Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: Y+6PPt7huo8ULP9iAxO0nhgQN+hanA+8bkneoeBzftM=
Subject key identifier: CE:61:88:7F:35:20:62:30:B5:99:D4:EA:F4:5B:57:FB:53:E3:C6:0D
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 0198D54E0E703171F578730B3FBB4A9946D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 038C
Signing time: Sat 23 Aug 2025 05:01:59 +0000
Manifest this update: Sat 23 Aug 2025 05:01:59 +0000
Manifest next update: Sun 24 Aug 2025 05:01:59 +0000
Files and hashes: 1: 0aywYTi5Sc6yVfxfBxLpHYbIDYs.roa (hash: XltTkT+5iNEXCHy8WnwN+9b+D1DDxHii8Hapue8Rijw=)
2: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: A+xydyfjzqIpG4ypZuy6Ajei4GF3E5mBrgCdxki5JGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:0e:70:31:71:f5:78:73:0b:3f:bb:4a:99:46:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Aug 23 05:01:59 2025 GMT
Not After : Aug 24 05:01:59 2025 GMT
Subject: CN=ce61887f35206230b599d4eaf45b57fb53e3c60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:21:e6:fd:d2:51:2b:3e:1e:a8:d4:53:a5:
88:00:d4:02:e5:06:83:7e:af:9d:84:93:42:69:ea:
5c:2e:e5:19:19:12:64:ab:91:b1:9b:20:35:79:19:
fe:fb:34:0d:74:00:a4:bc:93:a6:2a:69:cc:a8:68:
59:2c:38:4d:1b:6a:ff:65:cd:22:f1:c2:7b:11:f8:
95:fd:b1:ad:f3:2b:d2:2c:97:6e:4f:f4:67:6b:f0:
d5:b3:09:3e:44:37:f3:0f:a8:dd:cb:e4:fe:3d:ef:
ea:f3:c9:10:ff:aa:cd:c2:ac:d5:61:c3:3f:90:03:
53:71:c2:3c:2f:da:af:89:c7:4e:91:74:de:d6:ff:
c3:35:d2:3d:63:cf:37:98:eb:af:57:6b:fc:ca:8d:
1d:51:25:8c:b1:6b:59:95:f4:45:ac:31:6d:aa:62:
e0:17:95:45:86:90:75:f4:3c:b2:94:ae:d0:5b:c2:
90:f4:ff:27:1f:08:85:e4:fb:45:fc:6f:a6:5a:05:
b8:14:fb:8b:a4:70:93:9f:4c:26:49:b5:df:09:e6:
e4:e8:65:02:53:b3:e7:92:16:93:fb:33:c0:47:c1:
24:ad:c7:b3:e8:1a:c6:d1:b3:99:2a:50:fb:0b:2b:
41:0a:5a:b9:a6:80:70:f3:b3:40:3f:ef:fa:ae:d8:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:61:88:7F:35:20:62:30:B5:99:D4:EA:F4:5B:57:FB:53:E3:C6:0D
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:be:e5:f1:23:1d:6b:77:70:7a:69:84:24:63:3d:25:09:f5:
6d:ce:94:73:44:43:d2:35:99:c4:63:9e:b0:11:60:dc:bb:9f:
be:2d:d5:e1:04:5e:29:1d:94:ff:6c:60:2b:1d:0c:42:df:09:
a6:70:8b:13:35:8a:74:80:bd:e5:ed:c3:28:54:6a:5f:8d:ff:
e1:84:66:fd:d0:60:0f:b8:1d:54:07:7d:82:00:d1:8e:57:00:
6d:8e:88:0e:a1:01:c5:ca:37:7b:c2:4c:82:2c:48:07:09:df:
67:63:d0:7c:56:e1:cf:79:c2:f1:0c:33:96:5d:0a:3f:11:d9:
3e:5d:55:57:98:2a:c4:22:73:f2:c0:e6:f0:db:12:80:0f:fe:
b3:e8:61:c4:f8:72:c8:97:b5:e6:72:ca:0d:f3:26:1f:9b:ea:
5e:d8:bc:dc:c5:c9:f3:02:11:de:e8:e3:d7:eb:a6:07:f0:e4:
54:40:03:a0:b0:da:44:5d:c2:fe:79:61:26:22:7c:8d:23:ad:
40:30:ff:be:e0:46:2b:09:c9:dc:94:77:c6:60:ca:6f:c4:ea:
b1:94:ed:7d:9d:12:4e:04:6a:72:76:f5:18:e9:31:9d:2a:1e:
73:86:f8:9e:b5:85:45:b4:1b:ef:64:c5:c4:b3:83:3a:c0:c8:
a2:af:65:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:00 2025 by rpki-client