Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: fw8Dd20NGkGRZfDWm3HRO9b3Vmr7dLPHOBS5/u1cZwY=
Subject key identifier: 98:C2:72:2A:1B:91:B8:E5:AB:10:3E:E5:D1:D7:16:82:44:BB:F7:37
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 0197B6A1EB5A120097A3C7A2F2EBE157853D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:34 +0000
Manifest this update: Sat 28 Jun 2025 13:02:34 +0000
Manifest next update: Sun 29 Jun 2025 13:02:34 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: U8cooJTwf8Cij/JwGjggoVQ/0N/b9Qmh4eDCxyg8bm4=)
2: Pr7YGGLPe8s_S4LRz9ziv5ucbAw.roa (hash: sx9n+qGnhP0I6sp10kmNLeGSUg0Fv6GPJl7WmFjWTnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:eb:5a:12:00:97:a3:c7:a2:f2:eb:e1:57:85:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Jun 28 13:02:34 2025 GMT
Not After : Jun 29 13:02:34 2025 GMT
Subject: CN=98c2722a1b91b8e5ab103ee5d1d7168244bbf737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:a1:06:f2:db:df:18:9c:c1:7b:e4:8f:14:
85:7e:27:70:f3:41:73:11:3e:d5:06:37:ae:38:9e:
e1:49:45:00:da:98:f4:75:71:e6:9d:75:a6:bc:28:
bf:2a:1a:46:49:60:7e:96:47:19:e2:ce:1c:6c:ee:
41:bf:d4:e1:1e:f2:a9:81:97:7a:3f:01:f7:67:4c:
02:63:6d:40:69:e9:25:41:c0:1f:4a:bd:22:f2:49:
0d:b1:73:2e:a8:33:89:40:73:06:d1:3f:56:78:df:
62:22:f6:73:7c:fe:6d:19:a9:38:9f:ff:0c:5c:26:
bc:e0:bd:0f:9f:c3:b4:b5:a7:ec:cb:89:b9:27:43:
d4:41:06:75:3a:11:cc:41:dd:e3:55:59:8a:6a:55:
c4:eb:91:26:3c:5b:67:15:c6:59:33:a1:5e:a5:af:
9e:5e:14:bb:83:76:d5:f0:27:ca:87:43:03:44:ec:
31:82:c7:ea:e0:d5:20:d6:da:5b:67:0c:2f:67:ff:
55:58:01:7a:37:b7:1c:16:83:02:8c:cd:ae:43:28:
c6:cd:42:d2:9d:26:e8:0f:ef:a7:32:a6:5c:a9:c8:
98:1d:c2:c3:1a:3e:96:72:0a:62:e3:b1:6f:f6:87:
a1:00:4e:0e:7d:59:8c:c5:99:4a:b6:79:2b:64:24:
c5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C2:72:2A:1B:91:B8:E5:AB:10:3E:E5:D1:D7:16:82:44:BB:F7:37
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:72:b6:46:40:87:7d:ea:ba:82:0a:54:dd:0a:91:7b:6a:48:
79:1d:99:94:6c:74:6a:80:b3:5d:ab:d7:89:78:b0:9a:31:e3:
3f:f6:bd:8b:fe:d6:39:57:e4:3e:d1:fd:1f:06:40:42:23:da:
12:6c:35:c5:c6:3a:8a:9e:77:47:4a:b5:03:e4:94:e6:84:a5:
da:c4:94:82:ef:ea:ac:b9:b1:01:eb:bd:f7:e2:de:8a:33:bd:
7d:94:ee:92:f9:d7:fa:69:72:90:2c:5b:6d:ad:a2:de:64:28:
8c:95:ad:1c:ba:46:ea:b5:d9:33:64:6e:c6:c5:00:ff:67:1b:
dd:99:d2:d9:b3:cf:2f:6e:da:16:7f:f8:aa:0b:c0:54:9c:99:
39:90:ba:12:fc:b9:f8:50:53:2e:5d:59:ff:fb:9d:9a:c1:39:
26:92:8f:b2:4e:08:7c:a0:92:28:58:10:0d:4f:4f:d5:8e:c2:
d1:87:f6:e2:f9:d1:ae:7b:c0:71:96:24:3e:0f:0d:c0:09:75:
9b:d5:de:fe:c0:7d:ff:ed:ed:14:88:13:50:23:bc:33:04:1e:
e1:d4:34:80:32:d2:c9:9e:99:dd:18:ed:43:b2:b4:bc:92:32:
dd:49:75:7f:e0:9b:22:53:3d:64:e4:75:d3:15:59:cb:19:99:
09:15:14:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:36 2025 by rpki-client