Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File: 86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier: UToF6jwps+wVFvi9TKkRL6/FPT2xFHiZ5DiC2odfTTc=
Subject key identifier: 59:72:34:20:F4:4F:E6:20:F9:4B:22:B2:21:38:B8:AF:1B:52:AB:35
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial: 019A4D741BB9AC96B391461DA5F329D5F136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 06:00:46 +0000
Manifest this update: Tue 04 Nov 2025 06:00:46 +0000
Manifest next update: Wed 05 Nov 2025 06:00:46 +0000
Files and hashes: 1: 0yNiuwlEmaGi-GMVCrhtb0jD684.roa (hash: 0JYmDVSwa/kA2DCdsSlQFjDnGZq4KcJ5IykJE11qOfk=)
2: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: TkQMG9uB0Cw6zmEgGzfLRC+fb26DptTt832TPUZIuDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:1b:b9:ac:96:b3:91:46:1d:a5:f3:29:d5:f1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Validity
Not Before: Nov 4 06:00:46 2025 GMT
Not After : Nov 5 06:00:46 2025 GMT
Subject: CN=59723420f44fe620f94b22b22138b8af1b52ab35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:dc:2d:a4:94:a2:50:92:74:32:19:a2:d9:
7e:70:48:73:ee:5b:b2:e3:5e:32:13:f1:a3:aa:9d:
80:fe:fa:bc:41:bf:85:0a:e9:99:39:45:5b:c2:2b:
b5:ee:91:df:78:08:55:21:9d:71:98:c3:23:12:f8:
da:1b:7d:30:2c:7f:2d:3e:20:36:7d:1a:93:79:dc:
43:25:80:eb:93:b5:ac:e2:93:93:7e:d7:a7:a6:9a:
87:fd:7e:59:9f:46:d1:b9:29:07:ad:f2:8d:17:8e:
33:05:d7:38:e9:24:d8:80:60:6c:3e:bc:1a:b4:9a:
8c:6a:37:4f:02:4c:7b:9e:94:92:05:b9:38:fd:84:
27:ec:9f:52:40:f4:0d:95:86:6b:d7:c1:08:bb:3a:
b8:81:e2:8a:cb:06:e6:83:e1:0c:b3:f2:c8:16:b6:
50:22:79:db:4c:77:d5:f0:7f:81:a9:eb:11:df:b6:
51:ee:4d:84:41:2f:58:e3:44:86:0e:cc:5d:7a:ef:
52:65:12:52:70:d3:1b:07:af:43:10:e8:95:b6:14:
2b:2c:aa:b3:31:f9:32:03:81:42:ac:a2:30:0a:af:
2a:a4:3a:9a:cd:56:55:bc:95:cf:76:c5:3e:b5:b3:
70:e2:80:a5:0c:7c:8d:46:ae:05:ff:ef:6e:04:16:
a9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:72:34:20:F4:4F:E6:20:F9:4B:22:B2:21:38:B8:AF:1B:52:AB:35
X509v3 Authority Key Identifier:
keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5b:ae:34:f6:b8:2f:61:c2:b3:a5:06:8d:88:b3:be:db:6a:
3c:4a:ec:d5:a2:08:0a:88:61:f0:6f:4e:ad:52:83:e9:ab:57:
09:33:6d:08:2a:f5:cb:53:86:f4:7e:7b:a4:f9:d9:21:85:2d:
b1:6e:b7:90:e1:a8:50:4b:22:d6:2c:01:07:2b:dc:e9:6b:8e:
18:bf:6b:22:03:0e:c0:21:f4:50:f9:dc:44:0a:51:2d:07:37:
da:07:1c:57:1a:53:c3:de:e1:cd:55:13:cd:3c:b3:77:04:31:
fd:23:f6:74:52:3b:30:bf:1b:bd:69:2a:6f:50:c9:e3:57:30:
89:ff:53:d9:69:ee:42:92:74:09:b1:12:2b:70:83:bb:39:db:
d7:15:a1:d0:6f:77:de:68:ed:95:27:58:fe:b4:53:ee:b2:f9:
0c:1d:fe:a6:08:db:52:6c:1a:11:8a:ca:bf:d1:b1:23:af:f4:
a6:08:e4:ec:92:44:7a:8b:cd:61:fd:48:8d:48:5e:8f:cb:16:
98:3e:a4:9f:48:7a:10:1b:11:a3:75:ac:ae:6e:9f:a7:ea:18:
97:47:52:5c:3a:b0:c0:b6:87:20:42:13:cc:fa:a0:b6:d8:b5:
e1:e2:f8:01:b9:9a:60:c5:3b:b8:3e:70:35:15:7b:72:8e:4a:
32:ff:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:42 2025 by rpki-client