Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File: 89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier: vAHGiReqcnTiZ7OvMaRNoLk9RN4qHFt/39+bkiWGXjI=
Subject key identifier: FA:FC:0A:98:56:7A:CE:D3:4D:01:B9:1D:9A:E4:88:D9:2D:68:E9:81
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 0198D6CDADA2F79FE019DDF7D7644D8015BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number: 0BB7
Signing time: Sat 23 Aug 2025 12:01:00 +0000
Manifest this update: Sat 23 Aug 2025 12:01:00 +0000
Manifest next update: Sun 24 Aug 2025 12:01:00 +0000
Files and hashes: 1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: BC1SwC7NA0HNEtM7OrU8NDKKPB1EJ6WtJhtfdDBfm+I=)
2: RArCPfG6cBnbfBAKLbWfL49ZMls.roa (hash: uc8AJAayCJr6PnC8hA44mAQSr2RQBPC/srP3fioA29o=)
3: Wi2RTxfTTcg3jIA6VNCxJhuXtSc.roa (hash: PN/Hitc4mDcgZ6vgsBJIh+lNS02EoNv2xNjb7IleUCM=)
4: iI96ltGCU8Eh-fXmAqschYb7j1E.roa (hash: Z5PSdW/OzuN6TE7LbGMzYDGBpKQ5aABS0hIggAHbUHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:ad:a2:f7:9f:e0:19:dd:f7:d7:64:4d:80:15:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Aug 23 12:01:00 2025 GMT
Not After : Aug 24 12:01:00 2025 GMT
Subject: CN=fafc0a98567aced34d01b91d9ae488d92d68e981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:2f:be:10:41:63:ef:43:ee:08:85:4c:69:
f1:3a:c3:50:41:aa:df:48:58:d1:1d:aa:39:bd:fc:
4a:27:c4:7a:46:7a:37:52:bd:78:21:c0:3a:ee:d4:
f7:cc:eb:a0:5b:70:fa:64:d8:84:83:47:d3:f5:23:
af:a0:f2:16:63:a0:1c:6d:8c:6f:48:a1:c7:ab:8a:
50:8c:cb:b3:ed:07:d2:76:6a:13:00:16:0d:de:1d:
91:e3:b5:37:c5:71:6f:bb:9a:1f:9b:de:57:92:6d:
17:39:67:84:f7:e4:b6:de:61:3b:79:1d:f4:71:47:
94:5d:15:de:a0:bc:af:15:fa:6b:74:b4:bb:ed:7c:
5a:1a:ba:a4:3e:a3:0e:bb:65:87:ca:70:08:9b:6c:
c7:0d:e0:b2:00:79:ae:a9:7f:55:d5:8f:e3:db:45:
5d:e6:98:a5:e2:17:d5:43:0d:0c:fc:dd:0b:2e:6e:
4d:4f:57:39:f9:78:ae:d9:e2:9d:3d:01:93:cf:67:
82:a6:53:f7:33:a8:de:2b:85:82:6b:ee:33:e1:b1:
ee:f9:d2:46:8f:b2:e9:40:b8:c6:c1:09:e6:93:cd:
9e:d5:f1:ae:89:fd:4e:1c:5b:4c:3b:c4:84:6b:70:
7c:b1:f3:a8:3d:8e:fb:2a:9d:e5:cd:71:40:5d:c5:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FC:0A:98:56:7A:CE:D3:4D:01:B9:1D:9A:E4:88:D9:2D:68:E9:81
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2b:17:5b:c5:5d:ec:18:cb:ea:e5:26:0f:59:c2:a5:5c:92:
4f:80:a2:f0:91:ab:19:4d:1f:23:68:a8:04:cc:69:8d:95:6b:
8d:4e:13:75:5a:c2:45:33:8d:fa:17:c8:e2:e4:32:46:59:88:
5d:6e:95:4d:a8:22:1e:a9:8c:a8:0e:4e:c0:fa:d4:47:a9:3f:
8a:1a:86:fa:e4:78:06:5e:41:58:e9:3d:cd:7c:29:af:3d:ca:
9d:fe:72:62:b4:8e:01:54:2f:e7:2a:6e:7e:5a:95:b6:ef:16:
ec:ad:df:03:d1:64:19:7c:05:d9:f4:e1:39:a9:05:67:66:35:
05:bd:1c:61:2c:9f:d2:8a:c1:ae:1c:a0:cb:c4:11:f5:57:86:
f2:f2:f0:28:e7:23:73:c2:6d:2d:3d:22:5d:f4:f7:7d:9e:c5:
6f:a7:9b:5c:4c:6a:12:b7:8b:3c:a4:41:b9:7d:00:6f:bf:a9:
7b:6f:9c:36:b5:1a:70:4f:93:8e:ac:19:ec:14:c4:8f:52:7e:
d7:23:d1:23:77:ae:7d:0c:b8:bf:fe:ae:d4:84:c8:0a:d7:b1:
be:c8:ed:3d:c5:0e:aa:4a:1f:c8:f7:b1:71:ef:46:a4:bf:b9:
2f:41:ad:0f:e0:99:ff:76:9c:a2:ba:69:3d:3f:3e:58:51:a4:
e2:ca:4b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:43:06 2025 by rpki-client