Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File: 86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier: /vd7G1PgoeP8QT1Vw09us3ZfuAGvBU8D9WOnHr2Vs2g=
Subject key identifier: B9:0B:CA:EE:F0:E8:47:3B:33:04:6B:53:55:2A:84:7C:FC:34:54:5C
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial: 0198D4E00FC64DD9BF4B303528E4212F1061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:01:50 +0000
Manifest this update: Sat 23 Aug 2025 03:01:50 +0000
Manifest next update: Sun 24 Aug 2025 03:01:50 +0000
Files and hashes: 1: 0yNiuwlEmaGi-GMVCrhtb0jD684.roa (hash: 0JYmDVSwa/kA2DCdsSlQFjDnGZq4KcJ5IykJE11qOfk=)
2: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: 41w/Goxdt/WKnRCZ27QPS16G6QZq+3sH8L0OL0Ps3VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0f:c6:4d:d9:bf:4b:30:35:28:e4:21:2f:10:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Validity
Not Before: Aug 23 03:01:50 2025 GMT
Not After : Aug 24 03:01:50 2025 GMT
Subject: CN=b90bcaeef0e8473b33046b53552a847cfc34545c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:69:a3:55:cd:ba:f6:a9:58:88:74:36:9d:
04:c2:4e:a3:0d:fb:eb:f5:5d:4e:56:66:1b:95:b0:
2b:86:ca:e8:12:7e:d1:be:20:1d:57:ab:cd:a0:b1:
78:36:52:0a:b2:1c:22:db:1d:d1:86:5a:f8:50:7e:
59:b2:78:74:70:df:6f:8f:8a:88:8a:bb:bb:ed:f6:
e1:d4:44:76:34:6f:bd:a9:67:3b:49:e0:06:25:47:
37:31:c0:39:1c:85:29:60:6b:29:c2:5a:d0:a6:48:
4c:0f:b1:1f:bd:13:a6:42:ea:e0:9a:b1:72:7c:d1:
5c:16:e7:1d:6a:7c:4e:d5:9b:f4:1c:e8:16:eb:7e:
ea:07:e8:3f:8a:f7:9b:f5:0e:cd:66:d5:1b:a7:64:
94:fd:08:f3:4e:80:c1:2c:e0:c5:5a:79:61:17:8c:
47:6b:ec:29:2f:af:26:2d:9a:9b:7f:40:5b:4a:fa:
8a:1f:1b:17:17:c7:e0:71:4a:26:72:11:a5:8a:c8:
41:a6:b1:89:75:5c:19:99:9c:5b:ca:77:01:70:fc:
e3:b3:f6:20:67:30:18:07:b0:45:07:fc:e0:a5:9b:
69:df:48:45:90:58:47:30:40:fe:7b:78:1e:00:92:
3b:de:3a:27:3c:fe:4e:05:d1:b2:30:fd:27:04:1f:
f8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0B:CA:EE:F0:E8:47:3B:33:04:6B:53:55:2A:84:7C:FC:34:54:5C
X509v3 Authority Key Identifier:
keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c4:f7:a0:1e:94:fb:83:9b:35:ad:a8:a2:f5:d0:b0:54:a7:
79:53:8f:50:64:c1:2a:ce:6c:f8:b2:f1:b9:f6:a3:17:68:ff:
16:e7:20:e7:5c:cf:b3:2e:02:ad:93:f0:9d:7a:89:93:c8:59:
f8:13:de:48:e5:5c:45:be:d6:4d:45:10:fe:1d:f0:7d:45:11:
bc:51:e8:5b:81:ce:be:af:25:c7:06:48:a5:a1:70:bf:f9:87:
90:11:e2:b7:24:bd:bc:9c:cc:0f:29:7e:fa:57:28:9d:ab:b7:
77:d0:7c:72:a5:1c:3e:76:a3:3f:ff:87:e5:0f:c7:dc:e4:64:
84:45:40:3f:5f:62:5e:50:5d:33:57:93:08:7e:f1:f5:dc:d2:
aa:4b:eb:6f:68:d5:aa:79:aa:d7:9b:d9:cf:c4:da:3c:d0:5c:
35:2d:7f:42:e6:4f:de:55:dc:8d:55:8c:0a:7b:28:79:04:43:
7c:1c:b5:87:57:3d:00:de:59:5d:88:69:43:91:64:55:2f:ca:
cd:89:30:7d:50:9f:64:97:a1:e5:3a:33:fd:89:ea:3a:19:dd:
d4:29:7c:68:e5:6b:4e:e2:6f:66:63:74:82:fd:18:e7:1d:e1:
28:22:9b:f8:48:a1:de:26:12:27:44:5c:21:9b:8f:b5:98:d9:
f2:60:5e:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4A/GTdm/SzA1KOQhLxBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTFhZTBiMDdjZDA1ZWUyNDg0ZjRlZWJjZDQ1Njg0NzM0
NzM0MTQwHhcNMjUwODIzMDMwMTUwWhcNMjUwODI0MDMwMTUwWjAzMTEwLwYDVQQD
EyhiOTBiY2FlZWYwZTg0NzNiMzMwNDZiNTM1NTJhODQ3Y2ZjMzQ1NDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui5po1XNuvapWIh0Np0Ewk6jDfvr
9V1OVmYblbArhsroEn7RviAdV6vNoLF4NlIKshwi2x3Rhlr4UH5Zsnh0cN9vj4qI
iru77fbh1ER2NG+9qWc7SeAGJUc3McA5HIUpYGspwlrQpkhMD7EfvROmQurgmrFy
fNFcFucdanxO1Zv0HOgW637qB+g/iveb9Q7NZtUbp2SU/QjzToDBLODFWnlhF4xH
a+wpL68mLZqbf0BbSvqKHxsXF8fgcUomchGlishBprGJdVwZmZxbyncBcPzjs/Yg
ZzAYB7BFB/zgpZtp30hFkFhHMED+e3geAJI73jonPP5OBdGyMP0nBB/4cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkLyu7w6Ec7MwRrU1UqhHz8NFRcMB8GA1UdIwQY
MBaAFPOhrgsHzQXuJIT07rzUVoRzRzQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2Et
Yjg0NzdmNTA3M2MxLzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2EtYjg0NzdmNTA3M2Mx
LzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8T3oB6U
+4ObNa2oovXQsFSneVOPUGTBKs5s+LLxufajF2j/Fucg51zPsy4CrZPwnXqJk8hZ
+BPeSOVcRb7WTUUQ/h3wfUURvFHoW4HOvq8lxwZIpaFwv/mHkBHityS9vJzMDyl+
+lconau3d9B8cqUcPnajP/+H5Q/H3ORkhEVAP19iXlBdM1eTCH7x9dzSqkvrb2jV
qnmq15vZz8TaPNBcNS1/QuZP3lXcjVWMCnsoeQRDfBy1h1c9AN5ZXYhpQ5FkVS/K
zYkwfVCfZJeh5Toz/YnqOhnd1Cl8aOVrTuJvZmN0gv0Y5x3hKCKb+Eih3iYSJ0Rc
IZuPtZjZ8mBeoA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:10 2025 by rpki-client