Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json)
Hash identifier: ZVD2RZulNped7AtzPsTHPVABsze24Bah6RffWUl+YMg=
Subject key identifier: 6E:E1:2C:64:1C:B9:9D:AD:B0:E1:37:84:94:D8:A1:2F:A3:97:3B:93
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial: 0199FC59091912ED10BC0883B858A4DDB4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 12:01:57 +0000
Manifest this update: Sun 19 Oct 2025 12:01:57 +0000
Manifest next update: Mon 20 Oct 2025 12:01:57 +0000
Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=)
2: 4kfMtLYb8t9NTo-YJ69UVZNvndE.roa (hash: mU2QRRVA7Ec6TMwp/iR1nKH5zbtHggkJvnoHoV9eFuY=)
3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: 49Bsw6in7L2Ite4oyrvn2shsosUDyFLjOV4caqzYsO0=)
4: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=)
5: cWqhhGQ2nwF4u5SVS7GOVj8_H8Q.roa (hash: tE3zP2hfr/4EiGnnKAeQTDpDnqcSls7BckOuw6iyYdQ=)
6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=)
7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=)
8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=)
9: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:09:19:12:ed:10:bc:08:83:b8:58:a4:dd:b4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Validity
Not Before: Oct 19 12:01:57 2025 GMT
Not After : Oct 20 12:01:57 2025 GMT
Subject: CN=6ee12c641cb99dadb0e1378494d8a12fa3973b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:ed:76:d8:51:b3:d5:7b:10:4e:06:bd:6f:
c4:63:0d:2f:37:b2:31:24:be:82:2f:63:52:e1:14:
34:3c:c0:76:89:18:55:80:18:bb:6b:7d:f5:4b:f9:
87:12:77:b7:17:6f:c6:0e:7a:27:b3:5d:85:96:ba:
8c:6d:9f:4a:10:72:e9:a9:63:7c:d0:57:9e:10:a2:
f4:7c:a4:5c:4e:b8:bc:d9:48:4a:1f:df:44:6d:a2:
35:bc:53:63:38:33:88:76:3a:31:6b:79:45:59:ac:
07:1d:aa:1d:6a:3f:9c:7a:55:e4:7f:6b:e6:0b:74:
3e:b5:0c:56:6a:51:71:ce:5e:ce:c2:0c:9f:ac:ea:
9f:89:8f:46:dd:bd:f4:1a:2c:8a:2c:ba:54:27:b2:
41:4e:6b:28:34:49:ac:08:89:50:cc:a8:d0:a0:5f:
f8:34:b0:5f:9a:07:bb:cc:db:54:d4:13:3a:ce:55:
fc:a6:b2:ed:58:22:17:79:a5:93:81:36:06:37:89:
80:40:2f:7b:f6:8d:ec:28:58:8d:5e:4b:d3:66:59:
08:8a:3e:1d:c7:3b:30:f1:c7:a0:05:9a:dd:94:08:
61:23:17:e7:fe:be:f9:38:5b:9a:d0:05:f3:2c:75:
5e:c6:94:2d:e2:a2:82:93:cf:08:f3:0b:ac:eb:67:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E1:2C:64:1C:B9:9D:AD:B0:E1:37:84:94:D8:A1:2F:A3:97:3B:93
X509v3 Authority Key Identifier:
keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6e:5d:63:55:17:af:bf:35:21:40:28:db:20:aa:60:33:0b:
cf:9b:74:84:37:ed:b8:00:c9:9e:12:89:04:e2:78:ba:9b:0d:
20:dc:22:83:7b:31:0d:46:05:78:11:85:a9:9a:45:f4:4b:2e:
d4:b2:08:9b:ef:2b:85:4e:ca:15:f9:87:38:ec:5b:7c:8c:7a:
a5:50:ca:cc:2e:5f:19:fd:1f:28:89:2f:63:21:6a:8e:29:b5:
5a:30:50:b6:42:86:60:c9:c4:77:44:4a:38:6d:78:7b:f1:c1:
3c:8e:e4:41:a3:e2:7d:20:14:c7:b3:46:55:4c:94:a3:7f:cb:
59:87:20:0a:de:c6:43:f6:aa:3b:b6:36:20:31:7e:fa:5e:5d:
58:2e:e6:49:a8:84:59:8b:eb:8b:51:a0:89:42:ff:ba:67:aa:
2c:90:4d:b9:e6:5a:ba:cf:99:32:f9:7f:10:19:0b:b6:3f:ca:
85:68:0d:5e:39:88:af:d0:20:8b:bb:b2:68:c4:91:f2:3f:01:
fa:5d:19:26:51:d3:a9:89:c6:a2:b5:f0:b9:85:e3:29:5a:b9:
eb:78:7c:07:37:20:33:09:f0:af:99:7e:85:79:e7:33:4c:b4:
fa:a1:93:15:db:9b:b6:10:18:17:63:f1:cb:7a:b7:30:cc:30:
75:75:f5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:33 2025 by rpki-client