Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: lOV9MhWYLR8llGMqh3uHqs21LyI+JuG5o4DgsFx/MvU=
Subject key identifier: 7D:D5:A5:17:0A:8D:9A:2E:2C:75:BB:DA:A4:C8:EF:6F:3F:38:F4:28
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 019892C7D74D52FC5FDCE9925E9183A8AAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 07:00:26 +0000
Manifest this update: Sun 10 Aug 2025 07:00:26 +0000
Manifest next update: Mon 11 Aug 2025 07:00:26 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: Yd7owuBMjYNOuqjkAtTrFc11kC3qxP8HaDOHC86V78I=)
2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=)
3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c7:d7:4d:52:fc:5f:dc:e9:92:5e:91:83:a8:aa:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: Aug 10 07:00:26 2025 GMT
Not After : Aug 11 07:00:26 2025 GMT
Subject: CN=7dd5a5170a8d9a2e2c75bbdaa4c8ef6f3f38f428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:31:2e:32:d2:80:54:d4:5f:ec:36:6c:c2:
cf:e8:c6:ae:21:8c:11:80:ec:ca:ef:f4:18:7b:0f:
ea:23:7a:61:ae:4a:48:a5:19:7b:26:fd:bf:54:0f:
5b:b7:d6:5a:9f:55:5e:02:d5:e3:7e:b8:30:38:e4:
bf:f6:65:76:46:6f:2d:6c:b0:eb:b9:35:15:2c:f0:
bf:b1:78:9a:62:bf:44:2c:82:9a:02:89:ae:89:46:
43:92:41:68:65:06:a5:fc:8f:42:43:b2:48:b2:39:
6e:08:e7:b4:9a:ef:10:a2:02:c7:1c:8c:92:d8:7c:
7a:ce:0a:ca:88:39:04:8e:7e:89:73:df:4c:04:25:
6f:96:3b:09:ba:1f:8a:25:34:38:7b:21:7c:c9:0d:
7b:06:26:ac:25:76:c0:58:f3:7e:c2:26:f9:c6:dc:
b2:ab:a3:49:bf:f8:a0:7c:6e:80:78:e8:82:d3:ac:
fd:ce:df:05:fa:21:93:d3:8d:a8:c3:cb:3f:93:c2:
16:c0:26:25:b0:4d:91:a4:8c:f8:43:8a:d6:3d:62:
46:bf:35:ac:3a:8d:41:19:18:8a:c6:9e:98:24:78:
91:89:92:cb:38:12:19:16:ff:ad:f0:1d:ca:79:b3:
bb:3d:a2:d9:eb:49:eb:c7:00:d3:ce:90:4d:fa:df:
e8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D5:A5:17:0A:8D:9A:2E:2C:75:BB:DA:A4:C8:EF:6F:3F:38:F4:28
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ad:9e:23:10:f1:f5:b1:06:6b:8b:5c:c5:16:a1:c8:01:cc:
12:92:73:96:1a:63:63:8b:74:bc:c4:37:57:be:ca:4a:ad:dc:
73:2d:a5:16:73:80:9d:5f:37:ca:f4:18:95:c4:69:2d:a0:30:
a1:00:c3:8a:7b:40:42:c0:f7:96:a9:4d:39:35:d6:02:7c:49:
80:db:71:67:e1:04:c1:3c:7d:58:5c:22:1d:06:de:26:17:c5:
ac:6d:39:2e:6d:de:ff:e3:3f:28:13:1c:2c:5b:26:90:a7:47:
8b:a2:90:42:6d:61:42:65:a6:22:e9:bf:77:b3:e5:fd:65:50:
2c:39:c5:7c:a6:93:8e:40:34:8c:6d:e1:fa:e9:cf:29:c6:d9:
95:ae:44:e9:24:07:fd:e0:ce:85:f1:a2:4a:2c:83:07:e3:fe:
8e:8c:e5:a1:f3:46:6e:5d:6f:46:3f:8f:e5:ee:12:df:49:2f:
6b:9f:d8:bf:0e:fc:68:0a:5e:f7:9d:22:64:fb:9d:f2:d1:95:
3d:30:14:7d:42:38:82:75:c4:b1:d4:a4:30:77:c0:29:a6:5a:
b5:16:ef:25:5d:d7:2e:e5:96:30:04:48:72:f4:a4:37:e4:15:
60:6e:c1:59:ab:a1:7a:45:bb:7c:21:28:a2:c5:b1:e6:6f:d0:
14:7a:91:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSx9dNUvxf3OmSXpGDqKqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYWM4YzdlMzJiYWY3NzhiOGM0NTFhMmQyNGNjNjgxOTY5
NjRiZmMwHhcNMjUwODEwMDcwMDI2WhcNMjUwODExMDcwMDI2WjAzMTEwLwYDVQQD
Eyg3ZGQ1YTUxNzBhOGQ5YTJlMmM3NWJiZGFhNGM4ZWY2ZjNmMzhmNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfYxLjLSgFTUX+w2bMLP6MauIYwR
gOzK7/QYew/qI3phrkpIpRl7Jv2/VA9bt9Zan1VeAtXjfrgwOOS/9mV2Rm8tbLDr
uTUVLPC/sXiaYr9ELIKaAomuiUZDkkFoZQal/I9CQ7JIsjluCOe0mu8QogLHHIyS
2Hx6zgrKiDkEjn6Jc99MBCVvljsJuh+KJTQ4eyF8yQ17BiasJXbAWPN+wib5xtyy
q6NJv/igfG6AeOiC06z9zt8F+iGT042ow8s/k8IWwCYlsE2RpIz4Q4rWPWJGvzWs
Oo1BGRiKxp6YJHiRiZLLOBIZFv+t8B3KebO7PaLZ60nrxwDTzpBN+t/opwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3VpRcKjZouLHW72qTI728/OPQoMB8GA1UdIwQY
MBaAFPOsjH4yuvd4uMRRotJMxoGWlkv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjkt
NDVjNTY4ZjhhMjdjLzEvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjktNDVjNTY4ZjhhMjdj
LzEvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlK2eIxDx
9bEGa4tcxRahyAHMEpJzlhpjY4t0vMQ3V77KSq3ccy2lFnOAnV83yvQYlcRpLaAw
oQDDintAQsD3lqlNOTXWAnxJgNtxZ+EEwTx9WFwiHQbeJhfFrG05Lm3e/+M/KBMc
LFsmkKdHi6KQQm1hQmWmIum/d7Pl/WVQLDnFfKaTjkA0jG3h+unPKcbZla5E6SQH
/eDOhfGiSiyDB+P+jozlofNGbl1vRj+P5e4S30kva5/Yvw78aApe950iZPud8tGV
PTAUfUI4gnXEsdSkMHfAKaZatRbvJV3XLuWWMARIcvSkN+QVYG7BWauhekW7fCEo
osWx5m/QFHqRwA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:44:27 2025 by rpki-client