Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: 0fH0aBgYzAL7WKLQfjHUfO1VDUModtvOkDgHu7wuNGU=
Subject key identifier: CA:41:44:DD:8F:BC:63:C6:AE:7D:06:65:61:9C:43:92:5F:B7:F2:F5
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 01996736D3AEE9DA2DEC5CD3F6E845472DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 1696
Signing time: Sat 20 Sep 2025 13:01:10 +0000
Manifest this update: Sat 20 Sep 2025 13:01:10 +0000
Manifest next update: Sun 21 Sep 2025 13:01:10 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: rNOm6mHLNMAFTkJ6cnxD/XxEXqQRO49vDiJdF1nonE8=)
2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=)
3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:67:36:d3:ae:e9:da:2d:ec:5c:d3:f6:e8:45:47:2d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Sep 20 13:01:10 2025 GMT
Not After : Sep 21 13:01:10 2025 GMT
Subject: CN=ca4144dd8fbc63c6ae7d0665619c43925fb7f2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:c8:ac:f4:c4:e9:c5:b4:62:bb:74:25:12:
a0:8f:99:5b:a9:28:6e:35:35:1b:14:ff:1e:4d:5e:
a5:b1:e2:21:e0:90:b3:dd:56:0f:35:d5:e8:5f:c0:
74:e8:71:9e:2b:62:2a:8f:0b:b6:09:57:07:a6:8a:
57:6e:b2:db:4d:da:9f:4e:ba:e0:19:7c:be:5b:23:
57:0b:75:c9:6d:c5:51:46:14:fc:29:2d:b9:89:88:
45:57:f0:65:4d:63:b6:94:22:f3:bb:b2:0f:d9:24:
e3:09:c6:54:a2:74:5d:c9:e0:9b:dc:c5:1a:fc:0f:
d9:d7:a1:a5:b2:06:a3:66:a6:a7:9e:fa:9c:d2:04:
a6:3c:74:4c:03:b4:28:15:40:ed:2b:5a:3e:8c:31:
a1:82:e0:d6:f5:a2:29:ce:0f:68:52:78:39:55:54:
4d:da:20:07:99:d1:6b:6f:06:60:db:9f:cc:1e:57:
4c:5d:0d:f5:f2:0d:13:e8:9c:18:11:cb:30:4e:63:
b4:69:6d:33:b7:d9:4b:46:64:88:a4:e6:92:ee:69:
27:22:4b:2a:a3:7c:37:8a:81:59:e3:c8:42:b6:5b:
45:05:86:f6:7b:ec:da:82:06:eb:df:0c:6a:db:99:
7f:bc:f5:21:ed:0f:ba:e6:10:c5:b4:22:bf:e6:f9:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:41:44:DD:8F:BC:63:C6:AE:7D:06:65:61:9C:43:92:5F:B7:F2:F5
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1c:ef:c6:af:f0:f4:67:d2:4c:1c:fb:9c:13:e2:9a:31:a9:
38:8c:5b:c3:31:0e:39:0f:05:a9:fa:40:19:76:1a:75:b5:d9:
21:45:13:b0:78:3b:f1:2d:11:7d:31:94:ba:d6:74:ba:e2:ef:
4f:8c:3c:d6:72:f2:36:40:33:c7:a9:b4:99:93:0f:9c:11:10:
98:e4:1d:fc:ba:6b:c1:f3:b7:80:f1:d5:d5:4e:e9:7b:08:50:
ac:fc:58:ec:71:79:ca:9d:d7:57:fd:53:67:10:47:f7:2b:11:
c1:c3:1d:16:94:c2:28:c7:2b:ac:56:65:2c:42:75:3d:72:b9:
a0:e3:dc:49:3c:44:85:3c:e9:e8:77:cb:ce:87:ee:a4:b1:db:
a4:a8:47:a3:3f:5d:3e:ac:61:c7:88:b2:53:16:75:96:d8:1d:
04:89:44:af:c6:4c:52:6d:42:98:5c:3a:a8:ce:e0:70:b5:4c:
58:be:0b:45:df:e9:4b:23:e3:0f:cb:da:19:9b:94:53:45:4c:
4d:ec:83:5e:53:a5:b8:ed:f3:7d:e0:e0:26:e7:1c:f0:16:05:
2d:ff:7f:ac:32:46:22:83:ac:6a:2a:5e:d3:90:68:cd:10:58:
74:44:2a:b7:82:50:ce:89:51:37:c3:87:e4:a5:df:e1:6d:ea:
94:cd:d5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 16:25:44 2025 by rpki-client