Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: aXClMc55u1mXL8hz5EA9KE6f8FsQStjAQvJsqt45lVA=
Subject key identifier: 94:F1:5B:7E:06:DD:12:18:B6:17:38:AF:4F:F4:1F:D7:6C:29:C2:B4
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 0198D660D12CE84F174457CDCA3F6E76F3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 0510
Signing time: Sat 23 Aug 2025 10:02:05 +0000
Manifest this update: Sat 23 Aug 2025 10:02:05 +0000
Manifest next update: Sun 24 Aug 2025 10:02:05 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: F3TuIsm2SUGXAra/ZINdWc+XyF7n40E8fg8nErrK4z8=)
2: ihNwlKbuNiGlnJM8yFd2Nxrvaqo.roa (hash: auV56nH817P5x20E5reCmB5GZHUds7d7BudXxN/HlG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:d1:2c:e8:4f:17:44:57:cd:ca:3f:6e:76:f3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Aug 23 10:02:05 2025 GMT
Not After : Aug 24 10:02:05 2025 GMT
Subject: CN=94f15b7e06dd1218b61738af4ff41fd76c29c2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:4b:f4:f5:44:a1:e8:0d:3a:92:cb:1e:e1:
71:0d:23:1e:7e:6d:a3:0f:f0:eb:ef:4c:a5:f0:3a:
85:5c:91:76:5e:f9:11:b8:38:37:6c:4c:2b:37:2a:
de:89:9f:31:0b:3c:4c:bf:92:6b:18:9d:14:3f:69:
3f:08:71:06:02:73:ab:c0:94:f0:8d:88:62:55:09:
69:da:79:61:ba:15:ca:b3:68:f4:81:54:f0:0c:df:
3f:37:1c:bf:cd:e2:ec:d4:53:b1:0d:56:68:c0:42:
4e:75:ce:f1:60:6c:e6:b6:9a:c0:7b:a7:30:87:5f:
e7:03:a9:11:d2:91:1d:dd:fc:0d:3b:ab:57:67:92:
5f:ae:a0:4a:e5:1e:fe:70:f8:2d:2a:38:2d:f0:08:
58:32:87:ae:88:73:94:ec:6b:7d:ed:01:67:2a:cb:
f2:08:23:82:9b:fa:f4:60:5e:7c:14:48:04:0e:5a:
ec:73:0d:23:c6:dc:c5:63:78:d8:1b:f0:93:65:40:
6b:16:22:3c:a1:7c:0e:d3:fa:b3:30:6b:89:58:b9:
01:42:cb:22:6d:1c:60:37:43:06:cb:a0:1b:15:73:
c2:88:2a:57:1c:fc:f6:3e:33:76:31:24:ad:2b:15:
3b:21:9a:70:83:5a:79:b7:55:09:ac:ed:f3:27:79:
13:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F1:5B:7E:06:DD:12:18:B6:17:38:AF:4F:F4:1F:D7:6C:29:C2:B4
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c6:da:66:bc:34:36:61:74:cd:73:6b:b2:65:ab:ee:9c:c8:
45:30:86:4b:e7:7f:b1:e6:a4:31:81:ab:0b:cb:2d:d1:f5:d8:
b8:6c:6e:18:a8:86:2f:7b:dc:c1:2e:d7:26:45:4e:88:86:f2:
04:95:37:ac:1e:3a:cb:ab:d7:1e:6e:7d:40:ba:3c:34:bd:8a:
ad:f5:4d:22:3b:2d:3c:62:11:fe:42:bd:49:b7:40:cf:6a:6f:
4a:84:4b:37:44:34:6d:be:97:6f:53:53:09:f2:1b:d4:f6:76:
de:fc:c8:64:61:ee:35:04:66:35:89:a6:d5:9e:82:e4:2b:0b:
ba:d5:5d:18:cd:e1:5b:52:6c:c2:5b:78:ef:ac:03:d8:1a:8b:
3c:f2:ea:60:f9:f1:02:a7:99:ac:77:f3:01:1e:7d:2e:8a:00:
8f:cf:7d:a2:86:3e:8c:4f:a7:d2:07:14:f6:f4:b5:6d:c0:2f:
71:15:8b:49:53:50:b7:0d:37:8e:d7:cc:be:00:90:8b:64:b3:
18:9f:93:12:f8:3e:74:b6:44:64:92:79:b8:3d:2b:0b:57:e7:
3a:47:cc:3e:24:5c:00:22:9f:3e:21:f7:19:5d:fb:f8:77:4d:
bc:93:e6:27:e6:77:c4:73:02:28:e0:7d:1f:98:0a:f3:a2:8e:
ff:bf:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:16 2025 by rpki-client