Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: XaSi+sf3eQEHA2mIq0Dtexxql1y5c8owahzYPktbLMU=
Subject key identifier: 3F:8A:B0:1A:45:0F:B0:A4:5C:6B:DD:DD:D7:9F:AA:B3:99:5A:9A:19
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 01991808E80713149E8FD6DADF167F77CF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 0532
Signing time: Fri 05 Sep 2025 04:01:00 +0000
Manifest this update: Fri 05 Sep 2025 04:01:00 +0000
Manifest next update: Sat 06 Sep 2025 04:01:00 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: VOnQ7X6etYoJsAholGO/P2cvS+nbgdWG88K9Qbvg6eM=)
2: ihNwlKbuNiGlnJM8yFd2Nxrvaqo.roa (hash: auV56nH817P5x20E5reCmB5GZHUds7d7BudXxN/HlG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:08:e8:07:13:14:9e:8f:d6:da:df:16:7f:77:cf:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Sep 5 04:01:00 2025 GMT
Not After : Sep 6 04:01:00 2025 GMT
Subject: CN=3f8ab01a450fb0a45c6bddddd79faab3995a9a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:d5:92:8b:4b:7a:a2:be:ea:32:8f:31:53:
04:87:56:df:0d:db:68:a7:b0:5b:7b:29:f3:4a:a5:
c5:10:9f:a2:49:38:42:61:fd:09:0d:21:26:70:20:
af:2b:73:34:9e:36:a9:c6:3b:63:80:17:c9:25:8a:
fd:8f:6f:d0:9c:cc:f0:4d:f4:65:74:22:48:db:33:
99:0e:b2:cc:7f:6c:42:31:77:88:e3:12:f0:bb:74:
aa:62:4a:c1:5b:08:76:59:34:78:db:8b:38:55:98:
4f:5c:68:ae:1f:66:cb:52:ef:e6:37:fa:86:7e:f5:
05:ef:7e:70:4c:11:0b:4b:41:d9:87:60:b6:e8:38:
8f:d6:9a:aa:8c:97:94:22:fd:11:37:02:f8:48:31:
6b:b5:1a:e3:7c:49:34:7d:7d:c3:68:89:a6:79:70:
b4:00:c1:8b:48:63:b4:cc:9e:95:7d:65:4c:11:f7:
98:c1:cb:70:93:11:ca:de:dc:a0:d0:91:6f:14:d7:
f7:e4:fd:f3:50:6f:a2:f3:33:d1:ca:cf:0c:22:aa:
67:1c:be:c0:ec:ad:9f:9d:3c:e4:5a:3a:7f:7c:37:
17:60:88:09:26:59:a0:19:be:6d:cd:e0:9a:5c:ed:
9b:24:52:14:09:d0:64:5a:86:1d:52:e6:d6:a8:ff:
ab:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8A:B0:1A:45:0F:B0:A4:5C:6B:DD:DD:D7:9F:AA:B3:99:5A:9A:19
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:13:79:04:2a:8e:03:e1:91:f0:b2:72:ce:e1:7a:d4:87:0a:
e1:75:98:1f:20:0b:88:4c:06:55:0a:d9:fd:ad:3a:33:e9:b0:
b0:59:00:cb:cd:0b:98:64:c8:a7:a3:65:f9:fb:08:f0:90:c5:
8d:29:c3:80:7c:07:76:03:b0:eb:2b:9d:b2:0a:e4:f6:51:3c:
e1:85:66:e0:a3:dc:40:2d:d5:6a:7b:bf:e0:2b:fa:a5:7c:14:
ab:64:f6:7f:55:95:87:64:91:ef:24:aa:02:51:a6:63:ee:95:
12:80:15:25:5b:c0:6f:e0:91:e9:46:6b:c7:bf:98:f0:c0:2d:
5a:ff:ec:d9:aa:77:d6:7d:55:03:d7:46:f7:7f:9c:f4:95:a0:
0a:cb:f7:36:cb:4d:20:0b:57:a0:98:8b:8b:06:7e:e0:66:be:
cc:00:fe:6b:19:b1:fb:6a:a8:3a:2f:de:de:62:20:ef:0d:1f:
a9:98:06:46:f3:12:7c:8a:46:40:01:c2:32:ad:30:37:f3:e9:
31:a8:72:67:03:47:72:df:91:d6:18:d7:8c:1b:74:86:33:65:
21:6f:a9:36:b7:9d:89:37:c5:4c:c8:4f:49:a8:c9:64:89:35:
60:21:36:e6:dc:39:42:5c:df:09:bc:00:58:7c:5d:be:11:c1:
10:1c:7d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:54:44 2025 by rpki-client