Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: Rv+I4FibAjnKgD0xr3Z03CVlJqp6I8pRN2icmqW60kk=
Subject key identifier: AB:E0:C9:B3:38:65:68:33:25:6C:58:50:F3:DF:40:21:F5:49:FE:D5
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 01975BDCEA2CD6353A3BD27DCF1605E4966C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 1587
Signing time: Tue 10 Jun 2025 22:01:33 +0000
Manifest this update: Tue 10 Jun 2025 22:01:33 +0000
Manifest next update: Wed 11 Jun 2025 22:01:33 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: dphGt3yAcEevLOs3w7xazkXI+YVEGhLO2ocIQcLyWnA=)
2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=)
3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:ea:2c:d6:35:3a:3b:d2:7d:cf:16:05:e4:96:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Jun 10 22:01:33 2025 GMT
Not After : Jun 11 22:01:33 2025 GMT
Subject: CN=abe0c9b338656833256c5850f3df4021f549fed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:00:47:6c:5c:26:82:b3:b2:22:08:e7:6d:
6b:6a:af:f5:25:5a:a7:75:38:90:fb:56:d9:ee:0c:
3c:8a:a5:e9:83:87:89:cd:85:93:3e:c7:06:23:da:
50:86:0d:47:76:1e:85:29:ee:8b:07:e1:dd:e6:ed:
4a:da:aa:a1:a5:10:dd:37:50:31:a7:01:e7:f0:61:
f2:c9:41:b4:af:63:10:73:46:66:e3:13:76:cd:98:
6a:93:1c:54:42:51:6c:70:9c:61:98:0d:92:82:7f:
24:b1:5f:16:83:07:a0:41:37:7f:aa:20:ca:bb:dd:
26:b3:d3:c7:d8:d4:f7:6a:79:93:c7:6a:42:8a:ec:
f9:50:8a:67:6f:a7:0e:e1:9d:ed:44:c7:fb:56:d5:
ff:32:84:7f:52:db:54:28:22:0b:c0:15:7a:5b:cd:
55:19:ab:38:aa:91:8e:18:01:b6:72:00:c0:d9:31:
5e:32:52:2f:55:96:79:cd:0b:aa:34:1f:dc:d9:34:
c3:98:49:6a:75:8d:17:98:da:4c:05:16:42:4e:48:
63:d1:2c:17:57:e4:f9:0c:81:f0:6d:11:b6:78:9b:
71:75:40:cf:31:b4:03:0d:1b:56:7c:1f:74:f3:34:
d4:7c:1d:c8:33:10:65:e3:ad:3c:09:8b:16:c4:bc:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E0:C9:B3:38:65:68:33:25:6C:58:50:F3:DF:40:21:F5:49:FE:D5
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:46:96:78:f6:a2:c8:39:44:94:c7:3c:87:af:e6:5b:6b:f5:
57:bc:d8:e2:a8:62:2d:44:56:47:3d:60:93:1a:ad:93:b3:ac:
4a:9e:65:28:02:29:b3:63:53:1a:44:25:4a:d1:2f:9e:c6:9a:
82:40:2f:60:28:86:f0:8b:4b:54:d2:b0:b7:14:d3:c2:06:5c:
fa:1e:34:f4:8b:e4:00:ce:a0:33:f1:a0:9e:34:67:e9:26:70:
9e:f3:e1:ba:61:59:13:af:aa:f4:ba:17:36:0b:63:44:ca:51:
ea:d4:97:10:21:d6:20:a7:28:6b:df:6e:1d:c7:b2:7b:24:0a:
ec:f8:f9:39:ef:68:6d:47:c5:ad:d2:6c:02:e7:26:20:3f:8c:
bc:6a:e7:9e:8a:5d:26:f0:6d:d8:82:a4:fd:a6:1b:06:af:27:
02:00:09:ad:c2:dd:af:39:2e:a8:2e:36:39:b0:42:27:61:e3:
74:8b:ae:6a:39:ee:45:6b:20:f3:39:0c:c8:81:78:27:bd:99:
9b:53:e7:7f:24:59:cf:60:3a:df:bc:4a:a5:17:e1:ad:a8:d6:
cf:78:89:07:92:c8:ab:2a:82:f1:d8:42:92:45:74:df:16:50:
bb:f5:61:d2:6e:de:d2:36:3a:57:30:75:14:94:c6:de:80:96:
5f:3a:1c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:00:40 2025 by rpki-client