Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
File: 86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json)
Hash identifier: V8to+0nKx6dTvwzma7a3itBn6sP/qCB3oPh/WLR00Go=
Subject key identifier: 63:AB:D7:28:E2:29:B3:11:C7:A2:5E:72:BD:F5:62:E0:68:22:48:05
Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Certificate serial: 019891474EE3FB2262C5FC13025B02DBD316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
Manifest number: 162A
Signing time: Sun 10 Aug 2025 00:00:26 +0000
Manifest this update: Sun 10 Aug 2025 00:00:26 +0000
Manifest next update: Mon 11 Aug 2025 00:00:26 +0000
Files and hashes: 1: 0yNiuwlEmaGi-GMVCrhtb0jD684.roa (hash: 0JYmDVSwa/kA2DCdsSlQFjDnGZq4KcJ5IykJE11qOfk=)
2: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: E/aiEBpqsWDGgSpY/koYaYmyWmoP9sqHKGxelk8nnr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:4e:e3:fb:22:62:c5:fc:13:02:5b:02:db:d3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414
Validity
Not Before: Aug 10 00:00:26 2025 GMT
Not After : Aug 11 00:00:26 2025 GMT
Subject: CN=63abd728e229b311c7a25e72bdf562e068224805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:52:b8:66:67:91:ab:c7:b0:ef:ad:06:31:
4c:8f:b8:5d:0e:f9:d9:34:cf:71:c5:f4:4f:b7:7c:
e0:73:03:d1:ab:88:51:77:22:8e:ba:66:bb:d5:2d:
35:03:d6:c4:69:9e:6e:47:84:1e:0d:cf:87:10:a3:
38:3a:6a:65:22:d4:02:62:28:25:1e:38:38:1d:0a:
7c:f4:6e:46:6e:9d:4e:b5:c3:58:e5:a5:f3:eb:49:
59:ac:9d:d9:63:8a:60:3a:d7:60:e9:33:b5:5f:04:
3f:1b:6b:d8:92:4c:88:c8:73:00:09:36:de:7c:7f:
4e:46:31:2d:32:dd:d1:9d:bb:9c:47:2d:30:5c:00:
65:c6:8f:a2:d9:ad:46:ec:5e:c6:93:64:97:6c:af:
fc:4e:bc:c1:d1:65:62:7a:7c:da:34:3f:1b:85:12:
0c:42:d2:86:f9:40:54:89:83:69:d4:a7:e2:bc:60:
ac:a1:7b:b6:be:80:b2:3b:c5:f7:f4:11:75:9d:41:
11:b9:2e:40:df:95:0d:73:cc:22:ba:a3:73:94:da:
44:10:93:9e:f4:d8:9a:e4:85:09:ce:d1:4f:fb:e5:
66:da:38:f7:85:e8:26:f1:43:73:98:27:a8:79:50:
6c:04:38:26:c9:70:2f:08:35:ce:15:ff:a4:7d:ad:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AB:D7:28:E2:29:B3:11:C7:A2:5E:72:BD:F5:62:E0:68:22:48:05
X509v3 Authority Key Identifier:
keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d0:85:29:25:59:0e:b9:da:b9:00:4b:b4:6b:eb:c6:34:45:
42:ee:6b:16:f4:80:94:01:05:29:9a:d9:b5:23:c2:ce:41:6b:
86:52:d3:29:01:2f:b5:d0:ca:03:e2:09:0c:0a:aa:ee:e5:3f:
33:c1:c0:d5:3b:c8:88:26:9e:fe:01:8e:8a:ca:0d:49:5d:0c:
d5:d9:a5:b7:db:42:b4:12:a9:4b:e2:0f:ad:a4:d5:25:8b:e9:
90:88:fa:30:75:11:06:c5:0f:49:d4:2b:d1:97:9b:ad:29:89:
ec:6e:f1:ce:19:c3:7d:a1:56:4f:d6:84:2e:12:34:c7:ae:09:
c5:fd:04:e5:b6:a4:da:d3:51:2c:f9:37:ad:b3:a0:c7:15:d0:
1f:d9:e8:58:1d:ac:79:6f:b5:6b:c7:f9:43:8f:dd:35:7c:5f:
99:f7:79:ee:ac:99:ab:fc:59:df:45:e3:fe:dd:82:b0:f0:be:
87:99:30:b6:66:29:fb:47:74:02:c8:6e:19:79:f3:fd:da:41:
a6:90:32:a8:52:95:87:67:cb:66:52:4b:73:47:47:a9:ad:32:
7e:cb:db:35:c4:e8:e4:e4:27:9d:f7:bf:ab:ae:88:63:04:56:
23:f1:bc:bb:eb:50:57:65:dd:30:f1:1a:39:d2:91:5e:99:ee:
9a:5e:93:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRR07j+yJixfwTAlsC29MWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTFhZTBiMDdjZDA1ZWUyNDg0ZjRlZWJjZDQ1Njg0NzM0
NzM0MTQwHhcNMjUwODEwMDAwMDI2WhcNMjUwODExMDAwMDI2WjAzMTEwLwYDVQQD
Eyg2M2FiZDcyOGUyMjliMzExYzdhMjVlNzJiZGY1NjJlMDY4MjI0ODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdJSuGZnkavHsO+tBjFMj7hdDvnZ
NM9xxfRPt3zgcwPRq4hRdyKOuma71S01A9bEaZ5uR4QeDc+HEKM4OmplItQCYigl
Hjg4HQp89G5Gbp1OtcNY5aXz60lZrJ3ZY4pgOtdg6TO1XwQ/G2vYkkyIyHMACTbe
fH9ORjEtMt3RnbucRy0wXABlxo+i2a1G7F7Gk2SXbK/8TrzB0WVienzaND8bhRIM
QtKG+UBUiYNp1KfivGCsoXu2voCyO8X39BF1nUERuS5A35UNc8wiuqNzlNpEEJOe
9Nia5IUJztFP++Vm2jj3hegm8UNzmCeoeVBsBDgmyXAvCDXOFf+kfa1F5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOr1yjiKbMRx6Jecr31YuBoIkgFMB8GA1UdIwQY
MBaAFPOhrgsHzQXuJIT07rzUVoRzRzQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2Et
Yjg0NzdmNTA3M2MxLzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2EtYjg0NzdmNTA3M2Mx
LzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNCFKSVZ
DrnauQBLtGvrxjRFQu5rFvSAlAEFKZrZtSPCzkFrhlLTKQEvtdDKA+IJDAqq7uU/
M8HA1TvIiCae/gGOisoNSV0M1dmlt9tCtBKpS+IPraTVJYvpkIj6MHURBsUPSdQr
0ZebrSmJ7G7xzhnDfaFWT9aELhI0x64Jxf0E5bak2tNRLPk3rbOgxxXQH9noWB2s
eW+1a8f5Q4/dNXxfmfd57qyZq/xZ30Xj/t2CsPC+h5kwtmYp+0d0AshuGXnz/dpB
ppAyqFKVh2fLZlJLc0dHqa0yfsvbNcTo5OQnnfe/q66IYwRWI/G8u+tQV2XdMPEa
OdKRXpnuml6TPw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:44 2025 by rpki-client