Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier: aChyzq+wmxizFeI/P4ZRdipLTvDCC9X+mrl5PF2uQPw=
Subject key identifier: 4F:1A:F9:4C:08:8F:68:79:F1:03:DF:1B:13:EF:BD:58:E6:6D:39:65
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial: 0196CDCF25FC52C7F3AC5441C5EA30DC0FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number: 0392
Signing time: Wed 14 May 2025 08:00:26 +0000
Manifest this update: Wed 14 May 2025 08:00:26 +0000
Manifest next update: Thu 15 May 2025 08:00:26 +0000
Files and hashes: 1: 5EWBzdepm8m1-Fw5ggkBVnYeo3Q.roa (hash: VXD9eDnJ0GXpX+c0YUcqrxEzhI7okMcsDXHvru13uGI=)
2: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: XsB7h9QtDqu3rhK79Yc6rTzIkL+WZ234q4nEd3/GSiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:25:fc:52:c7:f3:ac:54:41:c5:ea:30:dc:0f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Validity
Not Before: May 14 08:00:26 2025 GMT
Not After : May 15 08:00:26 2025 GMT
Subject: CN=4f1af94c088f6879f103df1b13efbd58e66d3965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:45:3f:cf:0b:9d:9d:e0:3f:3c:50:4b:02:
7d:2d:f0:2e:62:a4:19:f5:fa:50:da:20:21:80:ea:
46:52:c1:30:04:fa:e1:ea:3c:77:c9:10:95:b6:4c:
51:b0:05:16:0a:17:e4:a8:33:46:34:b6:60:c2:9f:
14:be:bc:59:e8:36:fc:a9:2a:10:78:69:ea:73:0a:
9e:8f:98:8b:4c:76:0c:a8:2a:06:98:3e:2d:eb:cc:
dd:9e:34:41:e1:9c:98:47:d8:f7:b1:8a:1c:43:1a:
aa:f3:f1:f1:54:11:e1:47:19:86:85:6e:8e:eb:39:
75:16:17:75:c0:ee:fa:ac:82:dc:7d:29:54:3a:82:
9e:b3:35:92:6f:d1:16:bb:38:a0:70:35:0e:de:8f:
48:33:20:44:c9:b7:9d:6a:19:80:85:26:fc:27:f4:
32:38:e3:f6:90:4c:f3:8d:aa:ad:ef:0b:5b:83:17:
ce:55:90:7f:d2:a6:49:e8:af:76:73:0c:9d:7e:90:
2b:f1:72:81:17:66:4d:f4:59:c9:a1:97:63:07:71:
1f:74:e7:00:88:19:f1:c7:65:c5:52:ae:42:6d:42:
dd:e8:d0:84:08:50:6a:10:bc:36:f5:f4:73:7d:df:
bf:87:ba:92:1c:48:a4:1b:4c:b5:15:39:4e:d1:b4:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1A:F9:4C:08:8F:68:79:F1:03:DF:1B:13:EF:BD:58:E6:6D:39:65
X509v3 Authority Key Identifier:
keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:38:a3:6c:cd:58:23:93:20:0a:7d:8f:01:77:16:e8:d8:2e:
c8:4d:00:81:67:1b:ad:0e:0b:83:ce:db:65:67:a8:8b:55:ae:
d5:a0:37:07:f0:f4:1e:f4:83:01:21:e7:25:8d:5f:89:a5:d2:
07:b7:5e:05:53:dd:5e:fc:c0:44:14:f1:38:33:fc:b6:f3:f8:
b0:0a:6a:f6:08:d3:0f:a3:cf:44:0e:28:53:a8:f8:6c:2f:29:
08:2c:bb:db:02:b3:bd:aa:82:d3:37:eb:79:b7:b0:55:9a:73:
b6:07:d3:e1:94:ea:c2:f0:57:1a:f9:63:10:f7:ca:89:eb:0a:
ba:9d:7b:0c:a8:b0:03:2e:a4:5c:3f:8a:fc:ce:5f:4f:31:ae:
79:72:a7:de:25:b3:7b:90:cc:82:63:66:3a:3a:92:8b:70:06:
2e:b5:f2:60:a3:87:42:fa:16:8c:cb:b5:4c:63:4c:7c:44:ab:
53:f5:48:d0:77:26:90:80:d0:15:4d:7a:d6:1e:47:52:f9:b0:
22:05:a4:b7:54:69:df:4f:0c:99:34:44:d9:02:dc:9c:b5:70:
84:70:93:0e:51:12:c7:74:00:9b:6e:f7:51:03:55:63:e7:d7:
d6:ea:8a:a8:ed:92:25:2b:e7:5f:01:a5:58:a3:28:c5:78:49:
50:84:4a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:59:16 2025 by rpki-client