Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
File: 87fdVNqwL-jN6KheVp-CcIiXlBk.mft (raw, json)
Hash identifier: gtOsiQ/hDpxoxPcgTqwwmEJGpjmxlfyHPFK71QJemfU=
Subject key identifier: 7E:B7:9D:8D:40:13:35:C0:30:60:81:6B:DD:0D:36:46:7A:1E:5C:A4
Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Certificate serial: 0199FD6B2D8F80D9FE4F6FAB96E0A50EDD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
Manifest number: 0C57
Signing time: Sun 19 Oct 2025 17:01:23 +0000
Manifest this update: Sun 19 Oct 2025 17:01:23 +0000
Manifest next update: Mon 20 Oct 2025 17:01:23 +0000
Files and hashes: 1: 1-Umc9hOt2tpo1ZchNi7HZONvobM.roa (hash: uKhjdfQ+p8B+ov8GKsdABY8fRu2epUYrzObWxrEfxuQ=)
2: 87fdVNqwL-jN6KheVp-CcIiXlBk.crl (hash: acNeAhWkUG+nKsXGvdLo0YAM6i88P9cS433mExs7lMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:2d:8f:80:d9:fe:4f:6f:ab:96:e0:a5:0e:dd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Validity
Not Before: Oct 19 17:01:23 2025 GMT
Not After : Oct 20 17:01:23 2025 GMT
Subject: CN=7eb79d8d401335c03060816bdd0d36467a1e5ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:d4:11:24:6e:97:98:81:13:f2:1a:9a:fa:
33:0f:05:44:37:af:43:1a:aa:1f:d0:92:5f:51:a5:
2a:b8:e2:14:b4:47:1a:86:cd:35:02:d5:b7:68:a1:
de:ac:ed:3f:3f:e3:2b:a3:ce:f6:38:ff:71:aa:b0:
c1:06:ef:b4:c7:32:0a:72:82:60:8b:d5:e9:36:98:
0b:7b:ad:04:1e:d5:52:aa:2d:fc:3b:94:47:ad:d0:
d8:b9:79:f0:98:fa:32:d7:5e:95:d0:ca:e0:ed:15:
fd:b7:56:bb:87:e2:23:08:94:11:f8:4e:00:7c:57:
ca:3b:69:ab:db:58:a1:f8:ae:43:65:a0:b4:e6:52:
2f:f8:13:09:4f:c2:9f:2d:42:f9:e8:86:6c:52:5e:
c1:a7:bd:82:8c:9c:f8:de:ce:fa:b8:f6:c7:72:eb:
3d:50:c8:68:00:3e:6e:8b:68:70:02:7a:cd:35:77:
ec:ee:1e:33:ee:f2:e4:f0:74:06:a9:04:8b:07:1b:
c9:5c:ad:c8:3c:bd:1c:a8:6c:3f:28:da:79:05:a4:
ec:cf:b2:d6:f3:26:fd:e2:15:0c:e2:37:8e:cb:10:
89:8e:e6:06:2e:e2:93:0c:7d:3b:e2:7c:aa:81:89:
0b:03:81:63:d7:3a:09:72:2d:7a:7d:bc:ce:ba:7d:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B7:9D:8D:40:13:35:C0:30:60:81:6B:DD:0D:36:46:7A:1E:5C:A4
X509v3 Authority Key Identifier:
keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:02:47:2d:7e:c5:d3:57:6f:40:5a:c8:f9:c8:34:2f:7f:91:
4e:0a:7e:0f:da:d9:5d:87:a5:50:89:41:38:4e:c1:83:82:7b:
c9:36:17:20:ed:13:f0:fd:c0:df:94:15:86:90:51:f2:e2:97:
52:b3:58:9e:ae:ba:d0:32:fd:06:82:40:b6:b9:75:d6:b3:11:
28:f9:ed:f6:b8:2d:e7:63:2a:e5:0d:c7:c8:45:36:dc:03:19:
da:f3:96:5f:2e:4e:4f:e3:b2:ad:15:97:85:e3:c9:75:f0:b4:
55:ee:43:28:7c:6a:ae:ce:84:45:7d:33:79:04:bc:34:4b:be:
0d:36:43:93:68:da:89:f7:99:8c:e9:14:83:a9:84:cf:2c:20:
f8:db:9d:47:a5:91:df:47:ce:ee:89:94:e2:b9:91:97:42:b7:
f6:92:bf:a2:5c:a2:8a:6b:93:1c:15:34:e5:2c:05:a8:af:f4:
ba:ec:f9:38:f9:54:6b:c3:32:e6:80:7e:54:e5:0f:69:50:ed:
f0:8b:84:d3:3e:45:33:a0:97:21:77:ef:0d:6e:c1:28:79:02:
6d:f0:81:72:23:6d:58:48:81:17:d5:58:5c:e5:31:fd:8a:9c:
d1:fe:62:f2:a4:d6:75:a4:db:70:09:af:7d:4f:0d:8b:29:af:
29:93:de:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:07 2025 by rpki-client