Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: rGk2AW2160UWspaCpz/4nAoirX0gjhEPg/buTce/Px8=
Subject key identifier: A4:00:59:39:E0:20:08:02:E0:3A:C9:B3:E8:22:23:3B:F0:06:5F:EB
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 0197B77C4665131E49B05F4A5A04819723FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 02F8
Signing time: Sat 28 Jun 2025 17:01:04 +0000
Manifest this update: Sat 28 Jun 2025 17:01:04 +0000
Manifest next update: Sun 29 Jun 2025 17:01:04 +0000
Files and hashes: 1: 0aywYTi5Sc6yVfxfBxLpHYbIDYs.roa (hash: XltTkT+5iNEXCHy8WnwN+9b+D1DDxHii8Hapue8Rijw=)
2: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: P0qnWcW+CSGXzshPkla4kvrTl/XUQRHZOYqHQt6wUWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:46:65:13:1e:49:b0:5f:4a:5a:04:81:97:23:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Jun 28 17:01:04 2025 GMT
Not After : Jun 29 17:01:04 2025 GMT
Subject: CN=a4005939e0200802e03ac9b3e822233bf0065feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:c4:ff:c5:16:1a:f1:20:c0:73:70:04:25:
6a:11:d3:ea:fe:9f:a2:d8:1d:92:ee:64:98:eb:45:
41:1d:1b:a4:15:39:60:ac:5c:d3:4e:31:bc:ab:12:
85:06:9c:f4:35:5c:5c:da:4a:58:47:2a:13:87:ff:
ad:af:1d:3e:8b:a8:69:da:99:ca:48:d3:7d:03:cf:
89:50:df:c6:c4:c8:f9:a7:bf:62:fc:e7:2d:e0:7a:
13:71:21:85:eb:bc:05:94:9a:0d:de:d7:bd:f6:6c:
16:4e:c5:58:9d:e2:bf:d0:6f:d8:bd:75:1d:c1:74:
fd:bd:e2:39:5a:12:31:5c:6d:38:5f:1f:45:15:2e:
90:ba:4c:9d:c1:ad:ff:69:ce:fe:72:62:ec:fd:6a:
35:4b:a6:ba:e3:80:d3:6f:47:3e:40:bf:7c:0d:75:
94:15:af:7c:29:50:83:9f:f7:bd:75:89:e6:01:d5:
7f:24:08:43:c9:30:34:17:a3:a0:c0:cf:c5:48:1f:
dd:1e:66:c9:6f:fb:2b:9d:97:62:60:7d:7a:05:ec:
16:31:20:c6:56:c3:70:89:18:59:f0:ec:96:aa:bc:
f2:bf:6c:6b:f2:34:a1:0b:b7:9f:ce:4c:d9:ee:d4:
d9:a7:13:b5:d4:b8:85:b7:3e:b3:ca:54:ec:08:4b:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:00:59:39:E0:20:08:02:E0:3A:C9:B3:E8:22:23:3B:F0:06:5F:EB
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:23:d9:ae:80:81:cf:8c:bc:6b:af:23:d5:9a:14:6b:9d:94:
a3:55:22:81:f4:d1:59:ba:27:30:f1:5b:59:73:65:9c:f9:22:
47:18:36:e4:84:2d:5f:98:6e:7e:69:d8:ba:98:68:22:4d:74:
21:f8:c5:b7:94:69:1b:e3:1d:30:08:bb:65:97:03:f4:ae:8a:
eb:e0:39:b6:fb:c9:a6:c4:81:a3:07:bc:92:49:a8:a2:14:f2:
fc:32:f7:fe:88:4f:2d:93:c0:93:b3:7d:51:d1:df:3a:95:c6:
cf:4a:0a:25:f6:e1:64:f5:41:2a:5f:76:53:0b:11:9d:85:73:
88:ab:84:2c:71:fa:6c:b7:f4:0a:ae:b7:c7:aa:c9:ed:8f:94:
01:3c:44:82:b2:5e:9c:3f:d2:70:4d:c7:0f:63:b1:06:ad:69:
1f:5b:ef:74:3c:9d:5b:b5:45:2c:17:63:6f:e3:64:6c:1f:15:
f9:ef:7a:08:00:71:15:a4:ea:33:7f:fd:48:21:29:a5:71:f8:
43:00:d0:9d:2b:c7:23:38:08:24:0b:e1:8d:fe:9b:84:36:10:
01:36:44:71:ca:7d:94:19:19:01:df:01:4b:58:03:21:fc:cb:
70:ad:d9:1b:e5:88:f1:34:d3:bb:b7:50:58:34:3e:c4:59:c4:
05:1c:e4:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fEZlEx5JsF9KWgSBlyP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTgwYzQ4MzM3YmYyN2RiMmZkMDgzYzE3MmM2YTFjYzVk
MWQxN2MwHhcNMjUwNjI4MTcwMTA0WhcNMjUwNjI5MTcwMTA0WjAzMTEwLwYDVQQD
EyhhNDAwNTkzOWUwMjAwODAyZTAzYWM5YjNlODIyMjMzYmYwMDY1ZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhPE/8UWGvEgwHNwBCVqEdPq/p+i
2B2S7mSY60VBHRukFTlgrFzTTjG8qxKFBpz0NVxc2kpYRyoTh/+trx0+i6hp2pnK
SNN9A8+JUN/GxMj5p79i/Oct4HoTcSGF67wFlJoN3te99mwWTsVYneK/0G/YvXUd
wXT9veI5WhIxXG04Xx9FFS6Qukydwa3/ac7+cmLs/Wo1S6a644DTb0c+QL98DXWU
Fa98KVCDn/e9dYnmAdV/JAhDyTA0F6OgwM/FSB/dHmbJb/srnZdiYH16BewWMSDG
VsNwiRhZ8OyWqrzyv2xr8jShC7efzkzZ7tTZpxO11LiFtz6zylTsCEveqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQAWTngIAgC4DrJs+giIzvwBl/rMB8GA1UdIwQY
MBaAFPOoDEgze/J9sv0IPBcsahzF0dF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjkt
MjY2NGRhY2U5NTgwLzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjktMjY2NGRhY2U5NTgw
LzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyPZroCB
z4y8a68j1ZoUa52Uo1UigfTRWbonMPFbWXNlnPkiRxg25IQtX5hufmnYuphoIk10
IfjFt5RpG+MdMAi7ZZcD9K6K6+A5tvvJpsSBowe8kkmoohTy/DL3/ohPLZPAk7N9
UdHfOpXGz0oKJfbhZPVBKl92UwsRnYVziKuELHH6bLf0Cq63x6rJ7Y+UATxEgrJe
nD/ScE3HD2OxBq1pH1vvdDydW7VFLBdjb+NkbB8V+e96CABxFaTqM3/9SCEppXH4
QwDQnSvHIzgIJAvhjf6bhDYQATZEccp9lBkZAd8BS1gDIfzLcK3ZG+WI8TTTu7dQ
WDQ+xFnEBRzk4A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:26 2025 by rpki-client