Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.mft (raw, json)
Hash identifier: LEAWExiTGrM5NeGEfy77a7hpxb1kf6BacOjuoSfcnEw=
Subject key identifier: 71:23:AB:BB:B7:FF:59:F7:43:13:C0:AB:05:D1:0A:46:86:F4:34:87
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial: 019A52D20E9A009571AA93C1B6AB3918D707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
Manifest number: 0ABB
Signing time: Wed 05 Nov 2025 07:01:29 +0000
Manifest this update: Wed 05 Nov 2025 07:01:29 +0000
Manifest next update: Thu 06 Nov 2025 07:01:29 +0000
Files and hashes: 1: 82BUCSXbyxoJ-2XzspAD1o8j3ms.crl (hash: vZmhvfF9YwVhWTUENi4Q/mwSDCEoMcdoJmFWTh2DT5k=)
2: WO4Lx-SRYYsLgDA8d_7YHDSf7BI.roa (hash: nMdj6H5AmHScUq7iFK7ub3BJ0X174BqxH7J5lRBxaFk=)
3: oI7kOSiG8h1OQh9w777ujGQ8d5c.roa (hash: 7bzozQwhPvIcjtgW8D6KNMw02ktIJKUDIRXI6dPZ7uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:0e:9a:00:95:71:aa:93:c1:b6:ab:39:18:d7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Validity
Not Before: Nov 5 07:01:29 2025 GMT
Not After : Nov 6 07:01:29 2025 GMT
Subject: CN=7123abbbb7ff59f74313c0ab05d10a4686f43487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:da:0d:bf:98:55:62:fb:18:cb:a5:6c:c4:
69:da:71:4c:09:0a:e6:83:d4:e2:a2:d3:aa:17:f7:
37:66:45:ed:2e:24:15:fb:ab:31:dd:c1:75:90:5b:
b1:d8:43:f3:05:65:65:ec:bf:b2:f0:27:b1:b3:47:
e6:cb:db:7d:d9:78:57:83:cc:00:23:a9:d9:ac:3c:
27:a9:44:6c:65:c6:e1:ee:36:29:a7:17:42:e9:af:
68:01:d1:43:90:3b:ea:24:a4:11:bc:d7:1b:b6:32:
64:9b:a1:c5:32:1d:52:57:ac:9b:9e:f4:32:ff:30:
66:34:25:22:0a:d9:93:7a:5f:1e:a5:d1:24:92:f4:
bb:73:2d:a6:4a:f1:e3:7c:47:a8:21:34:ac:cd:c7:
e1:1c:ec:d5:09:ba:18:68:0b:f1:ed:e8:20:92:85:
8b:e1:ad:e6:db:fb:e4:88:31:37:ff:4e:96:da:3c:
ed:79:e9:1f:54:1e:57:05:7a:85:c1:48:20:9c:bd:
a5:03:1e:8d:26:3a:88:c1:34:f1:71:04:da:a5:e0:
70:1a:bf:13:d7:4a:f5:40:17:4d:2e:bd:a6:0c:d9:
de:16:bc:06:1e:6d:2e:76:6d:42:b3:f3:d9:6c:56:
a2:56:8f:a1:92:19:19:56:70:06:47:d9:78:29:5d:
6f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:23:AB:BB:B7:FF:59:F7:43:13:C0:AB:05:D1:0A:46:86:F4:34:87
X509v3 Authority Key Identifier:
keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0e:8f:ab:90:57:e9:a0:09:10:87:b3:ad:a6:3b:d9:39:37:
25:b8:27:ab:a8:e2:93:4b:61:12:a3:55:51:6a:be:f3:1c:4f:
bd:40:87:a9:bc:0a:98:ef:0c:12:41:c1:48:fb:41:ae:05:a4:
71:e5:41:5a:c1:b3:08:f9:23:38:27:e5:17:5c:a1:6c:85:63:
8e:6a:f8:96:43:c7:f0:5b:27:55:b2:ad:1e:f7:95:5a:c4:b5:
46:1e:51:ff:62:23:46:32:5b:1c:c8:f0:a4:ca:55:fd:f4:7f:
03:75:64:e6:c4:32:82:c3:d0:3b:d5:6b:5b:09:d7:fa:d6:be:
cc:67:cb:df:b6:6e:f0:54:db:20:bd:10:d6:fd:91:a0:86:c2:
98:23:79:a3:d5:a0:58:cb:c6:2b:70:11:c0:8a:fd:83:a2:88:
51:10:a7:20:ce:65:6c:48:3a:51:b1:b9:6e:f4:83:2b:6c:b4:
b0:e0:6a:bc:d5:e4:03:a8:8d:fb:aa:aa:b7:25:5b:92:a1:96:
67:32:90:27:87:1a:3e:aa:91:4e:08:2f:0b:31:17:a3:62:0b:
64:e2:d8:ed:54:be:36:97:ba:dc:54:f7:95:5d:fc:1f:03:ef:
03:d5:4f:95:e7:82:62:76:39:9f:4a:0c:7c:23:a0:ba:38:5e:
e9:e6:6d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:14:04 2025 by rpki-client