Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
File: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft (raw, json)
Hash identifier: eQmQanrdJSRGfM5DxVN44ULaZKnGan7+D7kVG2YkoTw=
Subject key identifier: B6:25:B4:63:16:31:B6:AF:51:9A:95:A3:13:8D:53:E5:55:1C:2A:A0
Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
Certificate issuer: /CN=f37063a85445019ab845a5b7e54395cdd39927f6
Certificate serial: 0199FC58D5F4192A2B0186DB3DF465A2CC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
Manifest number: 121C
Signing time: Sun 19 Oct 2025 12:01:44 +0000
Manifest this update: Sun 19 Oct 2025 12:01:44 +0000
Manifest next update: Mon 20 Oct 2025 12:01:44 +0000
Files and hashes: 1: 55zACBEV4ZrkKgA_PfqKETWoChA.roa (hash: B0R4BgAeGvCI3HMcrqcW5pltBvObBUfBObcQdCL+Wog=)
2: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl (hash: pbCOH/7eHreJqwCSTU1UWi3d6aoRM3/4Qr1gWYs48vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d5:f4:19:2a:2b:01:86:db:3d:f4:65:a2:cc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6
Validity
Not Before: Oct 19 12:01:44 2025 GMT
Not After : Oct 20 12:01:44 2025 GMT
Subject: CN=b625b4631631b6af519a95a3138d53e5551c2aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:a2:fb:aa:12:46:10:bb:07:24:71:0e:45:
77:9c:60:a1:a1:ae:60:b4:5e:ae:74:1b:c6:78:5b:
2c:f5:41:0b:d4:ac:f0:15:da:8d:0a:eb:93:d7:50:
17:57:c1:aa:98:56:1a:a6:40:98:bc:5e:d9:3b:f4:
4c:dd:29:d0:e9:16:25:32:ca:10:23:e1:d7:88:22:
1a:5f:ec:59:dc:e6:af:6c:b9:7f:15:17:93:b4:99:
74:97:fa:aa:bf:ba:13:29:63:2d:c2:99:e9:cb:53:
71:73:6f:b5:44:89:de:18:a5:23:25:58:87:a6:97:
e4:42:ba:21:e1:00:b0:99:a6:e6:bb:a1:50:a3:db:
c1:fa:02:5a:55:75:44:62:2a:ac:fc:46:0b:db:d1:
8d:86:35:0d:9a:c9:ec:f2:bb:b9:49:a6:b0:35:a7:
f1:59:f3:50:31:81:27:8b:87:22:86:b1:b5:09:f1:
a3:a6:07:ab:8c:82:cd:60:5c:6e:a5:d9:69:88:cf:
25:e9:e9:97:4a:da:9e:c1:45:47:20:3c:af:8a:2f:
87:24:b4:46:9f:62:b7:0b:74:fe:d5:f8:29:fc:29:
b0:c1:b3:58:b2:91:48:74:61:4d:4b:63:af:6d:78:
2e:8b:5d:f4:fc:c7:09:7b:8a:62:e3:06:da:4c:7f:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:25:B4:63:16:31:B6:AF:51:9A:95:A3:13:8D:53:E5:55:1C:2A:A0
X509v3 Authority Key Identifier:
keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:81:dc:68:0c:1c:29:ec:98:33:cb:55:6b:b9:96:34:80:e5:
61:ff:86:f1:66:51:af:fb:88:04:df:ab:f8:0f:8f:21:88:28:
d0:ec:18:d9:2b:87:81:35:e7:8b:1c:3a:26:e6:ba:02:a4:af:
2e:0c:db:82:16:43:18:68:11:f4:00:f8:ea:76:5d:d4:3e:05:
10:13:f4:eb:52:27:79:a0:af:42:79:a0:98:f8:fc:ba:70:9f:
12:14:bf:0d:23:d9:36:ad:98:69:8c:84:8a:ea:6e:4f:f3:4b:
0d:d3:4d:aa:a5:92:d0:1a:d9:45:8a:64:f3:29:90:59:ed:84:
82:9e:1a:8a:05:21:0c:0f:b3:c0:62:1d:66:78:4a:8b:62:4c:
9c:27:91:0b:31:38:c6:78:ef:fa:cb:af:84:be:72:41:06:6c:
6f:8d:7b:8b:ae:6e:85:0f:49:b7:a5:13:0b:ff:68:b3:c3:f5:
68:08:6a:18:bd:3f:41:85:25:32:55:cb:f4:18:34:28:c8:be:
ce:1b:e3:b9:e7:a2:11:df:a7:22:9d:75:34:12:86:d2:07:54:
ee:3a:a7:63:5f:7c:fa:37:38:d0:cb:be:f9:59:74:55:de:b3:
1e:49:2e:a7:fb:e6:05:c2:91:9e:c4:39:21:ea:16:31:74:a3:
17:aa:27:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WNX0GSorAYbbPfRlosw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNzA2M2E4NTQ0NTAxOWFiODQ1YTViN2U1NDM5NWNkZDM5
OTI3ZjYwHhcNMjUxMDE5MTIwMTQ0WhcNMjUxMDIwMTIwMTQ0WjAzMTEwLwYDVQQD
EyhiNjI1YjQ2MzE2MzFiNmFmNTE5YTk1YTMxMzhkNTNlNTU1MWMyYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8qi+6oSRhC7ByRxDkV3nGChoa5g
tF6udBvGeFss9UEL1KzwFdqNCuuT11AXV8GqmFYapkCYvF7ZO/RM3SnQ6RYlMsoQ
I+HXiCIaX+xZ3OavbLl/FReTtJl0l/qqv7oTKWMtwpnpy1Nxc2+1RIneGKUjJViH
ppfkQroh4QCwmabmu6FQo9vB+gJaVXVEYiqs/EYL29GNhjUNmsns8ru5SaawNafx
WfNQMYEni4cihrG1CfGjpgerjILNYFxupdlpiM8l6emXStqewUVHIDyvii+HJLRG
n2K3C3T+1fgp/CmwwbNYspFIdGFNS2OvbXgui130/McJe4pi4wbaTH+9GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYltGMWMbavUZqVoxONU+VVHCqgMB8GA1UdIwQY
MBaAFPNwY6hURQGauEWlt+VDlc3TmSf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODNCanFGUkZBWnE0UmFXMzVVT1Z6ZE9aSl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yMjBjZTQtMTFhMy00ZDkyLWE0ODgt
YzM5NDdlNzZiZTc1LzEvODNCanFGUkZBWnE0UmFXMzVVT1Z6ZE9aSl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8yMjBjZTQtMTFhMy00ZDkyLWE0ODgtYzM5NDdlNzZiZTc1
LzEvODNCanFGUkZBWnE0UmFXMzVVT1Z6ZE9aSl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYHcaAwc
KeyYM8tVa7mWNIDlYf+G8WZRr/uIBN+r+A+PIYgo0OwY2SuHgTXnixw6Jua6AqSv
LgzbghZDGGgR9AD46nZd1D4FEBP061IneaCvQnmgmPj8unCfEhS/DSPZNq2YaYyE
iupuT/NLDdNNqqWS0BrZRYpk8ymQWe2Egp4aigUhDA+zwGIdZnhKi2JMnCeRCzE4
xnjv+suvhL5yQQZsb417i65uhQ9Jt6UTC/9os8P1aAhqGL0/QYUlMlXL9Bg0KMi+
zhvjueeiEd+nIp11NBKG0gdU7jqnY198+jc40Mu++Vl0Vd6zHkkup/vmBcKRnsQ5
IeoWMXSjF6onMw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:33 2025 by rpki-client