Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File: 85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier: GEgaCQborFmHQpyvTLYxOy7pkoS48dFcS4DAzdIfhE0=
Subject key identifier: B4:26:73:88:9A:B7:8D:45:6C:48:38:39:66:30:2F:EA:69:2F:DA:68
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial: 019A4F6295B436C190ED39C3FB97D8A7AF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 15:00:52 +0000
Manifest this update: Tue 04 Nov 2025 15:00:52 +0000
Manifest next update: Wed 05 Nov 2025 15:00:52 +0000
Files and hashes: 1: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: +WT43mWfn6/hexdFmDZ0sSaRsMoAwnHq+caXwLd1yKc=)
2: DgSG9NAY-GeZhhQF_9nz_5bnH4g.roa (hash: HVd5RwrEtlWn4VmR//6rMsJVil50z8bOvrCZBZiqbC0=)
3: KW9AN_X4Hh4VKuAnb6bJtRrKymg.roa (hash: J21F/I0zRgekIus74H7I/v2eoj4Bzdqg85T8XsMU8eI=)
4: KaCCbIDfk6xPLr8lzeQM2ayQkYY.roa (hash: stYyC3DZ280ukMQVQAStdzjvt9KMG36guiRh8dH8BRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:95:b4:36:c1:90:ed:39:c3:fb:97:d8:a7:af:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Validity
Not Before: Nov 4 15:00:52 2025 GMT
Not After : Nov 5 15:00:52 2025 GMT
Subject: CN=b42673889ab78d456c48383966302fea692fda68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:e9:89:79:ea:a5:2c:d9:21:04:c2:b4:1c:
e1:9b:81:23:23:ad:d2:59:e8:c6:b9:d2:f2:70:4b:
d0:59:18:22:4c:ff:82:32:e3:2f:45:d8:85:d5:99:
9f:0f:89:ae:f0:79:85:1f:e7:f4:cc:5f:46:e2:ea:
a0:83:ea:f7:8d:d7:bf:81:65:23:ed:d7:3b:8a:1e:
49:e3:c6:a0:38:00:14:29:3a:3a:df:0b:64:32:0f:
a8:7b:7c:67:9d:98:62:81:45:67:89:81:d6:46:77:
a4:43:f8:69:5c:86:f8:25:4d:4f:5a:73:95:e9:3a:
10:d8:68:19:3d:87:45:c1:b1:b2:f1:9f:f0:aa:f2:
c7:0a:c0:7c:68:2a:49:b3:6b:78:5b:2c:e1:76:3b:
fd:6a:39:7e:4a:d0:27:cf:0c:d5:71:30:88:b8:db:
a9:3f:7d:c6:86:85:54:47:65:63:13:e1:e5:c0:08:
81:63:87:47:44:32:ee:ab:38:29:5f:a4:bc:3a:ca:
79:a6:f4:64:c3:74:46:fb:37:19:b2:95:58:33:fc:
e6:36:5a:6a:43:33:28:b7:bf:5d:ed:52:ff:65:ac:
03:62:07:66:2b:08:e0:72:be:90:dc:2c:11:e4:25:
cc:89:ed:ce:50:6f:1b:7c:94:bb:3c:df:45:c0:5e:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:26:73:88:9A:B7:8D:45:6C:48:38:39:66:30:2F:EA:69:2F:DA:68
X509v3 Authority Key Identifier:
keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b9:43:1c:ba:6b:d7:7f:3a:f9:39:85:ee:39:2f:34:10:56:
06:d6:38:7c:e3:bb:1a:1e:7f:2f:9e:f6:cb:a8:96:5e:05:a1:
08:61:a6:36:0b:03:7f:1f:a8:f6:55:0c:4f:9d:46:e4:cb:5e:
9e:d9:c6:23:b9:46:bc:28:d3:74:a9:c8:9c:45:45:36:9b:1a:
ff:4a:d4:e8:03:35:3b:f4:dc:81:7d:a8:d2:9f:96:50:7a:9e:
7d:80:77:c3:9d:85:b8:37:96:2f:0e:d2:10:66:0a:c6:a0:05:
6a:72:96:4b:af:c9:ae:ec:62:35:b8:19:8e:16:e7:7f:cd:d6:
44:f4:66:03:e8:42:c0:54:53:a9:50:c2:86:82:3b:c2:b6:99:
8d:bc:7f:f3:cd:82:0d:08:31:31:92:e7:21:69:33:f2:f0:ae:
6c:75:f6:ee:f3:19:32:90:b8:b0:c6:aa:c8:aa:f9:af:90:2c:
79:89:cc:12:08:df:d8:50:84:e2:10:10:1c:db:f5:91:a9:05:
5a:b7:f9:32:d8:83:9a:10:f5:bb:20:0b:57:83:72:84:63:6a:
31:43:6f:e9:2a:76:88:30:6a:1b:a5:1f:96:c2:d4:3a:e3:bf:
53:c0:f8:57:6e:16:6d:0a:2c:43:76:25:0f:90:49:df:c5:05:
3f:b4:51:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:55 2025 by rpki-client