Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: MWOupQNVwGpLwIUyqcmLVmURku4I7XVi5nR4O8JgoN8=
Subject key identifier: D9:3D:07:C1:F2:9C:D4:54:74:40:D2:AE:0F:26:78:1D:B1:C4:E2:5E
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 0197D5886F2D2ADD20920F509C088483C031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 15C6
Signing time: Fri 04 Jul 2025 13:02:57 +0000
Manifest this update: Fri 04 Jul 2025 13:02:57 +0000
Manifest next update: Sat 05 Jul 2025 13:02:57 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: cERtTyIj7ohUhi3s4ER/DSfFYs8oCEP3GLwzUD55ITo=)
2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=)
3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:88:6f:2d:2a:dd:20:92:0f:50:9c:08:84:83:c0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Jul 4 13:02:57 2025 GMT
Not After : Jul 5 13:02:57 2025 GMT
Subject: CN=d93d07c1f29cd4547440d2ae0f26781db1c4e25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:cb:ff:83:3d:cb:b1:89:b3:cf:b4:d3:92:
96:bd:69:79:be:fd:7d:60:c3:53:c6:fa:28:ee:e4:
ee:90:ff:97:c0:43:a1:ee:2e:f8:7a:0d:3d:52:ef:
e9:8b:38:25:8d:f2:27:45:94:b4:12:3b:bb:b9:e4:
81:7b:2d:90:2f:4a:96:f3:6c:90:bb:79:b2:1f:4e:
5a:41:03:16:2f:20:7a:f9:20:9c:47:a7:97:e9:62:
e3:10:e0:63:00:a8:2d:0c:a4:86:e3:d1:82:be:fc:
02:7f:38:b9:03:c1:83:5b:50:80:3a:01:6a:eb:9b:
76:9b:f8:dd:b4:df:1c:3c:d3:93:0e:f4:49:40:79:
5d:e5:8a:b6:66:19:1f:f9:35:b5:a0:1a:c2:e3:c1:
32:55:a7:3c:5e:45:11:bd:d8:0c:68:c3:9e:d7:f3:
2f:ac:d3:18:b3:ba:14:1d:4b:3d:8e:4b:be:79:d5:
51:21:e4:e6:59:20:89:3e:ed:96:99:8b:c4:4f:06:
6b:73:28:28:63:4e:ba:70:cc:2a:98:a2:a6:38:3a:
5e:86:b8:a7:84:03:8c:c7:06:2c:61:17:a2:8d:53:
d7:6c:e1:49:f2:14:9e:dd:9d:a0:ef:f8:45:6d:4c:
e6:f2:2f:30:c8:d6:5e:07:2e:85:7b:d9:73:fe:79:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3D:07:C1:F2:9C:D4:54:74:40:D2:AE:0F:26:78:1D:B1:C4:E2:5E
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:25:d3:33:9b:1a:f5:56:51:ea:42:cc:e8:8b:4c:03:86:09:
1c:43:2e:a4:56:b4:92:b0:7d:38:9f:c9:b6:42:ee:7e:f6:06:
0d:5f:3f:2a:ac:cf:ea:25:f4:d1:91:ed:bb:f6:7d:d3:93:81:
dc:f4:64:60:cc:6e:a8:91:d8:07:e6:26:d3:1a:e0:b1:3f:41:
3a:c0:ee:6f:9b:02:0d:97:e8:3c:d5:a2:b0:f8:14:79:c2:75:
d5:2c:ed:a9:e2:c9:b3:bc:79:1f:7a:ff:f1:ab:8f:0f:4c:23:
e1:3f:ab:30:99:44:41:28:12:6b:46:91:26:a1:2a:1d:35:a9:
cc:7b:65:3d:79:41:94:70:4d:6f:1c:4e:9e:23:01:a0:9c:e5:
af:e9:18:fd:7c:ff:d0:39:1c:fc:aa:ff:1b:87:39:ac:06:91:
29:49:2f:23:06:da:48:14:c4:af:f7:c1:87:b4:e7:de:00:3b:
3e:da:de:8c:36:07:29:56:d9:6f:3d:88:c8:3a:05:96:fb:37:
03:11:b7:95:f0:2f:39:32:4f:93:e5:b0:d2:7b:05:ec:06:a1:
1d:87:82:91:78:53:99:fc:44:f5:a5:d8:45:1f:ed:16:7d:ba:
53:21:4e:2d:5b:53:79:b9:de:90:8e:6e:8f:13:ff:58:e1:c9:
1f:bc:fd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:08:06 2025 by rpki-client