
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File: 87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier: VWotlRBxrMRMGNKSYIpUtJ0iU0hJ+AXrxOc8QwZIfdI=
Subject key identifier: 8C:E5:FC:33:A7:9A:07:3B:D9:93:30:7E:57:D3:63:72:08:26:04:86
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 0198D5F1561B50570D1EFEEC3CA0058444F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number: 0F7E
Signing time: Sat 23 Aug 2025 08:00:19 +0000
Manifest this update: Sat 23 Aug 2025 08:00:19 +0000
Manifest next update: Sun 24 Aug 2025 08:00:19 +0000
Files and hashes: 1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: UD5S7DZ/gwc4VOsY/y0vDfdbSV3TQ4jKwmwBUX33FIQ=)
2: 8LQo-NmzGy5l2r5NZYIeKNdXs14.roa (hash: ilvAF3/ySzxVBGtuDQdjN+a1IHb253ip3G4kBn3IpkA=)
3: 8s7vHKE6FBZYlH7mxDn7_1ykPk4.roa (hash: fgNyBR69p7xJvQXl06eoPq2tjnGBemgh7E+PjbLx9mo=)
4: Lq77aAwST8RILyM-oL6rNeFnjCE.roa (hash: Loe+ahaVydEMf0Ago+iaNs6AzxcPRts/E2zKD5WoQYs=)
5: ZoIewHefhjHP2Vd9cNeP-TAR-vM.roa (hash: IG+hitjDPUIZMjcFs/DHXrxqndBqaN9wlOddbrMn1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:56:1b:50:57:0d:1e:fe:ec:3c:a0:05:84:44:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Aug 23 08:00:19 2025 GMT
Not After : Aug 24 08:00:19 2025 GMT
Subject: CN=8ce5fc33a79a073bd993307e57d3637208260486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:0c:3a:19:94:8e:72:eb:29:32:58:29:45:
19:08:b7:68:a6:e4:65:be:8f:80:77:58:1f:a1:79:
cd:cb:a7:74:9b:4a:df:f7:49:c8:2a:a3:e4:fa:b4:
07:02:d0:73:5b:a3:dc:7b:de:1f:54:7b:87:32:a9:
45:a1:73:3a:e9:dd:57:d2:73:9c:aa:4d:41:cd:b6:
7c:81:be:01:1d:2d:ae:57:d7:70:1c:f5:14:26:19:
85:20:3f:ce:f8:f3:bc:33:21:6c:43:ed:84:b7:f3:
43:ed:1d:21:6c:86:f5:f5:0e:f9:84:fd:a4:8e:fa:
d4:36:85:2d:81:97:91:14:0c:e3:52:29:77:86:89:
ed:df:89:5b:7a:c1:8b:ec:14:33:66:82:0e:c1:40:
94:7b:36:3b:da:37:cf:7e:7c:b5:6f:cd:93:35:83:
5e:f5:cf:d4:81:94:93:80:ee:25:a5:40:48:76:8a:
2e:03:8f:70:92:3b:22:3c:e1:e0:6c:ae:6f:da:24:
f6:42:34:ad:ae:36:a9:f7:0b:23:e3:88:87:86:6c:
95:24:14:17:d8:ae:49:30:58:b6:67:7b:8c:f1:b1:
15:a9:88:b8:25:ee:61:f8:61:6e:bb:8b:82:e9:1f:
53:a6:c2:1e:e7:0e:dc:93:b4:9f:b9:e6:59:00:4c:
07:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E5:FC:33:A7:9A:07:3B:D9:93:30:7E:57:D3:63:72:08:26:04:86
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:21:0c:dd:43:73:ac:36:d6:82:b4:9a:f7:28:2a:31:60:08:
78:52:43:40:0d:b2:8d:78:9f:3c:2e:00:a1:42:7c:36:aa:a3:
cc:5f:fe:1a:b3:4e:c4:72:70:28:1d:07:64:96:82:ec:28:bd:
bc:ab:a3:5e:f7:a7:16:cc:0f:31:3a:ab:29:19:c5:05:1b:fe:
cf:7a:41:fd:55:c3:5a:20:0b:fa:c4:9e:75:a2:0a:e4:f6:d8:
e0:be:7f:50:3a:3f:fe:55:dc:16:0f:b1:5e:6d:36:8e:3a:22:
be:7a:27:ca:d8:67:89:20:ad:c8:b3:8c:b6:8b:13:6e:0e:2c:
d6:fb:75:80:48:53:e1:0c:a2:66:14:0f:2f:5c:d9:c2:da:70:
7b:e7:0f:0d:30:a2:5d:89:7a:6e:4d:9a:a8:1d:30:35:52:f5:
ed:6f:06:f5:2a:ea:39:b8:e6:cb:22:e4:b8:92:df:4b:7c:9e:
16:09:f4:df:24:25:a4:0e:75:98:9b:b3:02:46:2a:76:cf:dc:
08:99:37:1d:0b:b0:d2:f2:36:a6:33:b7:52:c7:b1:2a:46:ad:
51:e2:70:d0:7e:e4:9a:73:38:7a:e7:79:74:15:85:fb:a0:fe:
86:f7:61:84:50:19:ef:a7:a5:aa:0a:b7:b0:17:09:b3:a0:a4:
f0:b1:98:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8VYbUFcNHv7sPKAFhETxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjI4MDVkODc3NmVlZGViN2FhNGNiZTVhZjU2OGNkYjI2
MjlmYzIwHhcNMjUwODIzMDgwMDE5WhcNMjUwODI0MDgwMDE5WjAzMTEwLwYDVQQD
Eyg4Y2U1ZmMzM2E3OWEwNzNiZDk5MzMwN2U1N2QzNjM3MjA4MjYwNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFEMOhmUjnLrKTJYKUUZCLdopuRl
vo+Ad1gfoXnNy6d0m0rf90nIKqPk+rQHAtBzW6Pce94fVHuHMqlFoXM66d1X0nOc
qk1BzbZ8gb4BHS2uV9dwHPUUJhmFID/O+PO8MyFsQ+2Et/ND7R0hbIb19Q75hP2k
jvrUNoUtgZeRFAzjUil3hont34lbesGL7BQzZoIOwUCUezY72jfPfny1b82TNYNe
9c/UgZSTgO4lpUBIdoouA49wkjsiPOHgbK5v2iT2QjStrjap9wsj44iHhmyVJBQX
2K5JMFi2Z3uM8bEVqYi4Je5h+GFuu4uC6R9TpsIe5w7ck7SfueZZAEwHkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzl/DOnmgc72ZMwflfTY3IIJgSGMB8GA1UdIwQY
MBaAFPOygF2Hdu7et6pMvlr1aM2yYp/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgt
ODNiYzc5NzI3OGUyLzEvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgtODNiYzc5NzI3OGUy
LzEvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiEM3UNz
rDbWgrSa9ygqMWAIeFJDQA2yjXifPC4AoUJ8NqqjzF/+GrNOxHJwKB0HZJaC7Ci9
vKujXvenFswPMTqrKRnFBRv+z3pB/VXDWiAL+sSedaIK5PbY4L5/UDo//lXcFg+x
Xm02jjoivnonythniSCtyLOMtosTbg4s1vt1gEhT4QyiZhQPL1zZwtpwe+cPDTCi
XYl6bk2aqB0wNVL17W8G9SrqObjmyyLkuJLfS3yeFgn03yQlpA51mJuzAkYqds/c
CJk3HQuw0vI2pjO3UsexKkatUeJw0H7kmnM4eud5dBWF+6D+hvdhhFAZ76elqgq3
sBcJs6Ck8LGYoQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:53 2025 by rpki-client