Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: 5ADdnyQhXIr6i7+pV3ucmSUg+hfUpGuL17srlEjO4Ec=
Subject key identifier: 66:46:98:40:BE:45:DD:DA:EC:21:81:9A:92:54:11:13:63:3E:39:3D
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 0198D660D3A36A6B29FF5CD71F0A2A6BB7E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:02:06 +0000
Manifest this update: Sat 23 Aug 2025 10:02:06 +0000
Manifest next update: Sun 24 Aug 2025 10:02:06 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: 5c2MCxQyGiCp7gj2LzriFvlh27G5Jmhlc5L2wHxq5Z4=)
2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=)
3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:d3:a3:6a:6b:29:ff:5c:d7:1f:0a:2a:6b:b7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Aug 23 10:02:06 2025 GMT
Not After : Aug 24 10:02:06 2025 GMT
Subject: CN=66469840be45dddaec21819a92541113633e393d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:a0:14:39:79:69:a8:cc:5e:31:63:23:d8:
3e:ed:88:31:5c:9c:d5:0a:c1:f5:d7:fd:f7:b2:32:
8e:47:56:e5:30:c2:e7:34:6b:c4:5d:21:c0:4e:f4:
1e:37:a0:66:eb:04:0f:87:cd:1a:b0:7e:b8:d8:ef:
8c:01:46:c6:f8:ca:22:89:1b:a8:9e:e5:83:f8:28:
f2:b4:4a:03:32:57:84:4c:21:23:3e:bb:5a:27:f9:
f1:f9:9d:57:37:5d:cd:2f:9f:57:15:c0:b9:6c:f0:
4a:86:8f:2a:89:14:99:53:4e:cf:c2:c8:c1:eb:ed:
fc:3f:de:e9:fd:64:1d:37:15:03:38:20:5f:e4:c8:
80:89:45:a4:2f:03:f7:70:7d:1d:23:08:7f:18:25:
1b:6c:bd:3e:ca:e1:a2:b5:74:4f:bb:7d:fb:1c:7b:
5e:01:b0:f0:e9:96:ff:ee:fa:a3:0a:20:c9:0b:b4:
06:20:7c:8c:e5:f5:d8:3f:d6:61:7f:b7:4c:c1:47:
b2:ed:17:14:b6:be:c4:ef:b2:fa:7d:5b:03:de:e3:
92:53:fb:ac:16:91:82:6e:42:5f:73:d1:d2:79:46:
18:4c:82:90:8c:bb:7e:65:54:73:14:9a:23:41:6b:
62:0e:f2:e9:c0:45:7a:fc:79:8e:97:52:68:26:ed:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:46:98:40:BE:45:DD:DA:EC:21:81:9A:92:54:11:13:63:3E:39:3D
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e8:30:64:0e:96:6f:65:9d:0d:ba:a8:88:6f:60:bb:ee:b2:
2c:c9:79:ca:48:d6:1e:7d:d5:e0:06:e6:3b:53:36:99:0b:34:
12:f4:8d:f5:a4:1e:fc:05:d0:1a:ee:d8:fe:de:be:2b:dd:57:
b4:f9:ff:19:96:4b:d2:5e:ee:bd:90:f1:61:f4:35:0f:f7:7c:
38:e2:80:a8:8b:47:7f:d6:58:4a:2e:82:b7:dc:82:1b:49:f2:
41:3b:0c:d4:75:9e:44:83:a7:d3:20:b2:df:07:ff:0c:e3:2c:
9d:35:bd:84:8c:4c:db:1e:d4:9c:7b:4a:d9:1f:c6:65:04:02:
75:97:b8:58:a9:51:f6:75:fd:22:81:a6:8d:7d:75:6b:b9:75:
2a:e0:88:95:55:37:57:8f:e9:44:88:91:c8:37:fb:2f:5f:a7:
b2:06:f6:1e:f8:a3:da:a1:96:d7:4c:e5:8d:2e:a8:e7:fe:31:
9f:af:03:7f:4b:47:74:7d:36:3f:74:98:1a:9d:2f:54:94:d3:
a8:21:83:0e:d4:31:a0:e7:05:83:9f:d4:be:e9:23:29:88:0f:
0e:ad:80:9d:94:cf:e0:a5:ba:41:3e:cd:ec:48:a5:52:5c:ea:
c3:4e:5b:2c:37:6e:a5:65:05:b7:a1:cc:03:26:81:78:d0:11:
92:78:c9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:26 2025 by rpki-client