaUQuknk+gAfVo=)
2: 8LQo-NmzGy5l2r5NZYIeKNdXs14.roa (hash: ilvAF3/ySzxVBGtuDQdjN+a1IHb253ip3G4kBn3IpkA=)
3: 8s7vHKE6FBZYlH7mxDn7_1ykPk4.roa (hash: fgNyBR69p7xJvQXl06eoPq2tjnGBemgh7E+PjbLx9mo=)
4: Lq77aAwST8RILyM-oL6rNeFnjCE.roa (hash: Loe+ahaVydEMf0Ago+iaNs6AzxcPRts/E2zKD5WoQYs=)
5: ZoIewHefhjHP2Vd9cNeP-TAR-vM.roa (hash: IG+hitjDPUIZMjcFs/DHXrxqndBqaN9wlOddbrMn1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:78:fd:d4:f1:5d:2b:81:ff:03:85:ea:a4:a8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Aug 6 11:00:49 2025 GMT
Not After : Aug 7 11:00:49 2025 GMT
Subject: CN=fbe46e7db7f7bbf5bcd90396f09cc89c36bafe0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:e1:d9:4a:fc:6e:e7:14:60:aa:67:dd:ac:
d2:a7:ab:87:0b:85:8f:ba:b0:a1:14:e9:97:20:9a:
2e:d6:40:41:bb:ed:51:79:52:d4:0b:3f:14:9d:0c:
17:51:fd:ef:ab:84:d9:64:5a:61:f6:b6:c5:ca:0d:
40:92:54:29:32:a6:d5:17:9c:7b:2f:da:a6:b2:10:
b4:a5:6a:ee:d5:e9:a3:08:df:b1:ba:ab:56:04:8e:
ed:4c:85:bf:f8:31:da:a6:68:a3:86:12:dd:3d:b7:
50:69:3a:7a:35:1b:58:2b:3b:44:93:4c:ab:57:4c:
71:6e:65:89:2e:d7:dd:44:27:af:30:07:0f:71:6b:
fa:f6:95:08:36:ab:a2:b6:8a:fb:8b:14:22:25:78:
2b:37:84:0a:5a:ce:5e:57:fb:84:d3:a0:3b:95:33:
3a:80:91:69:02:52:02:f8:53:86:db:ef:42:97:9d:
85:2f:bf:32:cd:5a:bc:ab:c8:19:d5:23:c6:a1:45:
58:b7:aa:b7:c5:a6:8c:dd:63:0f:6d:87:65:61:01:
d4:1a:33:dd:b0:a8:98:b1:96:55:b8:54:0b:ad:73:
b1:a3:8c:10:4a:c3:df:1f:af:75:e3:86:c1:8d:8a:
8e:b8:5e:6b:66:f2:d4:fa:37:31:bd:4f:e2:ea:66:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E4:6E:7D:B7:F7:BB:F5:BC:D9:03:96:F0:9C:C8:9C:36:BA:FE:0A
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a5:59:cb:3f:2e:61:d1:59:5f:75:28:24:dd:83:e2:99:ba:
c5:fb:4a:e8:3f:52:cf:4b:5d:bd:30:b0:1c:ed:bc:f3:ee:3b:
c5:f6:b5:34:e9:fa:f0:1c:c1:2a:8f:a9:aa:70:72:b6:d4:87:
89:da:10:f8:b1:da:b9:9a:c0:b1:85:f4:92:71:27:d4:00:bd:
75:e5:e2:68:1f:e2:09:51:e3:d5:70:41:00:b2:25:39:76:f6:
39:85:1c:de:6d:4c:84:16:5e:5c:96:bc:89:64:f0:fb:5a:b2:
f9:44:36:d1:25:a6:bb:b2:5e:b6:50:57:61:6e:e4:dd:cd:7f:
29:c8:1b:4a:d8:f4:62:e1:0a:8e:ac:09:4d:f6:bd:05:c2:0b:
42:43:96:5d:d7:a4:97:f5:07:90:c2:61:07:4f:07:9e:41:81:
59:b4:d6:d3:c5:04:69:70:98:bf:2b:ed:bd:ef:b4:cb:48:da:
a0:53:8b:99:0a:f3:11:fc:b2:ea:bc:79:40:7f:4c:bf:36:a8:
c7:91:60:e1:fc:f1:5e:3b:2c:3e:ef:8e:d3:7c:91:05:5f:93:
ea:e0:83:15:36:4f:5b:c3:06:f5:aa:49:f0:70:26:7f:a5:de:
c3:e7:cc:1a:fd:8d:9f:41:99:9c:33:b1:b3:98:02:16:5b:77:
9b:38:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:01 2025 by rpki-client