Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier: tHZawq28ZfTyzyYYIjHf0MSBz/aMw1jGmUV0e0tvuFU=
Subject key identifier: EE:6A:21:8C:4E:63:02:98:85:F4:64:24:D9:60:7B:AB:83:55:68:86
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial: 0199FCC62BFB7DB1A743B50CA2AF87CB41CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number: 0538
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: 5EWBzdepm8m1-Fw5ggkBVnYeo3Q.roa (hash: VXD9eDnJ0GXpX+c0YUcqrxEzhI7okMcsDXHvru13uGI=)
2: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: hdOBLMGjlY2lHJSXnhzUS/rBw/dnDz0IO3Z6/CTR7Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2b:fb:7d:b1:a7:43:b5:0c:a2:af:87:cb:41:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=ee6a218c4e63029885f46424d9607bab83556886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:e7:48:5e:fe:31:29:61:27:12:66:42:3f:
88:15:b0:ed:27:bf:42:22:92:d0:cb:e3:27:a5:c3:
46:c5:83:d4:ea:c7:81:09:76:77:5f:1b:dd:0a:bf:
b1:d2:4e:28:0c:92:a5:0c:88:da:d2:4e:9a:d5:8e:
fa:60:e9:5c:99:84:22:df:f9:05:a3:50:31:c0:ba:
6d:e8:ef:b8:47:1c:c4:2c:a0:6d:be:da:b5:bb:6d:
16:8d:84:d0:f9:dc:39:90:32:52:79:57:ab:28:ab:
c5:af:bc:a4:ef:35:49:1e:8c:a8:bc:5c:ef:f6:d5:
bc:54:74:b6:b6:32:eb:ef:40:84:44:2d:c9:61:99:
f0:fd:e1:55:08:13:42:95:84:85:d2:af:3c:99:b8:
2b:dc:72:82:65:49:3d:96:65:02:54:26:b8:fa:f6:
5a:8c:a5:26:89:46:74:29:8a:03:96:f2:14:e2:20:
13:6f:ab:43:79:b2:9a:d5:02:ea:25:3a:63:30:23:
a0:16:3d:3c:bd:64:eb:1d:9d:99:4e:e0:b0:18:e8:
b5:f9:f9:3f:49:74:12:2d:0b:b0:82:20:37:01:3f:
54:03:d4:c7:b0:44:8b:d2:a7:c1:0a:ce:e4:1c:b6:
27:0a:5c:22:e1:e3:c2:81:4d:40:ed:df:33:b7:31:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6A:21:8C:4E:63:02:98:85:F4:64:24:D9:60:7B:AB:83:55:68:86
X509v3 Authority Key Identifier:
keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:67:16:e5:a9:b9:6f:5e:48:f9:67:53:d5:8b:53:df:0d:e4:
89:7f:60:ce:40:ac:f0:d4:b7:2f:bc:b9:45:11:a2:90:7f:17:
44:00:a2:4b:7a:2f:ef:65:a0:40:d4:c9:e5:ca:d6:12:b9:4d:
86:f9:85:84:49:1c:00:a8:b0:94:69:6c:c8:45:80:05:d8:fa:
0c:88:a0:1f:ad:96:41:2d:88:b7:40:e7:b0:bc:2a:e0:3f:07:
1b:73:21:5e:93:fd:6c:57:bf:37:f8:20:c4:9e:73:bc:5d:c6:
cc:77:77:07:c8:dc:19:e8:41:4f:54:f5:5f:2c:10:36:71:50:
95:0d:95:df:14:81:cc:08:0e:5b:15:20:e0:20:54:66:76:e6:
e0:3e:3b:4e:46:55:a5:39:24:e3:47:1f:ee:f4:89:3a:77:59:
2b:d7:b5:18:04:20:63:90:8b:93:47:5a:0d:f5:b2:82:19:65:
42:d3:19:ff:52:d4:00:84:ee:84:91:0b:c9:49:06:91:00:29:
0f:a2:db:f3:6e:26:3e:77:5e:fc:90:2b:ed:62:72:49:04:fc:
dc:f1:1e:4d:90:73:8b:6e:b4:4f:04:f2:6d:92:18:97:3a:99:
58:cd:7b:51:f8:24:fe:4f:4a:1e:e8:86:45:a0:56:15:a7:e0:
31:22:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:17 2025 by rpki-client