Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: SzM0wFBumzq9WKiK0w2loyF5QpBZkTruPi6m1LmpwEI=
Subject key identifier: 78:9F:C7:F3:19:DD:8D:CB:26:09:C3:47:C3:72:61:A7:15:4B:D8:98
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 0198D85083CB60CC6B2BEB918BEA9469B870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 19:03:31 +0000
Manifest this update: Sat 23 Aug 2025 19:03:31 +0000
Manifest next update: Sun 24 Aug 2025 19:03:31 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: 3SuHAEWWmO2Z4/6v9p+S/6MWvdfaSyZv7uHBJvwrc0c=)
2: Pr7YGGLPe8s_S4LRz9ziv5ucbAw.roa (hash: sx9n+qGnhP0I6sp10kmNLeGSUg0Fv6GPJl7WmFjWTnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:83:cb:60:cc:6b:2b:eb:91:8b:ea:94:69:b8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Aug 23 19:03:31 2025 GMT
Not After : Aug 24 19:03:31 2025 GMT
Subject: CN=789fc7f319dd8dcb2609c347c37261a7154bd898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e6:02:21:d4:e0:c0:b6:ad:6e:34:e4:fc:dc:
ce:2c:ed:e2:d6:88:19:0b:e9:db:24:d4:bf:90:66:
a0:1f:9d:a9:bb:7a:ea:41:e9:ab:c1:0a:c8:b0:4d:
7e:e4:11:4f:33:29:dc:89:af:47:24:a1:2d:37:c2:
61:df:c7:a7:de:9c:9f:5c:71:02:66:48:15:b1:16:
1d:51:0a:83:e2:90:f8:d8:9d:8a:1b:2d:1e:b8:19:
78:49:f3:9d:94:d6:4d:ef:ec:cf:51:0f:fa:17:99:
8f:40:59:d0:c9:35:cc:bc:f7:81:2d:d5:c1:88:cf:
c2:59:4a:6a:fb:3c:8a:c0:71:c1:ea:c0:33:f6:36:
4f:e5:f6:06:5d:62:ff:fb:a9:f8:6a:0b:52:54:0a:
3a:0d:54:cb:f4:52:c8:be:78:07:e6:75:ad:ff:29:
21:8e:cd:89:49:94:72:14:c6:4f:94:87:9e:fc:7d:
1b:56:80:e9:ee:37:34:50:31:6a:ab:d6:2e:48:c2:
e6:ba:8f:b2:48:dd:bf:02:0b:58:ce:51:76:8c:50:
0c:9d:e1:5e:3c:02:01:26:3e:db:6f:1b:18:82:e9:
64:5b:15:be:3f:22:84:eb:e9:75:c9:b5:c5:3b:fa:
1a:ae:d8:c9:99:c3:5a:3c:12:21:29:06:87:92:97:
ec:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9F:C7:F3:19:DD:8D:CB:26:09:C3:47:C3:72:61:A7:15:4B:D8:98
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:12:27:e1:ac:6a:2d:b0:3b:64:45:d0:20:34:73:37:ee:b6:
b7:56:76:1a:ab:01:35:35:79:ab:46:e3:05:20:c0:cc:8f:9b:
b9:0c:5d:12:d5:67:cf:bf:d8:4c:1f:e4:58:10:31:83:a7:da:
80:49:0e:3d:48:32:72:39:41:f8:a3:95:02:3e:ad:2e:69:80:
d0:43:42:7b:9d:5d:0f:e1:72:2d:09:8e:5b:78:ac:0b:c0:e4:
0d:d7:c1:b7:3d:2c:de:1c:39:35:ed:6a:4b:5a:37:03:52:3d:
b1:28:de:00:f0:05:84:07:bd:91:cb:0f:29:e7:75:c8:6d:00:
15:72:72:92:9f:97:ff:86:f9:85:7c:08:9c:20:5f:b8:8d:9d:
25:fe:c3:39:70:84:89:49:95:45:84:7d:ec:6c:cd:dc:09:6c:
d8:ec:aa:c5:9f:ab:29:63:0e:18:79:f6:2b:c7:00:1e:9b:1c:
24:eb:ae:3b:26:b5:9d:59:e2:6d:7e:45:fe:a0:7b:e6:27:a3:
30:9b:65:37:f1:0a:51:2f:e1:f5:68:a8:a2:fb:8c:5b:54:c8:
fe:21:12:e3:ca:3d:bd:ac:49:f9:10:3f:47:e6:50:7f:f4:6d:
03:9f:7c:77:8c:d2:63:8b:c6:1b:82:f0:32:5d:d7:ee:7a:c1:
a8:5f:81:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:23:11 2025 by rpki-client