Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File: 82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier: OX96PdtoFm1ATKt7y0pBLPaYgEdfpNLrUV7IM3eFbOU=
Subject key identifier: 57:96:AC:20:EF:CD:B8:83:C8:8A:78:FF:5D:EE:4F:9E:2C:78:28:D3
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer: /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial: 019A4FD05A5AD35CCC614285C0DD73F32831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number: 067D
Signing time: Tue 04 Nov 2025 17:00:45 +0000
Manifest this update: Tue 04 Nov 2025 17:00:45 +0000
Manifest next update: Wed 05 Nov 2025 17:00:45 +0000
Files and hashes: 1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: 2A3DIjQBIe8oUglYzDtVTFwa1RnhKriScBfMuvx1BOg=)
2: nPeojOrbaPs45UMM5xBsx67HUyw.roa (hash: I+r6NKoTQ/LaZOROIxMVJyc2C7XDOY211tQjVI17x0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:5a:5a:d3:5c:cc:61:42:85:c0:dd:73:f3:28:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Validity
Not Before: Nov 4 17:00:45 2025 GMT
Not After : Nov 5 17:00:45 2025 GMT
Subject: CN=5796ac20efcdb883c88a78ff5dee4f9e2c7828d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a4:d1:24:8c:7d:f9:03:af:5c:f4:23:d6:d1:
49:9d:ff:d8:4a:16:61:18:d0:09:56:ab:04:49:aa:
73:58:9b:93:ff:db:6d:bd:ee:01:87:e5:fa:c4:4f:
2c:dc:c4:98:a4:d0:aa:58:33:49:eb:22:12:14:50:
e4:fc:96:95:7f:2d:97:03:f1:34:f3:83:3c:b0:4d:
05:5c:d9:59:1a:3f:85:bc:3a:64:ad:6c:d1:d6:4f:
b0:6d:ca:85:0f:64:f6:27:f3:75:2a:8e:77:92:b8:
bc:f1:11:f8:c6:09:15:c4:08:bc:dc:15:33:08:3b:
c1:12:d4:dd:27:48:cd:3d:ea:3e:45:7d:07:0b:e8:
23:9a:80:7c:3a:af:5e:4a:f2:2b:b1:98:e2:f5:f4:
45:6d:67:30:64:2d:b7:92:0e:d7:e2:82:64:45:4a:
ef:18:31:c5:0c:6d:de:de:8d:9e:78:7a:81:46:3d:
17:f7:5d:ab:f8:ba:84:cd:e6:b5:0b:6f:df:92:94:
86:c3:dd:fb:6e:ca:48:50:1b:14:cd:a1:2d:51:96:
e7:38:d4:67:02:f0:9c:cd:58:46:d0:86:5a:25:28:
26:ec:59:5a:89:ab:95:eb:15:54:97:3f:80:8e:a3:
53:34:75:11:83:39:33:d6:5b:1a:38:c6:cb:81:f5:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:96:AC:20:EF:CD:B8:83:C8:8A:78:FF:5D:EE:4F:9E:2C:78:28:D3
X509v3 Authority Key Identifier:
keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b6:22:75:a5:56:bb:31:08:81:e5:79:04:ff:d9:3a:88:36:
79:f5:31:25:2c:14:78:65:2d:db:f1:d2:cb:4b:57:35:ff:39:
4e:5f:7e:31:12:71:0e:e7:60:13:72:5e:a8:c7:da:9f:be:21:
e2:97:c6:7f:90:15:d7:49:91:ff:4f:00:5a:bb:06:2d:d5:7d:
cf:4a:70:6f:1c:21:58:b9:30:72:a7:ad:50:4e:56:1a:f8:b8:
f8:bb:c8:e0:22:80:4f:2f:36:f0:b7:b3:28:c5:ed:21:8b:7c:
80:9c:04:89:ea:a9:24:7a:64:de:79:0e:65:a9:5f:ec:20:f6:
25:e1:49:de:31:69:ab:c9:97:e1:23:12:78:c0:d8:03:0d:05:
40:0d:dd:80:1f:cc:6a:0d:3b:17:30:0c:41:0c:7d:36:ab:70:
7b:1c:26:9b:68:8c:31:0f:1b:08:35:24:5f:18:21:26:be:02:
13:7b:31:b0:18:3f:dc:f3:b5:0c:03:df:b8:bd:63:20:ae:2b:
b6:24:a4:ad:01:82:b2:84:05:21:aa:59:12:99:9f:de:69:da:
d0:6a:08:92:fe:38:d5:0c:36:4a:17:62:d1:53:c7:d5:a9:0a:
59:71:22:b8:ee:51:99:d5:bf:d9:4f:b0:3a:9e:e8:d0:40:e4:
05:e6:91:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:08 2025 by rpki-client