Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: Xc3MicJ2H5qhn71T0PAocRVxEFFzARZg5vfH6DRm8GY=
Subject key identifier: F7:E6:A2:64:98:1E:E7:A0:BD:7E:A1:AF:1A:2C:9F:76:49:F2:A6:24
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 019649A11335AB21723EDFCFD62CA29EC6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 16:00:15 +0000
Manifest this update: Fri 18 Apr 2025 16:00:15 +0000
Manifest next update: Sat 19 Apr 2025 16:00:15 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: uP37Wergosa/+oYwy059F/e/avLUDZ/K3gAa8IjvDo4=)
2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=)
3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:13:35:ab:21:72:3e:df:cf:d6:2c:a2:9e:c6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Apr 18 16:00:15 2025 GMT
Not After : Apr 19 16:00:15 2025 GMT
Subject: CN=f7e6a264981ee7a0bd7ea1af1a2c9f7649f2a624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0f:a2:4a:1d:9d:f5:94:bc:f6:3e:8e:61:4f:
09:a6:33:d8:ac:cc:4e:c8:05:c3:f2:7a:eb:d0:cb:
b8:84:01:b4:5f:ec:13:f5:06:0e:d4:b9:d1:13:a7:
4d:7d:a3:10:b6:14:75:b5:02:5b:25:23:85:25:9d:
b8:ac:59:22:70:c2:a7:ec:44:0e:ea:9c:6d:64:5a:
92:e0:e8:6f:88:4e:b3:88:bb:7b:b1:2b:79:bd:89:
4a:2b:f0:c4:ab:1b:c2:d9:74:e7:04:69:f3:9d:cf:
de:e6:cd:95:2d:fa:ee:d6:23:16:5c:7f:e7:ae:31:
5d:a5:11:e4:a0:f8:3b:43:99:b2:0f:20:2d:b8:2a:
50:9a:3c:c0:19:4c:5d:0a:61:56:2f:7a:02:f1:3f:
ba:5a:64:46:6f:18:49:93:10:5b:cf:65:6e:03:36:
e8:d2:2b:ef:a1:51:5a:26:e6:de:a5:80:45:7b:3f:
98:8f:84:71:5b:92:e4:b6:da:71:76:f4:5e:4c:f6:
01:53:37:aa:65:6c:dc:c7:58:ca:9f:56:5f:2b:38:
7c:25:8b:fd:b7:6a:19:ea:8c:2c:32:55:1d:c1:0c:
ae:e5:48:ca:ee:6f:5e:aa:f8:a4:49:85:ab:12:7e:
03:46:80:98:89:70:08:10:5c:14:13:d0:c6:fa:02:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E6:A2:64:98:1E:E7:A0:BD:7E:A1:AF:1A:2C:9F:76:49:F2:A6:24
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ff:e6:10:5d:b3:31:06:1b:63:8a:e2:9c:b5:0e:87:f9:c6:
b6:20:33:57:d9:7b:76:b7:d8:21:a8:d3:a5:bb:5b:50:eb:d6:
dd:b0:be:25:40:f1:05:7a:db:e6:df:ed:2a:04:46:dd:1b:df:
47:6e:4b:ae:03:cb:3b:0c:52:4d:bb:ae:8e:9d:62:5f:aa:8e:
aa:17:59:d6:11:ff:22:c2:3f:28:bd:70:03:43:a1:59:42:5f:
2c:8e:e8:60:b7:62:ad:4c:43:2d:89:24:32:44:96:38:76:bd:
f8:1a:c9:58:a6:22:8b:0a:14:77:51:0b:80:2f:2a:ea:0a:39:
dd:61:aa:57:7f:e0:d9:2d:70:07:13:8d:58:fa:4b:25:86:eb:
ee:41:6b:01:b7:13:3a:c0:e4:10:70:cb:3c:d9:f7:1c:4a:5a:
a1:56:82:d7:0b:d2:01:d1:5b:73:23:8e:9b:df:2b:b8:7f:b4:
4b:1a:31:69:d4:74:25:84:97:4a:bf:68:6d:5d:d7:3f:57:5f:
03:31:c7:7b:ff:b8:e3:93:98:f5:c6:58:5d:b5:8e:55:04:a0:
e3:8e:fc:b7:a2:7c:44:27:50:8e:97:f7:3d:2b:78:f9:56:60:
2c:fa:a7:52:e8:4f:01:55:01:83:d5:37:4a:ab:0c:80:b7:48:
a6:ed:ba:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJoRM1qyFyPt/P1iyinsbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYWM4YzdlMzJiYWY3NzhiOGM0NTFhMmQyNGNjNjgxOTY5
NjRiZmMwHhcNMjUwNDE4MTYwMDE1WhcNMjUwNDE5MTYwMDE1WjAzMTEwLwYDVQQD
EyhmN2U2YTI2NDk4MWVlN2EwYmQ3ZWExYWYxYTJjOWY3NjQ5ZjJhNjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA+iSh2d9ZS89j6OYU8JpjPYrMxO
yAXD8nrr0Mu4hAG0X+wT9QYO1LnRE6dNfaMQthR1tQJbJSOFJZ24rFkicMKn7EQO
6pxtZFqS4OhviE6ziLt7sSt5vYlKK/DEqxvC2XTnBGnznc/e5s2VLfru1iMWXH/n
rjFdpRHkoPg7Q5myDyAtuCpQmjzAGUxdCmFWL3oC8T+6WmRGbxhJkxBbz2VuAzbo
0ivvoVFaJubepYBFez+Yj4RxW5LkttpxdvReTPYBUzeqZWzcx1jKn1ZfKzh8JYv9
t2oZ6owsMlUdwQyu5UjK7m9eqvikSYWrEn4DRoCYiXAIEFwUE9DG+gIWVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfmomSYHuegvX6hrxosn3ZJ8qYkMB8GA1UdIwQY
MBaAFPOsjH4yuvd4uMRRotJMxoGWlkv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjkt
NDVjNTY4ZjhhMjdjLzEvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjktNDVjNTY4ZjhhMjdj
LzEvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaf/mEF2z
MQYbY4rinLUOh/nGtiAzV9l7drfYIajTpbtbUOvW3bC+JUDxBXrb5t/tKgRG3Rvf
R25LrgPLOwxSTbuujp1iX6qOqhdZ1hH/IsI/KL1wA0OhWUJfLI7oYLdirUxDLYkk
MkSWOHa9+BrJWKYiiwoUd1ELgC8q6go53WGqV3/g2S1wBxONWPpLJYbr7kFrAbcT
OsDkEHDLPNn3HEpaoVaC1wvSAdFbcyOOm98ruH+0SxoxadR0JYSXSr9obV3XP1df
AzHHe/+445OY9cZYXbWOVQSg4478t6J8RCdQjpf3PSt4+VZgLPqnUuhPAVUBg9U3
SqsMgLdIpu26bw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:40:50 2025 by rpki-client