Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier: blbUY7gZE4AqQ1o0PIvNQGt9YiLoj0nzH7lb6gOLlHw=
Subject key identifier: 03:8F:D4:5D:95:11:EA:08:3C:F2:7A:CB:F7:FE:1E:D8:A9:9C:11:07
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial: 01968B4AEF8142462322DB029B027E88DE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 10:01:06 +0000
Manifest this update: Thu 01 May 2025 10:01:06 +0000
Manifest next update: Fri 02 May 2025 10:01:06 +0000
Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: o/xe4XoyTkBjZnX5hg1M4TvYm1knGSFVTIiR/6cjxVg=)
2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=)
3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:ef:81:42:46:23:22:db:02:9b:02:7e:88:de:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Validity
Not Before: May 1 10:01:06 2025 GMT
Not After : May 2 10:01:06 2025 GMT
Subject: CN=038fd45d9511ea083cf27acbf7fe1ed8a99c1107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:8e:3c:bf:b8:c5:02:a9:65:9a:2f:79:63:
d3:15:22:bf:6c:4a:d7:6c:c9:3b:e3:55:f6:98:08:
b6:73:8b:f2:07:f9:69:a5:f5:d9:85:95:27:d3:8b:
c0:1a:02:8b:6f:41:a2:a5:b1:64:34:5e:3c:9a:e4:
10:f4:58:8e:f9:67:c9:06:11:df:a6:2a:cf:2d:51:
62:db:32:58:89:19:bf:38:c3:b0:e9:b0:a2:60:e0:
ca:7b:a5:97:7c:11:c7:e2:d4:c5:ee:68:35:f4:4c:
c0:1a:05:0d:fd:20:fc:db:68:de:23:52:4e:8c:c9:
0d:a7:cc:c6:ef:66:22:19:cb:94:f0:20:b6:42:33:
fa:08:d0:63:c2:e8:bc:95:94:bd:ea:13:91:33:30:
48:ab:08:00:d5:7e:e7:f6:5b:a1:08:74:33:ba:95:
bc:72:49:22:7a:25:da:8f:a5:57:2a:98:02:d8:93:
65:c6:a9:50:16:a3:59:24:1d:59:b6:6f:54:3e:a4:
95:db:b8:a1:f0:3c:9e:87:d0:aa:8e:12:8c:6e:e6:
a3:0f:2c:f5:96:27:50:bb:4b:56:20:ee:1f:aa:09:
14:58:1e:b3:54:49:69:df:f2:d1:c3:36:f1:28:39:
cc:6b:d7:2a:0b:57:9b:c7:da:ee:a4:2f:f5:5e:70:
d6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8F:D4:5D:95:11:EA:08:3C:F2:7A:CB:F7:FE:1E:D8:A9:9C:11:07
X509v3 Authority Key Identifier:
keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a8:15:6f:0e:8d:af:eb:4e:a7:ca:ae:c4:2b:03:e5:7c:7a:
39:c7:8f:1e:04:91:29:85:6a:ea:01:ea:06:bb:32:d4:e8:54:
b3:1e:f4:9f:69:18:a4:e2:5f:b3:5d:62:36:50:4d:ad:53:39:
ed:d3:33:6d:65:12:45:1d:d8:b7:ba:32:95:e1:21:2f:47:b3:
86:fb:e1:0c:c6:25:6c:da:97:bf:78:43:87:ea:97:ff:d1:2e:
af:d8:f3:4f:8f:a1:1f:f0:8f:55:54:c4:2f:84:fd:15:1a:da:
6d:3c:79:f1:22:b2:18:1c:ce:b2:ed:84:1b:61:ef:89:56:31:
5e:be:84:73:4a:0b:0d:46:4c:f5:b9:0e:76:a7:4a:01:f6:c2:
26:81:d3:a5:fa:00:7b:ea:c6:69:a9:2b:6a:2e:fa:ab:ce:10:
88:06:5b:26:f3:a2:f5:34:3b:fb:92:f4:8a:29:dc:55:ba:1a:
09:99:2c:f5:85:77:b9:1f:4d:9b:5e:c5:8d:5a:cc:33:8f:a6:
d9:ef:f0:c0:b7:fd:fa:76:06:6c:13:da:6a:d8:60:2e:48:32:
c7:34:5a:0b:0a:a7:73:37:fc:eb:9c:65:2a:0c:22:60:54:49:
12:30:65:1e:30:b2:0c:a7:f0:4f:2b:d9:59:c5:8e:4a:7a:8a:
83:55:75:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:02:43 2025 by rpki-client