Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: PGO1aGTfIvvqyCNHBOtlQXMIp0s5N55INyQb/7eD9+g=
Subject key identifier: 02:05:EF:CF:72:97:F8:E3:69:57:97:8F:E8:14:FE:9F:67:F5:21:70
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 019759EE722AA8E6A045C3D7F20AA8C5B9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 13:01:28 +0000
Manifest this update: Tue 10 Jun 2025 13:01:28 +0000
Manifest next update: Wed 11 Jun 2025 13:01:28 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: QYGOMEKQRxpL4RaNdcD+1kkBFP060WD/ltDyXdxFUQg=)
2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=)
3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ee:72:2a:a8:e6:a0:45:c3:d7:f2:0a:a8:c5:b9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Jun 10 13:01:28 2025 GMT
Not After : Jun 11 13:01:28 2025 GMT
Subject: CN=0205efcf7297f8e36957978fe814fe9f67f52170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:86:ce:e6:ab:e1:c5:b6:06:d6:d0:c8:fa:
1a:80:ce:41:c6:fd:c9:e4:35:19:09:d7:4d:d6:bc:
ec:d5:ed:71:64:6d:ff:b3:02:1c:52:06:78:5e:76:
d4:b1:51:44:df:52:6b:9e:72:fc:f7:ff:1b:75:3e:
d0:02:a0:e3:14:ff:af:c8:b5:4f:06:e3:f0:74:95:
1f:de:e7:c0:3b:a1:84:d0:c2:cb:36:89:69:fd:09:
fa:1f:28:d9:1b:47:c6:41:84:78:48:c2:ea:58:03:
9f:60:06:c1:27:f1:8a:bb:1a:31:27:bc:a8:f0:35:
ef:f8:17:b6:48:87:1b:2b:d5:71:11:6f:a9:40:8f:
93:63:a0:55:3b:5f:78:90:65:b4:2b:db:76:2a:a0:
ba:70:c9:78:fe:7f:0c:4a:27:3c:4a:bc:9c:2c:81:
ec:ab:84:99:93:a9:7d:85:53:b9:b4:dd:b6:32:8e:
be:2b:29:3a:2b:4b:e9:73:55:e8:c9:51:46:eb:b3:
d7:ab:7d:81:6c:96:f0:15:8b:bd:ad:05:98:28:00:
eb:f8:5f:2b:3f:4f:37:10:4c:de:ee:9d:f4:74:fd:
ee:58:c8:59:e3:d3:60:50:c0:38:6f:6b:b9:19:ca:
86:3e:ca:52:14:05:fe:27:6a:21:34:3f:b7:cc:8e:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:05:EF:CF:72:97:F8:E3:69:57:97:8F:E8:14:FE:9F:67:F5:21:70
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:93:43:bf:04:85:58:7d:d4:cd:cd:e5:94:f7:c2:20:0e:b3:
3c:95:26:db:92:8d:0f:72:a9:87:a6:53:b2:f5:bf:fd:12:9d:
a1:83:3b:41:de:65:da:4e:16:02:d8:2c:09:b2:76:7f:18:a3:
67:21:47:3f:dc:cd:45:2d:df:d7:6e:3f:c9:11:c2:20:8f:05:
db:ab:98:67:3d:ae:41:f8:c4:dc:3b:b7:6a:50:72:e1:e6:64:
84:29:0f:27:28:e9:21:fa:70:ea:73:73:d2:2f:52:19:04:f4:
f5:ac:ce:db:33:62:30:66:d5:84:6f:bb:cb:33:73:cb:27:cf:
47:40:50:1a:8f:f4:d2:c9:06:95:49:96:e6:4b:2e:f2:c0:20:
22:ea:0a:f6:6b:bc:bc:dd:12:b5:75:9e:d5:46:92:72:dd:b1:
50:51:4f:af:2c:c3:b2:13:72:40:d0:2c:35:66:83:97:47:92:
ca:00:c7:71:6c:85:cb:3a:4a:b9:82:24:37:fc:0c:39:75:45:
e7:9b:af:46:59:c7:fb:20:c0:28:d0:e5:de:6f:3a:00:bc:ee:
a3:63:6d:e3:5f:79:0c:1b:3a:07:e9:67:1f:2c:a0:bc:a7:5d:
48:bd:f7:ac:9b:8e:e8:e9:3e:b2:40:d4:40:b8:93:88:ad:fd:
b5:ab:1b:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZ7nIqqOagRcPX8gqoxbnuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYWM4YzdlMzJiYWY3NzhiOGM0NTFhMmQyNGNjNjgxOTY5
NjRiZmMwHhcNMjUwNjEwMTMwMTI4WhcNMjUwNjExMTMwMTI4WjAzMTEwLwYDVQQD
EygwMjA1ZWZjZjcyOTdmOGUzNjk1Nzk3OGZlODE0ZmU5ZjY3ZjUyMTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvmGzuar4cW2BtbQyPoagM5Bxv3J
5DUZCddN1rzs1e1xZG3/swIcUgZ4XnbUsVFE31JrnnL89/8bdT7QAqDjFP+vyLVP
BuPwdJUf3ufAO6GE0MLLNolp/Qn6HyjZG0fGQYR4SMLqWAOfYAbBJ/GKuxoxJ7yo
8DXv+Be2SIcbK9VxEW+pQI+TY6BVO194kGW0K9t2KqC6cMl4/n8MSic8SrycLIHs
q4SZk6l9hVO5tN22Mo6+Kyk6K0vpc1XoyVFG67PXq32BbJbwFYu9rQWYKADr+F8r
P083EEze7p30dP3uWMhZ49NgUMA4b2u5GcqGPspSFAX+J2ohND+3zI7arQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIF789yl/jjaVeXj+gU/p9n9SFwMB8GA1UdIwQY
MBaAFPOsjH4yuvd4uMRRotJMxoGWlkv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjkt
NDVjNTY4ZjhhMjdjLzEvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjktNDVjNTY4ZjhhMjdj
LzEvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApNDvwSF
WH3Uzc3llPfCIA6zPJUm25KND3Kph6ZTsvW//RKdoYM7Qd5l2k4WAtgsCbJ2fxij
ZyFHP9zNRS3f124/yRHCII8F26uYZz2uQfjE3Du3alBy4eZkhCkPJyjpIfpw6nNz
0i9SGQT09azO2zNiMGbVhG+7yzNzyyfPR0BQGo/00skGlUmW5ksu8sAgIuoK9mu8
vN0StXWe1UaSct2xUFFPryzDshNyQNAsNWaDl0eSygDHcWyFyzpKuYIkN/wMOXVF
55uvRlnH+yDAKNDl3m86ALzuo2Nt4195DBs6B+lnHyygvKddSL33rJuO6Ok+skDU
QLiTiK39tasbSA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 22:47:07 2025 by rpki-client