Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: 5DBQxTuhG3cZDBsiGEXanO9zlaUKchrREG5h3PUxdlM=
Subject key identifier: 56:DE:3A:E4:9C:05:8D:27:F0:F9:CC:83:7D:41:82:F2:E6:F6:FF:98
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 0198CBA6277A04DD9082A76C20EC7E5EB935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 0387
Signing time: Thu 21 Aug 2025 08:02:00 +0000
Manifest this update: Thu 21 Aug 2025 08:02:00 +0000
Manifest next update: Fri 22 Aug 2025 08:02:00 +0000
Files and hashes: 1: 0aywYTi5Sc6yVfxfBxLpHYbIDYs.roa (hash: XltTkT+5iNEXCHy8WnwN+9b+D1DDxHii8Hapue8Rijw=)
2: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: cqGV6vpnqak80kgZ5yUSzRuiUeqram5bYscbNIO7wNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:a6:27:7a:04:dd:90:82:a7:6c:20:ec:7e:5e:b9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Aug 21 08:02:00 2025 GMT
Not After : Aug 22 08:02:00 2025 GMT
Subject: CN=56de3ae49c058d27f0f9cc837d4182f2e6f6ff98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:8f:f0:d7:05:d2:7d:63:df:7e:cd:23:ea:
57:4f:ff:a5:e4:2f:97:b8:37:0e:46:79:49:51:c7:
21:55:23:63:61:ff:95:5e:5a:f9:ac:dc:61:95:e2:
19:6e:08:4b:c7:95:3b:4d:2e:a3:9e:28:34:ec:82:
76:86:0a:ee:53:a9:ea:34:75:ca:31:02:91:3a:6f:
99:7f:ff:fd:3c:7d:a2:5f:66:eb:f6:be:89:12:a0:
54:8d:81:ad:3b:52:65:93:54:6d:d1:9a:21:b4:9e:
51:e9:cb:54:aa:20:d1:80:73:0a:a5:cb:6a:45:15:
17:01:01:04:09:d8:c7:77:41:c0:af:7f:91:76:f7:
45:1a:c4:32:66:8a:91:73:54:cc:d5:9e:07:ed:af:
e7:7d:76:bc:d6:7d:46:b5:84:91:87:26:0a:d2:28:
fd:25:94:cf:e1:7b:64:d7:85:c6:ae:97:e4:a3:f9:
f4:43:35:6b:bd:bf:86:00:ee:72:47:83:a9:2d:01:
05:bb:26:29:f3:9f:04:7d:83:80:81:85:ed:85:2a:
7b:f5:d5:3a:ea:e8:fe:cd:68:6e:3c:01:32:d0:74:
e0:6f:a3:01:41:34:2d:fa:44:4e:a0:8a:3a:70:17:
6f:8d:b7:2f:a1:6b:cd:9c:94:d2:58:7b:7e:c6:ea:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DE:3A:E4:9C:05:8D:27:F0:F9:CC:83:7D:41:82:F2:E6:F6:FF:98
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a5:b4:8f:49:f7:20:09:15:04:f0:f4:14:58:ac:7e:d3:3a:
01:17:a8:28:34:1c:f9:1f:77:b2:76:7a:28:0c:e5:f8:af:b2:
67:31:63:f7:e5:74:0b:b2:25:da:61:90:bb:26:91:ad:fa:03:
1b:79:9b:fb:c4:10:f2:7b:98:07:66:12:50:08:0a:d9:86:0c:
9c:ee:a0:8c:99:66:3d:4d:b1:4e:71:ac:fc:17:27:69:88:30:
a8:02:9a:0e:8e:11:bf:ae:16:e4:4a:98:01:dd:dc:f5:ff:96:
9d:be:5c:dd:9c:1d:ec:19:8c:0f:54:dd:fd:8f:a0:5b:64:8f:
a6:ef:77:3a:9a:f1:e2:57:fc:e9:8b:18:65:35:cc:92:7b:7b:
21:9d:ae:24:e3:9e:fa:4f:35:28:8b:49:95:f1:b4:80:d0:23:
6a:b4:d5:2a:df:7f:fe:32:b5:46:e8:02:9f:db:e1:cf:b8:a6:
bc:c9:14:37:a8:d7:b3:da:ff:20:09:3e:a4:19:07:27:d2:2b:
33:21:ba:80:3a:5e:21:62:15:31:7c:71:81:f3:62:ed:96:0d:
31:e6:83:53:88:8a:82:0c:38:53:2c:6e:4b:1a:51:3f:e7:3a:
c4:2e:9d:08:1f:65:a7:67:a7:52:1a:12:bc:5a:b0:67:97:d1:
52:7d:32:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 15:24:26 2025 by rpki-client