Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.mft (raw, json)
Hash identifier: 4uSi9UzoHtxGussHlfb/ZjYOt1B5wPpBW93BjkxajEg=
Subject key identifier: 85:E5:93:FD:19:BD:28:8D:C0:E9:31:1A:EE:4A:35:63:0D:A4:F0:24
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial: 0199FBEAB31E9C685696045C9B7868777F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
Manifest number: 0A8E
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: 82BUCSXbyxoJ-2XzspAD1o8j3ms.crl (hash: m2tSH29mPJeagFML6ZIV+m2H7F9MaFL6MAg4QZETvOQ=)
2: WO4Lx-SRYYsLgDA8d_7YHDSf7BI.roa (hash: nMdj6H5AmHScUq7iFK7ub3BJ0X174BqxH7J5lRBxaFk=)
3: oI7kOSiG8h1OQh9w777ujGQ8d5c.roa (hash: 7bzozQwhPvIcjtgW8D6KNMw02ktIJKUDIRXI6dPZ7uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b3:1e:9c:68:56:96:04:5c:9b:78:68:77:7f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=85e593fd19bd288dc0e9311aee4a35630da4f024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:22:32:ae:e1:41:6f:b4:00:18:b6:20:0d:71:
a1:ee:35:f6:f7:48:bb:ca:6c:1d:be:de:58:0e:16:
b4:d8:81:f5:6d:e8:16:ea:98:1c:21:0c:ee:71:e0:
86:c4:ab:54:3a:c3:cf:b9:00:05:21:75:97:10:75:
3c:8d:09:a6:95:ec:bb:32:05:61:e5:72:97:42:34:
13:5e:04:83:af:f6:db:c5:7b:21:8d:e0:1a:81:83:
93:be:07:4c:e7:2a:ec:f7:3e:b2:fd:ab:04:79:70:
7a:73:b1:97:e1:44:47:4c:ea:8d:ff:5f:68:3e:68:
37:fd:35:11:58:a6:7d:98:81:f9:27:c9:df:f1:27:
d2:42:34:2b:91:27:ca:0f:7d:db:96:c2:97:0d:d2:
88:cf:9b:b7:fb:b8:3e:91:84:13:1a:4c:88:93:b3:
6e:5d:df:97:0f:55:b2:55:21:e5:3f:36:a5:83:e6:
39:1c:7c:46:e7:0b:09:1b:c7:95:e8:3d:eb:9d:6d:
5b:e8:44:f1:6e:58:1d:1b:12:f9:7a:4e:0b:91:4c:
e7:8f:3f:8f:89:6d:4a:e8:00:6e:43:b6:71:4c:ba:
87:6d:b6:f2:9a:af:0c:97:5e:83:49:44:61:d6:77:
86:5e:14:ef:c8:44:c8:9b:fe:89:b4:48:49:2b:14:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E5:93:FD:19:BD:28:8D:C0:E9:31:1A:EE:4A:35:63:0D:A4:F0:24
X509v3 Authority Key Identifier:
keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:91:0c:4a:4d:ec:1c:b9:2b:a7:1b:18:d5:1f:c3:fa:9a:a7:
d1:9b:8d:f0:c3:6e:88:06:0d:54:c0:98:86:22:67:d6:a8:b1:
6b:7f:75:8f:70:37:11:4d:b7:82:9b:03:e0:25:2e:39:9e:4e:
c9:01:cf:55:8c:ec:b1:3a:e5:62:0f:4f:d2:ba:82:b3:d6:ea:
84:14:b0:26:a1:ea:fe:82:4c:fe:aa:db:30:d4:15:fc:e2:2d:
79:c7:83:0a:5b:e4:ea:d7:96:ed:28:2d:f0:64:3f:6e:6e:94:
08:46:b4:9f:4f:fb:2f:54:1a:a8:a9:56:ad:d2:82:f2:d8:db:
27:c0:6c:3d:c9:0b:ae:0c:67:50:45:c8:d7:92:83:f0:25:5e:
25:e6:2b:12:32:9f:f4:9f:64:da:83:48:fb:d5:8f:f8:d3:68:
49:d2:75:de:2b:b7:d9:8d:d0:35:70:0a:fb:ca:0e:9f:55:9b:
ef:05:f0:2b:01:a8:f4:a7:27:79:e5:b4:04:02:70:49:59:fe:
a2:17:59:de:2d:c0:64:00:42:a4:7f:06:b4:d4:ff:68:63:41:
d8:05:b6:e3:58:da:b5:53:f1:76:7a:14:a3:68:30:53:68:4a:
57:b7:e8:40:52:4c:d8:58:97:1b:ef:6a:75:4a:98:f2:87:96:
ce:c0:37:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:40 2025 by rpki-client