Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: fTUzupBAUJ+uzquscs8CqkGGuykQk+qLowf4VgKasgc=
Subject key identifier: FD:1E:AC:BF:C2:82:5B:70:E5:BE:E9:1C:0D:0E:7D:10:1F:05:7A:E8
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 019674F9EC235285374F182B8CDC6BB0F868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 0251
Signing time: Sun 27 Apr 2025 02:00:57 +0000
Manifest this update: Sun 27 Apr 2025 02:00:57 +0000
Manifest next update: Mon 28 Apr 2025 02:00:57 +0000
Files and hashes: 1: 0aywYTi5Sc6yVfxfBxLpHYbIDYs.roa (hash: XltTkT+5iNEXCHy8WnwN+9b+D1DDxHii8Hapue8Rijw=)
2: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: CKLgq3VlrdRF177YXkjCarSY4i70oHl2sf8dr/VFFZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:ec:23:52:85:37:4f:18:2b:8c:dc:6b:b0:f8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Apr 27 02:00:57 2025 GMT
Not After : Apr 28 02:00:57 2025 GMT
Subject: CN=fd1eacbfc2825b70e5bee91c0d0e7d101f057ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:77:4d:9e:03:ad:bb:64:a6:76:3f:10:e1:
05:b7:f5:b5:1a:e2:ab:2d:c9:b3:ff:41:7d:22:5a:
e4:99:b4:b3:43:69:bb:a9:7d:40:58:68:9f:01:df:
7d:ea:58:4c:15:c1:df:83:2a:e6:70:85:7a:82:a2:
36:3b:5b:b7:25:f4:33:7c:d5:03:85:93:66:ff:46:
8e:e2:70:ac:ba:50:14:64:0c:49:c0:f6:53:92:55:
9b:c3:cf:93:4d:bf:90:54:0c:9c:1d:f0:7d:af:13:
27:ba:cc:5f:30:c8:f0:f9:dc:09:6c:80:d8:52:df:
a2:88:b5:be:05:61:bd:34:a7:5a:93:51:ca:d5:3d:
c1:77:7a:d4:c3:f2:78:c5:d2:01:ae:fc:30:5f:f8:
6c:f1:23:c3:aa:ef:41:20:d9:a4:31:85:8b:e6:7b:
09:1a:4b:04:cd:4c:6b:8a:ea:7a:a1:f4:70:96:b3:
e4:1e:2a:ac:cc:9e:bd:99:a7:54:79:37:5a:33:45:
21:30:3c:11:f9:89:42:d0:89:85:2e:ca:94:32:59:
19:62:0d:88:72:ea:bd:83:93:2d:12:4c:e7:f5:10:
e0:55:53:4f:7f:6b:8f:0b:3f:d7:de:40:3b:16:9b:
cc:94:61:56:3d:3e:bf:b7:8b:d4:46:4e:e2:48:da:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1E:AC:BF:C2:82:5B:70:E5:BE:E9:1C:0D:0E:7D:10:1F:05:7A:E8
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:53:91:40:53:c1:ec:94:ae:5b:4e:f5:c1:18:00:4b:8f:6f:
4b:ab:de:18:60:df:44:ea:88:6b:df:88:5f:4c:25:fc:89:40:
ab:80:fa:aa:fc:99:19:61:41:2a:28:a6:93:31:d7:37:d5:ac:
b5:8e:39:97:75:c9:3a:25:54:e3:15:24:e6:ce:a3:cb:ca:93:
74:ad:75:50:ba:90:67:f1:04:5c:dd:90:3c:29:65:b9:70:46:
93:95:25:3a:07:32:a1:1a:7c:17:58:df:80:09:db:f3:ea:eb:
8d:fa:15:fd:31:63:ed:ca:35:cb:8f:bd:74:72:b2:0a:62:88:
f8:03:ed:b3:8e:72:55:e0:0d:ba:2c:2d:fb:e7:a5:a5:cc:3f:
b9:9d:66:28:c2:52:47:78:db:f9:d4:c3:11:d6:1a:d2:27:95:
0b:81:14:e0:3b:9f:0d:d4:89:38:50:af:7a:af:37:2e:0d:e6:
ed:5e:5e:0a:11:56:b1:61:b5:d4:0a:1a:10:c5:cb:96:9d:60:
3b:d9:97:2a:ee:df:2b:05:36:99:ac:8f:a8:98:60:a6:4f:3b:
6f:43:11:6a:7e:6f:c9:4c:9f:c9:2a:00:e2:29:bd:ca:f7:b0:
ee:19:3f:62:e6:6a:5f:00:d4:b4:2c:70:4e:6c:ff:89:f6:01:
0b:1a:70:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+ewjUoU3TxgrjNxrsPhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTgwYzQ4MzM3YmYyN2RiMmZkMDgzYzE3MmM2YTFjYzVk
MWQxN2MwHhcNMjUwNDI3MDIwMDU3WhcNMjUwNDI4MDIwMDU3WjAzMTEwLwYDVQQD
EyhmZDFlYWNiZmMyODI1YjcwZTViZWU5MWMwZDBlN2QxMDFmMDU3YWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8p3TZ4DrbtkpnY/EOEFt/W1GuKr
Lcmz/0F9IlrkmbSzQ2m7qX1AWGifAd996lhMFcHfgyrmcIV6gqI2O1u3JfQzfNUD
hZNm/0aO4nCsulAUZAxJwPZTklWbw8+TTb+QVAycHfB9rxMnusxfMMjw+dwJbIDY
Ut+iiLW+BWG9NKdak1HK1T3Bd3rUw/J4xdIBrvwwX/hs8SPDqu9BINmkMYWL5nsJ
GksEzUxriup6ofRwlrPkHiqszJ69madUeTdaM0UhMDwR+YlC0ImFLsqUMlkZYg2I
cuq9g5MtEkzn9RDgVVNPf2uPCz/X3kA7FpvMlGFWPT6/t4vURk7iSNrCJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0erL/Cgltw5b7pHA0OfRAfBXroMB8GA1UdIwQY
MBaAFPOoDEgze/J9sv0IPBcsahzF0dF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjkt
MjY2NGRhY2U5NTgwLzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjktMjY2NGRhY2U5NTgw
LzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1ORQFPB
7JSuW071wRgAS49vS6veGGDfROqIa9+IX0wl/IlAq4D6qvyZGWFBKiimkzHXN9Ws
tY45l3XJOiVU4xUk5s6jy8qTdK11ULqQZ/EEXN2QPClluXBGk5UlOgcyoRp8F1jf
gAnb8+rrjfoV/TFj7co1y4+9dHKyCmKI+APts45yVeANuiwt++elpcw/uZ1mKMJS
R3jb+dTDEdYa0ieVC4EU4DufDdSJOFCveq83Lg3m7V5eChFWsWG11AoaEMXLlp1g
O9mXKu7fKwU2mayPqJhgpk87b0MRan5vyUyfySoA4im9yvew7hk/YuZqXwDUtCxw
Tmz/ifYBCxpw7g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:15:25 2025 by rpki-client