Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier: TZ5Qu6P3xKNqXO/C42AcHAGT6sMKlJNqNMzse+T497s=
Subject key identifier: 72:AB:29:CD:3D:74:DB:9C:42:EA:33:1C:BD:B5:05:E6:2A:79:D5:E4
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial: 019889FC0DF709455A1E392894CBC450FA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number: 0478
Signing time: Fri 08 Aug 2025 14:00:53 +0000
Manifest this update: Fri 08 Aug 2025 14:00:53 +0000
Manifest next update: Sat 09 Aug 2025 14:00:53 +0000
Files and hashes: 1: 5EWBzdepm8m1-Fw5ggkBVnYeo3Q.roa (hash: VXD9eDnJ0GXpX+c0YUcqrxEzhI7okMcsDXHvru13uGI=)
2: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: l0h1PCwd0EbzufYBDjclJuy5VrYRkA1oKVbtzjk8lIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fc:0d:f7:09:45:5a:1e:39:28:94:cb:c4:50:fa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Validity
Not Before: Aug 8 14:00:53 2025 GMT
Not After : Aug 9 14:00:53 2025 GMT
Subject: CN=72ab29cd3d74db9c42ea331cbdb505e62a79d5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:f4:f3:f6:d0:2e:ea:2d:60:c3:dd:4a:a2:
cf:d3:32:56:f7:56:29:9a:d9:71:55:48:b8:3e:fa:
0a:3e:9b:5f:4d:c2:be:a2:9c:58:d7:cd:8e:7b:49:
6c:d3:16:0d:20:0d:41:95:ac:80:c2:0c:48:cf:ff:
7e:51:cb:c7:e2:8a:b9:99:bc:a8:ce:f2:50:0d:c4:
69:30:98:07:9b:3f:f5:9b:d1:51:9e:e4:47:36:f9:
88:4b:56:9a:ed:be:08:56:71:1c:5c:0b:82:d0:00:
95:3c:23:a7:ad:e6:c9:46:4a:f9:d4:18:ef:08:07:
56:51:29:6c:44:f5:42:84:38:57:f0:66:5b:61:3f:
49:b5:4b:ac:a2:ff:40:97:0a:63:d7:a1:58:03:e8:
75:58:a4:b1:a9:21:b2:19:64:37:4b:35:b3:d7:69:
43:93:55:df:02:4e:cf:a4:7f:f5:35:6a:a2:14:02:
cc:67:da:e4:cf:36:34:54:de:6d:ae:34:d6:f8:c1:
30:e0:0f:1f:f5:87:23:67:d7:39:53:aa:ee:83:17:
18:97:fe:1d:cc:d9:78:db:1b:7c:4d:f4:21:8b:e1:
42:19:09:ed:d6:44:fd:b4:b0:b2:31:f2:5e:e5:86:
75:ef:3b:53:a7:8b:2b:cd:7c:25:d1:af:ce:d3:a3:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AB:29:CD:3D:74:DB:9C:42:EA:33:1C:BD:B5:05:E6:2A:79:D5:E4
X509v3 Authority Key Identifier:
keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2a:95:2d:c4:df:db:10:1f:6f:a2:f9:6e:08:1d:de:d6:c5:
2e:81:b6:65:18:75:2a:f3:8e:6f:53:9b:cb:72:93:2e:6e:62:
51:ce:17:7e:3f:2a:23:37:ae:c0:2d:b8:d8:54:d6:e3:3d:08:
ee:bc:33:b8:b7:9e:f8:f1:ca:03:5c:a5:d5:a9:2c:d6:bb:7f:
eb:c8:c7:2d:ea:10:d0:49:14:a7:8d:5c:3f:b9:de:d4:42:50:
95:3c:e5:df:9f:ec:0f:01:fc:df:e4:c8:db:9f:b5:83:75:47:
9b:80:1c:06:34:20:de:0b:ac:e8:6f:ca:a2:58:5b:52:5f:09:
c3:bd:01:03:f5:36:4d:d3:85:c9:86:dc:0a:7f:08:3f:59:69:
56:fb:81:8b:45:0f:40:05:fb:ad:c9:f5:c2:e8:70:0c:45:a9:
a4:05:07:7a:e7:f8:67:05:68:00:e1:be:0b:2a:10:6f:70:db:
bb:8e:d0:68:5c:b6:44:a1:39:d3:04:98:71:5e:c4:3c:90:cd:
c8:cb:6b:3a:e5:a9:37:3f:f8:16:92:e1:60:cd:fb:8f:2e:52:
2b:ff:12:87:b6:88:c9:5a:25:d1:ee:55:34:22:e8:37:fd:1e:
81:4f:44:17:65:24:ee:57:06:13:9d:0a:c9:10:d1:01:ab:14:
a5:ed:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:22:20 2025 by rpki-client