Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
File: 87qQxx60ywFpyUhD5ccv13dQGQY.mft (raw, json)
Hash identifier: hdBpk4dN5AHVOwB0hIqT0DtI44dPxBnOvzybyJytsjE=
Subject key identifier: 26:33:1E:FE:A6:2B:3A:A6:02:A2:AC:B4:03:F4:88:4C:67:7E:43:89
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial: 019A5006E54AE16B5A8B52B54255D1ABF80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
Manifest number: 1565
Signing time: Tue 04 Nov 2025 18:00:20 +0000
Manifest this update: Tue 04 Nov 2025 18:00:20 +0000
Manifest next update: Wed 05 Nov 2025 18:00:20 +0000
Files and hashes: 1: 87qQxx60ywFpyUhD5ccv13dQGQY.crl (hash: Aa78t+PbVZMdRx8s9GAV2AEBwKDpC2DOX4MosBLaJfs=)
2: JysSz_R1K3TNaznJ02DbQNBve_s.roa (hash: BaOSaAFh8MSaQI0AxI9H+YSRs1439Nfg5CR//S5kRHM=)
3: cPSt1cBK1yUkGNEnPd-jB0H0f98.roa (hash: 6XTiW18fxhFDL+0aNweHaTDamcOXmMJdNCPIYbjuHV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:e5:4a:e1:6b:5a:8b:52:b5:42:55:d1:ab:f8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Validity
Not Before: Nov 4 18:00:20 2025 GMT
Not After : Nov 5 18:00:20 2025 GMT
Subject: CN=26331efea62b3aa602a2acb403f4884c677e4389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b5:a0:b6:0c:25:ad:98:7a:b2:fd:55:50:78:
b0:36:81:14:fe:ce:fc:75:6d:eb:d5:81:3f:4f:29:
4c:09:b1:2e:38:83:12:91:85:c3:92:4d:66:02:8a:
d4:40:7b:7c:be:5d:c1:d8:ba:85:ef:7b:50:4b:bf:
c0:16:90:16:be:a4:fa:e5:10:bb:83:07:e5:ef:19:
24:54:48:d3:20:3f:5b:70:59:77:c3:31:88:21:9b:
ec:cc:04:f3:24:8e:8f:ec:b3:e3:5b:93:ef:2c:b4:
4b:fc:91:cd:0b:19:86:48:f1:8e:ce:f7:38:ce:c7:
da:dd:d8:d2:66:31:8a:99:8b:c0:c9:7d:1c:2a:d2:
7c:8d:d2:c0:36:6e:fc:b1:ed:fd:59:32:9a:ce:f8:
ac:00:b4:77:12:8e:35:7a:0f:c8:d0:60:63:05:52:
1d:42:45:2d:9b:d1:2e:69:46:71:61:e4:ba:cc:98:
3b:78:f7:9b:4f:bb:92:44:05:c4:96:93:74:33:0c:
51:f2:90:42:34:71:df:ce:7e:d6:b0:0f:4f:f6:23:
a5:be:93:86:bc:5b:85:3e:98:1c:0e:f8:c4:53:35:
d4:c0:3c:e8:d0:60:3e:f6:31:10:7e:6a:6b:e2:56:
7a:a6:c6:e3:64:93:7f:f4:f4:61:8a:38:63:5a:00:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:33:1E:FE:A6:2B:3A:A6:02:A2:AC:B4:03:F4:88:4C:67:7E:43:89
X509v3 Authority Key Identifier:
keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2f:b5:5e:98:cf:39:77:e8:d9:37:d8:d6:79:ad:3e:32:ff:
23:77:e8:bf:1a:d3:24:b7:fe:38:c4:7c:01:43:da:fa:e7:53:
b5:b0:6c:8f:c8:69:6f:30:b8:d8:4c:dd:2e:8c:3f:da:21:ca:
fe:a4:d2:09:ca:08:94:bd:f2:2e:c6:42:66:b8:e1:1d:a7:e8:
04:35:75:3d:92:5f:2f:c3:ed:6b:54:b2:20:2d:55:c9:b1:37:
46:d8:e3:0e:50:26:f5:53:47:c9:60:4d:b4:e4:93:20:f5:dd:
b8:f0:80:bb:aa:63:ac:15:8d:70:81:b3:63:db:e8:4a:30:43:
b5:ab:88:7c:0a:b1:0e:9f:20:fb:43:7a:49:14:8e:ed:4a:de:
3c:25:e2:e8:31:04:cb:f3:17:e7:85:6e:3d:13:ac:e2:19:94:
58:38:42:08:a9:0c:f1:88:73:d9:07:93:fe:45:99:3b:9c:3f:
f9:ff:70:a3:49:d6:ec:0c:dc:4d:f6:f6:0c:8c:9e:c0:04:4e:
bd:e4:f5:97:19:75:3e:26:8e:9b:41:fd:c6:c4:de:5f:e1:61:
d7:0b:25:67:f4:3b:fd:86:b8:cf:e8:0b:d5:60:fb:a3:e6:1f:
ba:c0:b2:ee:de:60:4e:66:0e:83:33:f5:b2:c7:38:c2:b4:d3:
c8:97:48:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:59 2025 by rpki-client