Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.mft (raw, json)
Hash identifier: BMtG5KJZG6j576lesV/gvnuugXUKmXp7wR4Z2PJxv3Q=
Subject key identifier: B4:D7:B7:A1:CC:35:8D:94:07:CE:23:38:1C:1D:49:ED:F6:41:D7:D5
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial: 019A56AEBCF8A8F90C3F448DD83A5D3A0FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
Manifest number: 0ABD
Signing time: Thu 06 Nov 2025 01:01:23 +0000
Manifest this update: Thu 06 Nov 2025 01:01:23 +0000
Manifest next update: Fri 07 Nov 2025 01:01:23 +0000
Files and hashes: 1: 82BUCSXbyxoJ-2XzspAD1o8j3ms.crl (hash: 4BUqiqfWkqgpkfx2yy1yd6qXwLGSVQj6i3sZpHhoBhs=)
2: WO4Lx-SRYYsLgDA8d_7YHDSf7BI.roa (hash: nMdj6H5AmHScUq7iFK7ub3BJ0X174BqxH7J5lRBxaFk=)
3: oI7kOSiG8h1OQh9w777ujGQ8d5c.roa (hash: 7bzozQwhPvIcjtgW8D6KNMw02ktIJKUDIRXI6dPZ7uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ae:bc:f8:a8:f9:0c:3f:44:8d:d8:3a:5d:3a:0f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Validity
Not Before: Nov 6 01:01:23 2025 GMT
Not After : Nov 7 01:01:23 2025 GMT
Subject: CN=b4d7b7a1cc358d9407ce23381c1d49edf641d7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:c7:f3:96:f7:f8:a4:65:bf:1a:9e:4e:83:
70:e2:2f:50:36:5a:02:d6:0c:18:47:2d:ae:70:82:
e3:8e:51:ad:a4:11:ce:4e:e3:e0:67:ca:21:c7:36:
f0:0b:69:ba:70:d5:07:d9:ab:b6:53:25:be:a0:71:
f5:23:36:54:de:75:b3:4b:a0:8f:30:e9:df:45:c3:
8f:66:ab:1b:bc:55:b8:86:f5:57:20:b5:5b:8f:e3:
d9:e3:61:d5:05:ce:03:b5:9d:58:26:c0:28:17:b9:
d1:56:09:96:42:78:b2:04:a2:d7:02:59:b1:8d:46:
2b:60:c1:2f:30:30:a7:1a:32:ec:09:59:cf:e1:1c:
d5:e7:e8:a0:5f:97:14:2b:76:08:c2:71:20:da:dc:
e3:4c:03:53:b9:9f:be:35:fe:ee:b8:31:fd:79:0a:
68:e9:dd:91:5e:d3:02:fe:fd:96:bb:80:91:16:cd:
e7:3d:2d:4f:1e:6e:c0:9b:a1:0f:d6:c7:fc:4a:64:
3c:ce:ae:0c:3e:99:bf:06:a3:b2:58:ec:ce:39:15:
45:16:64:eb:b5:52:0a:a4:75:9b:40:33:e9:57:f3:
2b:fb:af:7e:be:46:1e:a1:d3:7d:47:d9:23:2f:70:
6c:a6:97:f6:15:7c:f0:05:e7:23:99:6a:96:ca:0f:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D7:B7:A1:CC:35:8D:94:07:CE:23:38:1C:1D:49:ED:F6:41:D7:D5
X509v3 Authority Key Identifier:
keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:78:88:2c:9e:87:0b:dd:d1:f2:cd:70:c3:51:ca:5b:d0:7c:
d5:b7:ba:86:5b:9d:5f:a1:d4:01:66:0e:86:85:3d:9d:8c:35:
da:b4:2f:c6:57:f2:68:8a:b1:d0:cf:01:cc:4e:1a:63:a1:e4:
6c:b5:e1:ca:1c:db:e1:30:3b:d0:cf:8a:16:44:d3:70:b1:8e:
f3:93:e2:66:99:39:69:dd:70:b0:16:a1:81:c9:f2:ea:72:47:
59:73:88:42:77:4c:8a:3b:47:09:84:8f:dc:48:1f:71:b1:5d:
ef:f6:cf:af:66:7a:33:59:10:17:f4:56:6f:82:4f:60:3a:06:
00:c1:ee:d4:3e:52:2d:2a:1a:df:c8:c9:9c:e9:c2:18:3d:98:
f0:b7:f6:19:5f:de:03:45:7b:d9:1b:74:85:58:ae:1d:24:46:
2d:e7:90:20:25:90:08:b1:7d:6d:f7:81:e1:7f:a1:9e:6f:76:
f0:64:0f:de:fe:87:cc:a8:52:46:e3:bf:eb:29:d4:42:70:12:
87:7e:d0:05:45:3b:eb:d3:21:1c:5d:85:1e:18:e6:0f:b0:ae:
fd:8d:b9:2a:50:91:7a:fb:df:02:6b:b6:12:60:cc:b7:04:96:
78:a8:c9:27:f7:c8:ac:3e:94:d5:66:a2:92:76:23:12:5b:0d:
67:76:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:08:55 2025 by rpki-client