Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier: AtoP48tlPZywS9SZ6aHfab2v57FJ3ZX5cg8SKhcYpWY=
Subject key identifier: 1A:74:54:AE:1C:B9:31:94:B9:8E:5D:5D:0D:18:73:E9:3F:A5:19:16
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial: 01976A3C3C99D5B5B43AA6949EAD16C630B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number: 03E3
Signing time: Fri 13 Jun 2025 17:00:21 +0000
Manifest this update: Fri 13 Jun 2025 17:00:21 +0000
Manifest next update: Sat 14 Jun 2025 17:00:21 +0000
Files and hashes: 1: 5EWBzdepm8m1-Fw5ggkBVnYeo3Q.roa (hash: VXD9eDnJ0GXpX+c0YUcqrxEzhI7okMcsDXHvru13uGI=)
2: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: VNsnnMyrhjknW28zHADIMBAPrExTBIpuwu9xsfwxOsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:3c:99:d5:b5:b4:3a:a6:94:9e:ad:16:c6:30:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Validity
Not Before: Jun 13 17:00:21 2025 GMT
Not After : Jun 14 17:00:21 2025 GMT
Subject: CN=1a7454ae1cb93194b98e5d5d0d1873e93fa51916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:8c:cd:90:a1:93:2a:62:08:12:57:26:5d:
38:e9:30:45:56:8f:cd:18:4c:f8:a1:d6:c2:d8:9b:
67:6d:fa:ab:a1:27:9d:cd:d9:17:25:51:a7:ae:fe:
d4:19:28:79:17:e1:2a:2e:ac:c3:f5:23:ec:50:f9:
04:04:6a:cc:a5:01:fd:86:69:3e:b0:86:b0:34:e6:
20:96:5a:dc:a4:af:07:91:0a:e4:0c:c9:37:65:6c:
e6:d0:87:62:55:41:b9:92:c2:81:4d:9c:93:13:85:
17:ce:f0:fc:6c:b0:25:d4:29:49:ac:cb:c8:1a:5c:
9c:82:d3:3b:8e:88:b3:13:a3:65:7b:fa:dd:25:c3:
4a:48:dd:1b:c1:02:30:66:ae:8b:fe:f1:9a:88:03:
17:85:a4:39:78:ae:51:10:3d:f9:35:3f:69:a0:0a:
69:6c:e6:40:2f:81:7f:c3:fc:ee:78:d6:01:34:a5:
f8:4c:02:c2:21:19:51:14:85:36:c8:50:64:ea:2e:
12:df:f2:31:f1:80:e1:fd:00:05:07:17:78:3d:02:
80:d2:84:40:e2:80:a0:93:87:88:d3:62:7a:28:a2:
24:61:ea:d9:2e:1c:94:44:9b:8b:f1:09:ea:d3:f1:
73:0a:90:54:d0:40:e8:5b:ea:bb:ad:c3:88:34:fb:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:74:54:AE:1C:B9:31:94:B9:8E:5D:5D:0D:18:73:E9:3F:A5:19:16
X509v3 Authority Key Identifier:
keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5a:2b:d2:1e:fb:68:8d:76:9e:0a:74:ac:96:d2:80:ec:01:
c9:5b:1a:09:28:85:c6:21:b2:fa:13:c7:43:2c:56:36:d0:d3:
aa:a2:69:88:af:de:43:84:bb:03:9d:c0:43:21:7c:28:84:2e:
64:31:96:8d:7b:58:f5:fd:69:55:e1:04:0c:d7:a3:30:62:a5:
fc:0c:76:b1:1f:52:25:60:59:dd:9d:47:00:09:60:66:26:55:
ab:90:f3:a1:14:cf:a7:2f:77:7e:e1:ee:05:9d:3f:30:ec:2f:
b9:64:7b:d7:90:5b:42:41:ae:a3:c7:26:63:03:66:8a:15:8e:
5b:ae:4d:fc:2c:e8:e3:cd:9b:a5:33:1f:1e:3c:5c:c5:82:5d:
f3:58:46:1c:25:e9:b0:6e:f3:05:19:5d:26:5e:3a:82:b2:c0:
b4:ef:ee:a6:51:d7:67:37:d9:2d:bd:9f:13:ff:4c:3e:8e:5e:
4c:64:25:a7:97:28:12:ec:39:3a:02:e2:fe:e8:d6:05:4f:d3:
dc:eb:56:e4:a5:59:bc:48:d9:fb:cb:c8:38:48:7f:5f:5a:94:
54:da:ea:2c:f8:ef:4e:a2:5b:0f:ad:dc:ba:a9:e9:3d:b3:34:
bc:6d:79:31:a9:55:07:d8:55:00:7d:60:e9:7a:31:a4:f9:6c:
23:ec:1a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:49:13 2025 by rpki-client