Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: JbOqsZ/kEGn94lksQxAXlkiFPPkZ2ApgX97gdHWtanU=
Subject key identifier: 9D:ED:4C:16:C5:0C:8C:CA:05:09:99:96:24:53:A4:64:53:56:53:A3
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 019A71B7A013E8A1102ABA78BF4D96E251E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: yMB8i3MNwZ3y8+u2HUcaVcUSxw6tmHZgemb3Jq4H4Cg=)
2: Pr7YGGLPe8s_S4LRz9ziv5ucbAw.roa (hash: sx9n+qGnhP0I6sp10kmNLeGSUg0Fv6GPJl7WmFjWTnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a0:13:e8:a1:10:2a:ba:78:bf:4d:96:e2:51:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=9ded4c16c50c8cca050999962453a464535653a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:8d:1d:fb:5f:fe:68:10:95:30:a0:12:20:
0c:a9:64:2c:5d:6b:46:3e:af:ea:a8:d3:9d:bb:08:
98:bb:5f:d3:13:84:f4:93:51:51:c2:d4:6f:17:e3:
62:30:4c:b7:d7:fa:ff:ed:09:31:05:66:0d:7e:0c:
0c:01:da:52:46:32:ae:6a:d5:46:a6:7b:ff:11:24:
df:f4:c6:b0:f9:e4:16:a8:33:f3:ab:0d:31:3b:11:
bd:5c:67:d8:9e:09:fa:a4:2c:dd:66:4b:86:cc:f5:
6d:c7:3f:4c:51:9d:65:9f:55:4a:ee:72:64:8c:69:
3e:bf:84:24:5a:85:ba:51:ce:c0:15:d9:00:9f:66:
21:00:d4:d9:05:c3:f5:92:2b:e2:bd:d6:da:19:e0:
4a:63:49:0a:30:9f:2e:e1:ab:71:73:11:22:dc:0b:
c8:f8:8d:5f:ed:1b:3e:13:b5:53:cc:da:d3:85:d6:
b7:5d:36:83:02:0a:d4:43:de:47:db:1e:16:5f:8c:
cf:5f:3d:f8:39:32:2a:32:b1:ac:86:f6:38:64:e6:
3d:bb:77:39:3d:ad:fa:8f:89:7b:50:17:b4:7f:12:
76:f7:0c:df:82:d8:28:05:a0:f7:69:4c:5c:b9:c9:
b4:dd:3e:c6:62:bf:bb:8c:08:85:88:7a:8a:fc:bd:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:ED:4C:16:C5:0C:8C:CA:05:09:99:96:24:53:A4:64:53:56:53:A3
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a0:de:6e:ba:e2:e1:04:10:fd:74:ca:2e:ca:0c:65:e9:bc:
bd:53:4f:4c:7b:37:d9:2d:1f:72:f4:ad:26:95:76:9e:18:0a:
f3:79:ac:27:64:54:69:9a:07:d3:01:1a:ba:fa:d6:db:59:d6:
79:96:38:01:df:c8:b3:39:dc:83:51:2d:a6:01:1f:8c:ce:f5:
f2:ad:ef:2f:de:2a:f3:e2:53:2f:e3:c5:82:d4:fe:32:9a:ec:
1a:5e:c8:1e:fe:82:13:05:62:5a:12:59:47:7e:40:ad:f4:b0:
67:9e:28:93:71:91:cb:d1:81:07:cc:b1:37:ea:79:b4:35:d8:
4c:8e:29:51:96:85:ed:6e:bd:04:50:ea:6b:b2:82:7d:c2:e6:
58:d1:d9:62:16:e0:da:09:d0:6c:31:9c:a3:2b:4d:ba:0f:b1:
e2:ca:08:26:a0:17:79:99:ac:63:f7:69:44:20:fc:46:3b:b4:
53:b9:ba:c2:7c:9b:20:bd:e0:1e:5b:cf:3f:a0:bc:f5:4d:cd:
1a:f2:24:6f:f6:39:21:0e:b0:a7:f7:23:ef:c9:81:bb:69:b9:
87:d9:ef:f4:40:d8:7f:c9:00:65:f5:51:0c:00:25:da:f3:90:
73:18:72:79:8a:4a:54:70:5c:1c:d6:da:33:d1:19:8c:5d:ee:
96:18:3a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:41 2025 by rpki-client