Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier: Me4UB8fwl812j3v+ul70UhkGgIcgMQH6nwPiQxu+nr0=
Subject key identifier: FD:79:48:B9:57:2D:42:57:67:78:59:86:EE:AE:BA:8E:2B:B8:4B:EA
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial: 0198CBA65A0E5F9C3FFE2998E43C183E8E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number: 049A
Signing time: Thu 21 Aug 2025 08:02:13 +0000
Manifest this update: Thu 21 Aug 2025 08:02:13 +0000
Manifest next update: Fri 22 Aug 2025 08:02:13 +0000
Files and hashes: 1: 5EWBzdepm8m1-Fw5ggkBVnYeo3Q.roa (hash: VXD9eDnJ0GXpX+c0YUcqrxEzhI7okMcsDXHvru13uGI=)
2: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: JwJRA99KUC18qeOp5Yhw1QrTORGICPzeh1+okd4IaJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:a6:5a:0e:5f:9c:3f:fe:29:98:e4:3c:18:3e:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Validity
Not Before: Aug 21 08:02:13 2025 GMT
Not After : Aug 22 08:02:13 2025 GMT
Subject: CN=fd7948b9572d425767785986eeaeba8e2bb84bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:26:83:3c:38:ca:ce:7c:23:73:77:fe:d4:
1d:51:51:52:d4:93:ed:4f:c8:2b:df:18:f0:63:45:
86:66:bd:6a:64:65:07:c7:a2:d9:4e:76:4b:78:bd:
a5:4b:69:82:db:45:84:92:ca:27:05:11:4e:ab:7b:
5d:c8:23:cd:83:0c:cf:d0:43:e3:3a:a4:3a:ff:94:
dd:f3:06:93:c6:f6:fe:f8:74:af:6b:6f:32:af:87:
12:d6:59:89:71:e1:66:d6:15:46:65:9a:6e:40:45:
ea:8b:a9:d4:39:a1:57:04:82:99:9d:2e:9b:97:21:
a2:af:c0:21:35:e3:c7:5a:78:6b:8d:7c:51:8c:4b:
65:6e:8a:b7:2d:fb:44:20:e1:a3:09:70:58:de:17:
ca:92:89:4a:e3:55:29:42:49:78:e7:ce:fb:71:d3:
95:36:58:56:cb:4e:e2:be:96:09:90:4c:07:7d:5f:
f0:5a:dd:80:99:d0:bd:22:9e:22:6a:40:05:bc:18:
d6:f2:88:17:09:7b:f5:1a:a0:d1:b1:d6:c2:b8:79:
39:de:f9:f8:4c:69:bf:56:e3:ff:e2:da:bc:1b:70:
6d:ed:9e:e5:00:68:0c:8b:c3:e9:c3:1e:9d:e6:65:
af:0f:94:f0:f5:b4:9a:7b:74:8f:96:36:1e:f2:12:
c7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:79:48:B9:57:2D:42:57:67:78:59:86:EE:AE:BA:8E:2B:B8:4B:EA
X509v3 Authority Key Identifier:
keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2f:63:12:a9:5f:b7:98:71:3f:d0:23:83:53:f6:c3:6f:a5:
69:58:66:46:b5:be:ee:4c:ce:3d:e6:f9:d2:82:27:59:07:4d:
e9:1f:eb:34:d9:eb:7a:68:ea:70:eb:98:b9:6d:43:18:d9:4e:
7b:71:d3:71:a5:85:68:f7:6e:14:e5:7e:c4:a9:80:98:8d:86:
0f:10:05:38:e5:ad:50:9c:82:3d:f4:2f:80:66:c8:c2:01:ca:
e4:0a:5a:f1:ed:7f:8e:24:e5:e7:31:51:93:b9:09:62:55:70:
79:17:cc:0b:32:6c:61:8b:47:e9:36:da:22:eb:8b:b3:bb:5a:
60:b4:b2:6e:e9:c3:f3:cc:ba:aa:7d:e8:cf:de:28:d1:ac:8b:
6a:2c:4a:eb:0a:43:69:43:35:00:46:e9:95:7a:ae:a0:a4:79:
da:51:99:68:e9:ad:18:c7:ce:26:98:08:db:17:c9:b7:73:64:
e5:5d:71:34:d9:01:b4:88:c4:33:ea:e5:3c:6a:90:11:4f:32:
13:d3:1b:77:ad:6c:9d:83:8a:11:02:d4:d4:08:b2:e3:bd:15:
aa:5e:85:59:1c:01:1c:54:af:98:e8:4d:21:39:5d:c7:7a:e5:
c4:20:f2:3a:fe:f9:4b:f9:0d:0d:b0:8f:9c:71:4f:91:6f:f8:
42:77:0c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 12:10:08 2025 by rpki-client