Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: JjhofTYQ24vIzmrG3Iv36IRd6r3ik8oTdbv1rehQ85s=
Subject key identifier: 5A:D2:EA:A2:97:98:51:96:23:2D:BF:B3:CD:3D:FB:F9:79:32:E7:56
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 01975611CC3911BA6E2DF9A84B1874BFE164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 19:01:36 +0000
Manifest this update: Mon 09 Jun 2025 19:01:36 +0000
Manifest next update: Tue 10 Jun 2025 19:01:36 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: 0Jfjbt2CTQyvvWIjfK/R2PhV1dRoflbU+Co0a1WPD5c=)
2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=)
3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:11:cc:39:11:ba:6e:2d:f9:a8:4b:18:74:bf:e1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Jun 9 19:01:36 2025 GMT
Not After : Jun 10 19:01:36 2025 GMT
Subject: CN=5ad2eaa297985196232dbfb3cd3dfbf97932e756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:46:9b:47:03:25:7d:04:eb:f5:c1:c2:4e:
68:60:5e:6e:b2:71:24:44:1e:76:d6:6a:d0:68:7c:
43:d9:8a:5c:19:47:dd:a7:a2:a8:65:c5:9c:b4:db:
94:bf:cf:73:71:b1:bc:9a:da:f0:64:96:19:fa:e3:
b6:a0:1c:c8:bc:b9:54:d6:f0:69:e1:41:db:e3:5e:
b4:97:c6:a1:b5:9d:8f:46:a0:e6:e5:89:52:7d:6c:
46:8b:48:dc:4d:ec:d3:a5:b4:dc:d0:98:d1:33:90:
93:db:78:a8:c3:3b:d9:53:1f:44:b5:3f:b3:33:c0:
6e:72:20:dd:51:22:29:8c:b6:dc:9b:f8:2c:05:7c:
81:03:03:90:1a:89:5e:6d:5e:f6:d5:be:03:82:f3:
b5:9b:74:1f:0f:29:43:9f:40:2c:c3:ff:97:6c:95:
4b:55:a5:6a:5b:2b:fa:b3:38:64:29:72:5e:a9:66:
f2:2c:fd:74:ab:85:be:3a:2f:7a:2b:7f:89:66:11:
20:cc:0a:49:9e:28:64:ee:b5:4e:0b:da:07:52:74:
b1:3d:1b:32:46:cb:53:bf:46:e5:73:7c:81:6d:94:
a3:8c:fa:d0:52:27:e5:67:06:ea:01:ed:76:1e:6a:
6d:07:ac:0a:7d:c4:25:9c:31:05:53:fc:48:c4:f9:
b7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:EA:A2:97:98:51:96:23:2D:BF:B3:CD:3D:FB:F9:79:32:E7:56
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c1:6b:d0:6b:10:1c:e3:49:0a:13:79:28:87:87:81:a3:62:
72:aa:b5:48:fd:1d:b5:b0:d7:db:3c:b2:a6:ca:1c:1b:d6:34:
a9:44:1c:ce:38:68:94:25:3c:27:b5:ef:c2:87:21:f2:4d:57:
ce:57:49:8c:ad:2d:9d:6f:d4:0b:2a:d8:b4:2c:ff:9f:13:3d:
77:8e:28:16:26:68:e9:0d:e2:a8:bc:44:ef:72:ea:e0:b2:61:
ce:15:1a:dc:e8:f2:7c:7a:2a:89:99:21:93:86:f9:41:2f:3e:
9d:92:25:64:03:3d:61:fe:6f:84:bf:1d:00:be:6d:8c:29:6d:
b9:dc:23:5a:4c:3b:b4:89:b3:29:38:1a:31:d0:a2:89:c5:91:
89:4e:db:a0:1d:8d:22:0c:7c:29:2c:a0:25:9f:18:27:07:a6:
97:77:0d:7e:8f:ad:91:4a:69:41:16:90:fb:2a:6d:e7:bd:a6:
cc:d7:b0:85:f3:ce:c3:94:21:af:3c:84:65:d7:39:9a:95:f8:
2c:70:64:8d:c4:83:8c:c9:91:96:3f:71:d9:94:75:49:eb:2c:
5f:34:26:82:05:88:86:65:cb:de:7f:7d:c2:74:3b:e4:25:f7:
56:cf:25:de:06:d6:0d:00:61:56:3e:9a:ce:4d:4b:2e:6e:d3:
27:f1:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:42:34 2025 by rpki-client