Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: XAytZMpCsmGQJ4it4zQOutjoFFhu96Y4PWxSWyeIrWI=
Subject key identifier: FC:54:B6:20:C7:8C:F6:03:90:A1:EC:70:AB:85:16:3A:43:B3:39:BA
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 019A4DE18CD388D99D0EC49EC7A0AD3FCBDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 044F
Signing time: Tue 04 Nov 2025 08:00:18 +0000
Manifest this update: Tue 04 Nov 2025 08:00:18 +0000
Manifest next update: Wed 05 Nov 2025 08:00:18 +0000
Files and hashes: 1: 0aywYTi5Sc6yVfxfBxLpHYbIDYs.roa (hash: XltTkT+5iNEXCHy8WnwN+9b+D1DDxHii8Hapue8Rijw=)
2: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: P2v9849yYYhsmShKQq90qsj9CrzvWvDjIxDz/5W2jKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:8c:d3:88:d9:9d:0e:c4:9e:c7:a0:ad:3f:cb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Nov 4 08:00:18 2025 GMT
Not After : Nov 5 08:00:18 2025 GMT
Subject: CN=fc54b620c78cf60390a1ec70ab85163a43b339ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:ce:48:da:9c:60:13:63:d0:ef:a9:b2:d0:
52:98:fc:b1:fa:76:2e:a2:21:7e:9a:40:7c:96:db:
c9:03:d6:1e:59:04:1e:72:9d:75:90:2c:7c:c3:d1:
d1:ff:10:2b:85:5b:6b:a7:cc:56:ee:12:24:22:dd:
8a:f1:57:a1:83:f5:8b:fa:b9:61:80:0c:4c:c8:5f:
90:d6:99:63:97:93:fb:77:e7:eb:9c:91:7b:33:45:
e7:1e:ff:a1:e1:df:9e:28:cb:14:f1:88:da:39:0f:
e3:3f:28:e8:89:bc:b2:4b:a2:7b:97:df:03:aa:07:
19:08:7f:3f:90:a5:b3:bd:e6:34:ec:e2:fb:46:cb:
bc:a9:c4:88:bb:66:d1:f7:d9:06:03:39:3d:fc:03:
c2:7e:7c:0d:26:58:04:99:ee:6c:76:e0:f6:71:20:
45:e8:d7:bb:7c:31:bb:1b:6a:be:20:ce:fc:04:73:
7a:1d:4d:5a:d2:28:50:a2:df:78:f9:a3:74:65:b1:
52:11:6e:03:2c:d3:4a:cd:bf:f4:25:cb:1e:cd:17:
de:3b:f2:e7:1d:99:79:38:95:4d:ce:19:34:8c:31:
e4:6f:3d:03:9f:58:2b:47:cd:b1:61:18:5b:8e:25:
ab:64:b5:c2:a3:7e:59:77:73:9b:2e:22:e4:75:b0:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:B6:20:C7:8C:F6:03:90:A1:EC:70:AB:85:16:3A:43:B3:39:BA
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7c:da:f0:ce:6d:5a:52:71:53:56:97:29:40:86:e9:38:a5:
16:5e:b4:54:58:4b:25:0f:cf:d8:7b:db:18:11:d6:2a:40:07:
41:ec:85:ab:fc:fe:9e:f0:db:c3:12:81:7c:90:c1:56:c8:8e:
73:b7:d5:53:69:e8:68:c4:92:73:cd:c7:5b:3d:d9:27:c3:db:
3f:1f:af:9b:28:ea:ce:bc:ff:15:34:93:71:41:d6:9c:57:ce:
7d:ef:2d:3a:28:63:b7:f1:0b:08:36:f1:0f:ab:23:b9:3d:d2:
3c:a6:22:1e:2a:61:4d:28:38:73:79:22:6b:88:67:5f:39:85:
6e:a6:da:26:ba:52:be:b1:1d:a2:97:52:b3:1b:c1:75:43:a8:
30:33:56:06:bd:b8:1a:50:d4:50:ad:c4:31:5a:c4:5c:85:ef:
55:7b:43:e5:e3:ee:0d:b2:2a:df:74:b2:72:09:ac:54:17:2f:
7a:1b:4e:dd:57:d5:3a:88:d7:1c:77:d0:4e:11:59:53:ec:00:
df:1a:42:2b:47:11:89:09:74:82:95:bd:ae:97:04:94:03:d7:
3b:37:89:85:a3:35:ab:e8:a1:96:26:8b:31:7b:c3:eb:fe:35:
66:d6:0c:a0:9a:1e:0d:7f:77:ad:63:8f:af:02:73:8f:e4:d3:
45:b8:91:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:31 2025 by rpki-client