Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: XMi6sVa1FcyooXrJDd+HUtiuPD/LudiZ42N4SoLxKb4=
Subject key identifier: 9D:DC:CA:06:B2:6E:D6:73:D9:0C:5D:69:4E:4B:59:CE:92:23:7B:AA
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 01975FB8F6D53542DBE9DD5B63AABD96CACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 16:00:46 +0000
Manifest this update: Wed 11 Jun 2025 16:00:46 +0000
Manifest next update: Thu 12 Jun 2025 16:00:46 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: n2KUVd23ZZEDyl1ZhjK8DdFeWibw5j1LISzc4G60n9I=)
2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=)
3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b8:f6:d5:35:42:db:e9:dd:5b:63:aa:bd:96:ca:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Jun 11 16:00:46 2025 GMT
Not After : Jun 12 16:00:46 2025 GMT
Subject: CN=9ddcca06b26ed673d90c5d694e4b59ce92237baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:03:87:77:f6:b8:ba:4c:95:eb:b1:3c:ba:b3:
ff:46:6c:d1:0e:ef:86:6d:fb:71:88:6f:8d:17:17:
30:40:38:0b:2f:69:d0:ab:c6:1a:9e:13:7f:76:c2:
c6:8c:7e:ba:3c:aa:9e:fb:3d:0f:42:66:36:48:d9:
c7:d4:e2:34:5d:dd:ca:b9:c6:aa:c0:7d:f3:5d:5b:
89:ec:22:52:a0:1a:c2:dc:9a:0e:0e:da:70:21:f2:
c5:8b:b6:3f:7e:17:bd:fe:b1:51:07:0a:9b:13:39:
e0:1c:2f:71:0a:1e:88:87:38:b9:07:d2:a3:06:c6:
30:16:a3:30:77:74:c7:f5:cb:cc:f4:58:e5:62:60:
13:12:aa:d6:c6:db:57:39:b6:a0:90:05:db:12:9c:
c1:47:4b:d2:78:1e:e9:cf:73:9e:25:21:e0:1c:fa:
55:bf:67:36:54:4c:1c:cf:da:c5:c4:73:7b:bc:1e:
15:aa:da:90:4f:89:17:11:e4:96:64:85:67:cd:c5:
2a:63:66:7d:97:69:17:39:30:ff:cb:25:6d:ec:fc:
ef:17:79:e9:1f:10:ab:9f:b8:9a:b7:31:4c:94:ae:
8a:aa:f8:80:98:de:6f:63:b1:94:50:42:16:08:d7:
77:a4:0d:50:62:c3:fd:a5:64:b6:29:84:01:92:11:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DC:CA:06:B2:6E:D6:73:D9:0C:5D:69:4E:4B:59:CE:92:23:7B:AA
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b4:02:5d:2e:7c:62:c6:7f:ac:fb:4d:38:ea:cb:04:34:1f:
b2:f9:58:ef:64:3b:21:dd:29:36:2f:f5:3e:1a:84:8c:3d:4c:
1a:b0:0b:60:9e:24:75:fd:bd:77:d6:bf:a9:e2:52:8f:ac:7f:
31:3e:bf:87:a4:08:b5:f0:99:68:f9:6d:37:74:97:4f:05:f3:
dd:d2:43:5b:44:66:6c:59:a9:4d:e9:ff:fe:d1:1b:e4:b2:b3:
c2:b5:30:24:71:3f:46:90:99:b0:2a:1c:71:e0:05:bc:ae:1b:
13:ce:67:08:dc:b5:e1:ee:32:58:3e:12:f8:4d:a1:99:03:b1:
53:56:cc:20:ed:6b:ee:49:a6:e1:9b:88:ed:31:94:8c:6c:c9:
9f:cb:01:ea:36:8d:64:23:d6:64:5f:02:73:5a:a0:53:85:9c:
da:36:cb:99:80:27:92:f5:34:8a:2b:97:ae:93:0a:01:2b:ae:
0c:8e:9b:c9:b0:22:c0:54:00:92:67:21:47:69:86:42:5b:2f:
fe:4b:d0:73:ad:78:0f:18:87:28:a9:e1:47:e1:e1:5f:92:c5:
66:93:2f:33:12:f4:d8:ec:b0:b8:fb:2f:08:b5:3b:d7:33:6e:
96:2f:81:e3:cf:1d:47:21:48:67:86:49:f1:49:f2:a6:8e:a5:
b6:41:d6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:32:02 2025 by rpki-client