Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: Qa+xp8F9c8Hfc8USxAParIIkgrSnEFMlVLxMmfdvTNI=
Subject key identifier: 3A:F0:D1:3D:32:89:27:ED:CD:2D:DB:CA:D7:5E:DC:85:97:46:A5:F5
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 01974967FC7F733D50D5AEC65F84783AB494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 02BF
Signing time: Sat 07 Jun 2025 08:00:41 +0000
Manifest this update: Sat 07 Jun 2025 08:00:41 +0000
Manifest next update: Sun 08 Jun 2025 08:00:41 +0000
Files and hashes: 1: 0aywYTi5Sc6yVfxfBxLpHYbIDYs.roa (hash: XltTkT+5iNEXCHy8WnwN+9b+D1DDxHii8Hapue8Rijw=)
2: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: qoB5veQ+P8mdHXpE5gzWJjWBnkMQ3tsBrn3LRyheXKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:fc:7f:73:3d:50:d5:ae:c6:5f:84:78:3a:b4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Jun 7 08:00:41 2025 GMT
Not After : Jun 8 08:00:41 2025 GMT
Subject: CN=3af0d13d328927edcd2ddbcad75edc859746a5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:9a:8c:bd:4b:9d:31:29:6e:12:66:17:82:
f8:a6:35:dd:f3:0e:ba:99:2a:47:03:01:0b:50:1b:
98:8f:a1:c5:5d:b0:d7:4f:12:63:ca:5e:57:86:69:
f3:ec:60:bb:d0:11:82:0c:5e:38:79:13:b4:60:cb:
24:9f:ed:28:35:75:90:25:c8:e5:8c:6d:fb:06:48:
fd:fe:cf:ff:fc:0a:f4:a8:5f:52:45:4a:87:45:6b:
97:dc:4c:6e:9e:10:dd:db:c8:ed:b8:68:18:5e:b2:
09:31:56:57:5c:a6:0d:73:35:20:8b:0c:26:9e:10:
55:5b:3d:b1:bd:99:3e:d5:be:d8:40:a9:b1:f4:49:
ef:5c:75:4b:8f:c4:0d:7e:10:09:94:26:67:c8:86:
5d:de:93:92:d7:7b:ec:40:64:2c:5e:a8:24:b0:5d:
91:e6:34:26:9a:22:c5:9b:73:49:6e:bf:0d:ee:7c:
8e:1b:4a:87:ac:e2:ad:e4:4b:fb:0e:fa:db:cc:e3:
7e:87:32:f4:42:cf:bf:12:b7:1d:bf:f5:32:56:45:
24:f3:07:23:b9:f4:00:2d:76:f7:18:5b:7b:a4:77:
04:30:34:9b:74:29:e2:30:90:d7:a1:c9:74:0e:f1:
92:25:61:b9:00:27:6d:aa:45:ae:c3:49:34:4a:48:
50:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F0:D1:3D:32:89:27:ED:CD:2D:DB:CA:D7:5E:DC:85:97:46:A5:F5
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cd:dc:49:de:7a:18:70:65:4e:41:a5:bf:26:3c:73:b4:c1:
01:f5:6e:cb:e8:17:53:5d:28:b3:67:38:a5:78:2d:49:60:cb:
ea:81:8a:e4:9d:c9:a0:b4:0b:de:ed:e7:99:4d:fe:b8:17:f6:
14:ee:81:6f:4c:fc:6b:4b:8a:c9:9d:80:1b:71:a7:06:ee:fa:
98:de:04:af:95:5e:87:96:84:44:1c:81:60:50:2a:a5:9c:ad:
f2:8c:65:d0:32:6f:fe:dd:c7:47:cc:92:09:97:b2:dc:8e:cf:
2a:05:1a:0d:91:f8:01:ba:af:8c:5d:46:c0:72:0c:28:80:e1:
73:d6:f1:b7:a3:05:54:13:3d:b0:51:bc:09:d5:61:d9:fa:e3:
01:e2:39:28:37:4d:6a:97:e0:4f:2e:f0:f6:f5:93:97:c5:74:
89:e0:49:d7:0f:dd:30:a7:de:64:50:30:92:59:d6:fb:fc:82:
48:9a:3b:78:1a:a8:bb:2f:72:6a:2b:df:d8:f2:aa:d8:62:42:
71:2f:b4:0a:d7:af:d6:eb:c0:b6:50:a1:88:cf:30:1f:3d:15:
bc:c0:62:4f:cb:7b:e9:0c:fa:5e:b5:53:1d:3f:06:17:0c:79:
d1:1b:38:bf:9e:70:be:66:ca:54:81:e6:28:f8:76:b7:6a:bc:
7e:96:32:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:58 2025 by rpki-client