Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: NRNd9wq3vxAjGu4FMMy4J+DtJRHKrCHO4HTqeOILhg4=
Subject key identifier: 94:C4:D1:12:A0:A4:47:23:94:DC:3E:6E:D3:86:5B:91:B1:C3:0F:36
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 0199FCFD65D70116A49ED4B9D5AFD810E52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 0878
Signing time: Sun 19 Oct 2025 15:01:28 +0000
Manifest this update: Sun 19 Oct 2025 15:01:28 +0000
Manifest next update: Mon 20 Oct 2025 15:01:28 +0000
Files and hashes: 1: 3TbJq9j2geNORTi2E9xTbbuvxTw.roa (hash: GEQQroPBoH2N7pLErfqXNmjkVTV09NRy63LB6YJ9qVU=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: 7uLQ2PEYNdK2MqUqzG4f+ryGDxlftPOn2fN0CfPWiDE=)
3: O5vcxppH2hWxYYAsqunLkBWcHEA.roa (hash: q4yYQF/m9xvQmRwlkRVUClFyEqyPX8PvXIb5hdq5C/c=)
4: S074YuodosP0UuUo6De4P_sFXFs.roa (hash: pyM9pUqd+rcNeRhYxGuF9WXwPo5DNw77BSKM8YnWbDw=)
5: Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa (hash: ynVaJVBlwlWG6tSEdbng0uT/nO6dcjS+TT74OXhzdwE=)
6: TeWmN6EHoWRaSQ7AOqv2c821wck.roa (hash: nLb50bk1nICV8KXxpzGqIvnlONr6M9e61qQJa/r2Gnk=)
7: VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa (hash: ILHJodGOzQUy/1EkSV1sW3J8/BVRtZEBwh5TBOH9dR0=)
8: fpQDOceW0nAf0mI2PAXShTq2K8Q.roa (hash: AwWdNgQE53Ja7SCJFwgUtSy2nXOjhiPggUFZe7XRmBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:65:d7:01:16:a4:9e:d4:b9:d5:af:d8:10:e5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Oct 19 15:01:28 2025 GMT
Not After : Oct 20 15:01:28 2025 GMT
Subject: CN=94c4d112a0a4472394dc3e6ed3865b91b1c30f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:32:74:d0:68:36:8b:a4:a2:37:bd:8b:03:
19:ec:d6:38:34:3f:21:8e:04:9a:97:d6:3a:5a:0b:
5e:5a:6c:1b:3a:67:78:05:c7:06:44:fa:33:71:c6:
05:d9:9a:cd:da:2c:16:09:06:79:bf:3e:1d:eb:15:
20:7e:bb:f4:7a:39:f9:32:c2:0b:c6:04:b4:56:be:
f8:af:8c:ed:ac:2f:72:1e:32:dc:99:bd:d2:47:de:
bc:84:ca:a6:c1:48:e9:12:f4:d8:60:a3:07:f9:fc:
87:8e:e3:11:48:9a:d0:01:7e:53:2c:e7:5b:03:7c:
6f:96:8f:36:89:47:63:98:84:07:ea:6b:c5:fe:22:
71:ae:f3:8a:e6:43:fa:32:e2:1d:cf:7a:cb:8b:eb:
c1:e8:e4:0c:28:5d:e5:a1:d3:cb:eb:84:db:c9:43:
f0:1e:50:9d:ff:42:1b:17:76:7f:c5:df:2d:af:12:
7e:b9:4e:45:96:1f:0a:7c:20:e6:d7:fb:94:10:24:
0d:bb:79:49:c5:17:f9:69:8f:f9:b8:1a:89:4f:62:
9c:20:66:46:59:b5:f1:1f:b8:b7:83:8c:28:8b:f5:
b8:51:ed:d5:30:37:a2:77:eb:8c:c3:75:75:04:d3:
73:21:71:67:95:ae:19:2e:c5:49:8c:60:77:bd:98:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C4:D1:12:A0:A4:47:23:94:DC:3E:6E:D3:86:5B:91:B1:C3:0F:36
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7e:cb:d6:7a:be:3c:ee:85:95:6c:c4:ae:0e:d5:0c:ca:b5:
a3:81:d2:82:85:ac:ae:62:8e:b2:0e:2b:fb:35:de:71:81:cb:
04:72:97:f4:50:87:d9:7e:e1:5f:29:b1:62:ed:6a:15:73:54:
10:91:19:56:34:26:7a:11:4c:f6:48:65:1b:56:fe:51:0c:7a:
2e:8f:cf:be:ef:27:1b:66:30:90:49:03:45:07:32:c5:fe:65:
9d:23:06:1e:05:c1:1d:bd:cb:0d:9c:58:5d:eb:0e:23:9c:48:
fe:0b:29:96:35:b1:32:a5:0c:da:21:38:61:0c:b7:4f:04:2e:
f4:64:b5:6f:11:de:7c:f0:f2:3e:17:8e:13:f3:ba:9a:ed:2a:
c1:13:3f:ca:1b:ad:ab:e0:80:af:98:bb:3d:c8:ec:35:f7:b6:
c2:23:ba:ad:72:21:e3:e9:ce:66:99:b0:f0:78:8e:32:b7:14:
9d:43:0a:64:15:e9:e2:11:4a:6b:c4:be:de:83:3e:a0:df:04:
00:56:90:18:f8:c0:3a:23:08:1a:6f:9b:26:69:6d:0d:4b:93:
f2:5c:e6:16:2d:fa:17:8c:6d:dd:98:7a:07:e2:31:d4:ac:0f:
c9:5c:24:89:62:76:eb:ed:34:af:0e:f7:e7:9d:c1:2d:16:6c:
71:c0:7d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:10:59 2025 by rpki-client