Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: 9JEtS8KV4rrNTVQx+m9atj8JjrcsHxKGx4Hk1XSR5Zg=
Subject key identifier: 58:6F:A2:30:D1:9C:41:5D:2D:DF:CE:1B:1C:68:BE:93:4D:53:9F:0D
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 0196D2BF934A0017EF5D85223227D591999A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 1540
Signing time: Thu 15 May 2025 07:01:32 +0000
Manifest this update: Thu 15 May 2025 07:01:32 +0000
Manifest next update: Fri 16 May 2025 07:01:32 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: /HP+YI/L0Gak3+ou/EtA3hKgc7568xXOJUmQK60+YsI=)
2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=)
3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:bf:93:4a:00:17:ef:5d:85:22:32:27:d5:91:99:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: May 15 07:01:32 2025 GMT
Not After : May 16 07:01:32 2025 GMT
Subject: CN=586fa230d19c415d2ddfce1b1c68be934d539f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:7f:d1:d7:4a:a2:47:9b:9e:57:63:e2:ef:
8f:19:67:ac:19:32:8b:95:ad:59:26:1e:66:10:c7:
b4:86:bb:a3:9c:b9:18:66:45:4e:fa:6d:ea:b9:e4:
9f:7f:f9:e5:93:d5:bd:cf:d4:94:22:9c:ef:ff:6c:
80:24:da:74:67:b3:3b:48:24:98:39:3c:c8:07:8d:
09:f6:28:61:b6:66:a0:95:27:62:af:09:8f:c6:e4:
dd:5a:a7:69:ae:7a:8d:fd:0f:98:24:6a:64:e3:17:
09:e4:87:f2:dc:42:26:65:32:0b:87:a2:02:f2:9f:
84:9c:b4:27:6f:8e:38:62:97:2c:79:bb:a3:a1:01:
73:f5:01:4a:6f:e4:aa:8b:19:95:f1:18:c5:af:22:
3d:16:5f:77:84:8a:f2:8d:75:43:dd:d6:97:4e:35:
d8:37:de:f9:1a:26:27:e1:2d:49:96:bf:09:a3:59:
24:09:a7:03:73:bf:f2:61:2a:c4:d8:1d:3b:2d:72:
2a:02:26:23:48:c8:27:e9:64:42:0d:79:7f:4b:49:
b8:b9:54:44:b6:7e:fc:60:31:0e:bb:8c:cd:f6:57:
34:dc:bd:65:2f:0d:25:f9:35:23:1c:61:5a:4c:0a:
48:0e:3f:af:87:b4:b5:e9:c7:13:35:62:59:ca:e7:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6F:A2:30:D1:9C:41:5D:2D:DF:CE:1B:1C:68:BE:93:4D:53:9F:0D
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:28:db:61:2d:59:cc:a3:98:d2:3f:26:4c:6f:e1:3a:fc:17:
f4:ff:1d:f1:08:8a:44:7f:86:77:6e:c5:77:26:c7:b3:31:4d:
c2:bc:a6:c3:22:d3:4e:a9:9f:47:c9:b4:b8:61:ce:b2:6f:65:
ab:79:a5:f7:cb:94:69:ef:82:5a:7b:bf:14:6b:03:65:f4:28:
fb:9f:20:f4:e1:df:02:df:ce:4f:7c:3f:d5:c5:4c:b0:ca:6b:
b9:67:78:df:da:e6:6c:a1:54:e3:29:06:22:8f:60:9a:fc:ba:
a2:6a:73:3b:38:99:62:2a:b7:df:99:6b:d4:da:3d:be:98:91:
26:85:a1:a8:92:1e:0c:d3:3c:7e:9d:eb:55:c0:85:2e:9a:45:
71:c4:17:f8:70:d9:81:78:93:2c:99:73:a3:eb:df:f6:6d:fa:
9e:2c:f9:6d:2c:b9:d1:03:30:86:73:14:59:95:ba:31:c8:36:
ff:a3:20:dc:73:0d:39:7b:20:fe:16:e6:c0:90:27:ef:cf:41:
40:1b:34:0f:1b:e7:7e:b1:cb:63:a9:16:d5:46:8e:68:54:cd:
4f:07:cc:b4:7b:58:8c:6f:b9:8b:57:bc:45:37:b0:de:9a:45:
bf:a2:8a:40:6c:b6:76:e0:c7:02:3b:8e:c4:dc:22:5f:30:5e:
22:99:38:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:05:36 2025 by rpki-client