Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: CXajzZXgsDmnr//1vE7PFh/IA4L5y4VMxLLW+SxerKI=
Subject key identifier: C2:C8:51:D5:7A:35:D8:B3:5F:1B:C7:2F:D6:26:EA:D5:AC:70:81:87
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 019873E2E9356CC70702DE9B617F9BCD720F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:01:47 +0000
Manifest this update: Mon 04 Aug 2025 07:01:47 +0000
Manifest next update: Tue 05 Aug 2025 07:01:47 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: B/09kcseOdIUH0xjuQAQYONB+URxJYRY6KZqlqZCTcc=)
2: Pr7YGGLPe8s_S4LRz9ziv5ucbAw.roa (hash: sx9n+qGnhP0I6sp10kmNLeGSUg0Fv6GPJl7WmFjWTnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:e9:35:6c:c7:07:02:de:9b:61:7f:9b:cd:72:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: Aug 4 07:01:47 2025 GMT
Not After : Aug 5 07:01:47 2025 GMT
Subject: CN=c2c851d57a35d8b35f1bc72fd626ead5ac708187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:82:c0:25:c7:01:85:01:0f:5d:6d:1d:b7:2d:
a5:06:18:51:e3:74:53:cb:80:0a:57:44:a9:54:cd:
87:20:2f:61:fe:8a:84:ce:72:bc:76:73:a8:2e:f3:
a6:22:92:38:4e:2d:e4:17:03:a4:19:4f:8f:28:16:
4e:dc:e4:58:90:9d:dd:3a:2a:bc:6c:cf:65:5f:27:
32:d1:ef:2d:db:19:eb:e8:47:87:29:00:29:da:ed:
4d:7a:43:f0:0e:f4:f3:72:2c:c2:9e:b8:cb:6a:e7:
a3:65:fe:1f:8a:df:25:2c:6b:4b:b6:7e:d6:4f:9d:
8d:16:93:3f:bc:7b:ed:08:40:41:5f:7d:71:e5:f2:
92:8f:e7:0a:15:06:e3:c9:44:9e:20:cc:f9:10:4c:
ee:fe:0d:4b:2c:57:91:6a:a0:20:0d:4e:07:9f:b4:
85:63:2e:b5:6c:cc:22:34:b3:b9:12:e0:56:a7:2d:
0a:1c:15:29:f6:74:7c:a2:e6:fa:7b:cf:ce:a7:e0:
ad:ac:9e:dd:89:75:b8:ba:80:d2:b5:f5:b2:c2:74:
01:85:8d:c3:79:f2:2b:b6:8c:73:6c:24:25:26:ba:
b4:27:1b:d9:85:89:36:58:71:3b:eb:5f:50:42:ff:
f6:77:c1:d4:b0:1f:e2:3f:db:89:e0:37:f3:ce:2c:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C8:51:D5:7A:35:D8:B3:5F:1B:C7:2F:D6:26:EA:D5:AC:70:81:87
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fa:61:53:57:ad:0d:52:b4:18:ba:da:29:5a:ed:79:bf:d6:
80:35:e5:e4:43:d3:20:89:89:82:d2:22:17:de:af:eb:bf:72:
26:cb:e3:9c:28:da:6d:34:03:14:11:34:78:f0:ad:6b:69:d2:
d9:2d:d5:6f:e2:b8:d6:07:18:11:3b:db:c4:bf:08:55:e5:c9:
1b:b5:31:96:bb:f0:7f:a1:f0:4e:37:c1:da:69:7a:ce:3c:a8:
9a:03:11:0e:ff:96:3d:a9:16:09:08:80:3f:b6:87:78:37:16:
75:90:4a:ad:33:4a:b7:a2:cb:f2:36:1a:bb:c8:e0:7f:33:c2:
b9:ca:05:73:5e:65:ec:e3:05:0f:d0:f5:3b:ec:bc:5c:d6:53:
0d:83:32:b8:14:28:c0:23:6e:87:c0:af:9c:a7:2c:10:fb:46:
3a:2d:1d:94:6a:f5:4c:d5:72:b5:7f:d7:8f:ee:ea:a5:78:43:
bb:9d:2d:5d:a2:3b:21:4c:d0:aa:29:74:b5:ec:65:c0:7d:c1:
ed:a3:b7:b7:9f:7e:ca:66:9d:9e:cd:cd:28:70:86:85:84:36:
d9:1b:eb:65:85:4e:e9:58:b7:e9:dc:30:fa:62:64:4c:ee:34:
72:ef:33:76:83:5b:57:1d:68:7c:ea:1f:6a:4e:05:d2:c9:69:
6c:10:a6:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4uk1bMcHAt6bYX+bzXIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYWNlM2NhZmI5ZTI2YzFhNjA1NjRmNzBkMmFjZWI0NTdi
ZjUwMDkwHhcNMjUwODA0MDcwMTQ3WhcNMjUwODA1MDcwMTQ3WjAzMTEwLwYDVQQD
EyhjMmM4NTFkNTdhMzVkOGIzNWYxYmM3MmZkNjI2ZWFkNWFjNzA4MTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ILAJccBhQEPXW0dty2lBhhR43RT
y4AKV0SpVM2HIC9h/oqEznK8dnOoLvOmIpI4Ti3kFwOkGU+PKBZO3ORYkJ3dOiq8
bM9lXycy0e8t2xnr6EeHKQAp2u1NekPwDvTzcizCnrjLauejZf4fit8lLGtLtn7W
T52NFpM/vHvtCEBBX31x5fKSj+cKFQbjyUSeIMz5EEzu/g1LLFeRaqAgDU4Hn7SF
Yy61bMwiNLO5EuBWpy0KHBUp9nR8oub6e8/Op+CtrJ7diXW4uoDStfWywnQBhY3D
efIrtoxzbCQlJrq0JxvZhYk2WHE7619QQv/2d8HUsB/iP9uJ4DfzziyjBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLIUdV6NdizXxvHL9Ym6tWscIGHMB8GA1UdIwQY
MBaAFPOs48r7nibBpgVk9w0qzrRXv1AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZ6anl2dWVKc0dtQldUM0RTck90RmVfVUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lYjIyZmEtZmJhNC00N2E5LWFiNTMt
MzYzZTJkNjY0M2YyLzEvODZ6anl2dWVKc0dtQldUM0RTck90RmVfVUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lYjIyZmEtZmJhNC00N2E5LWFiNTMtMzYzZTJkNjY0M2Yy
LzEvODZ6anl2dWVKc0dtQldUM0RTck90RmVfVUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfphU1et
DVK0GLraKVrteb/WgDXl5EPTIImJgtIiF96v679yJsvjnCjabTQDFBE0ePCta2nS
2S3Vb+K41gcYETvbxL8IVeXJG7Uxlrvwf6HwTjfB2ml6zjyomgMRDv+WPakWCQiA
P7aHeDcWdZBKrTNKt6LL8jYau8jgfzPCucoFc15l7OMFD9D1O+y8XNZTDYMyuBQo
wCNuh8CvnKcsEPtGOi0dlGr1TNVytX/Xj+7qpXhDu50tXaI7IUzQqil0texlwH3B
7aO3t59+ymadns3NKHCGhYQ22RvrZYVO6Vi36dww+mJkTO40cu8zdoNbVx1ofOof
ak4F0slpbBCm3Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:07 2025 by rpki-client