Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier: P7HRwrUZTNgm4R0nrDOUmA2Mvug8Psdp6pgZUU+iv/Y=
Subject key identifier: 5C:D8:B3:C9:56:55:EA:7D:E5:5B:95:33:D8:93:33:21:50:EF:F2:D4
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial: 019872CFD41C4232F8E1767F5800B3AE9FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number: 0359
Signing time: Mon 04 Aug 2025 02:01:19 +0000
Manifest this update: Mon 04 Aug 2025 02:01:19 +0000
Manifest next update: Tue 05 Aug 2025 02:01:19 +0000
Files and hashes: 1: 0aywYTi5Sc6yVfxfBxLpHYbIDYs.roa (hash: XltTkT+5iNEXCHy8WnwN+9b+D1DDxHii8Hapue8Rijw=)
2: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: L7Dfkc67l724II/eL67I9l54koss0DwXp03zTQi1YpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:d4:1c:42:32:f8:e1:76:7f:58:00:b3:ae:9f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Validity
Not Before: Aug 4 02:01:19 2025 GMT
Not After : Aug 5 02:01:19 2025 GMT
Subject: CN=5cd8b3c95655ea7de55b9533d893332150eff2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:df:6e:52:e3:95:1b:e3:01:82:a1:87:56:
6a:17:0d:2e:11:8d:02:9c:00:c8:68:f4:8b:e2:45:
8f:ff:6f:fa:52:01:9c:31:df:33:3a:1e:6c:96:f9:
b6:2a:c0:56:72:e7:64:24:8f:54:59:2a:0e:d0:b7:
0f:be:62:f6:ff:09:44:87:8b:67:d5:bf:9c:83:a0:
bd:03:df:23:d7:7e:0b:e3:3d:e2:5c:f3:8b:42:fd:
39:cd:62:81:cc:d2:03:f0:66:d5:4d:8f:ef:98:5a:
a2:ae:b7:a0:31:76:c3:0e:f4:71:f6:10:f8:a2:00:
a7:71:be:70:ce:9f:5e:ab:17:ed:fc:ad:2d:09:fd:
54:ad:2c:3c:0b:9a:4e:4b:32:a3:1e:74:d2:d5:aa:
0f:81:80:5c:23:34:79:e4:a8:60:e0:9f:e7:4f:56:
15:6f:2f:ce:5d:48:be:bf:62:b1:8a:e7:c9:d6:93:
5a:be:07:82:ba:02:ff:4a:9b:ff:45:a2:b8:38:16:
fd:dd:47:89:53:81:10:d7:04:d4:91:12:02:2d:60:
6e:d8:0a:04:d4:84:aa:f4:5f:98:2b:55:5a:a8:69:
14:e7:dc:18:d6:08:a7:b1:10:6a:d2:77:d6:18:f7:
b9:c5:d6:f9:e4:b4:37:fa:92:34:b7:ce:2d:f1:17:
b0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D8:B3:C9:56:55:EA:7D:E5:5B:95:33:D8:93:33:21:50:EF:F2:D4
X509v3 Authority Key Identifier:
keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:cc:b1:d3:e8:38:30:76:8f:dc:23:88:57:13:f7:ec:5c:90:
15:f0:cc:35:ee:bc:1a:97:2a:44:15:cd:af:45:c4:dd:2a:16:
6d:67:03:8b:7e:4a:18:27:09:e3:a2:a4:73:26:a6:93:57:2f:
cc:d0:cc:e5:65:f9:19:5d:1f:4c:15:41:37:0f:32:9a:2f:25:
8d:3a:78:67:e0:20:0e:ce:fb:5d:7f:81:5c:de:85:4f:d9:67:
1c:26:b3:41:8f:bb:b5:71:94:4b:60:7b:e0:d5:3b:f7:ca:3d:
77:82:07:12:1d:bd:c8:9b:03:64:ef:cc:a1:e9:85:58:12:db:
6c:2b:04:63:99:52:59:13:0f:fa:0e:f9:d2:a8:19:01:c7:1e:
16:7c:ae:26:ea:d0:22:88:1b:1a:c5:75:cd:6b:76:86:a3:86:
26:82:76:27:86:ed:bd:af:28:96:b6:30:4a:79:ad:88:47:98:
c2:87:c6:06:64:fd:a8:ce:86:48:11:2a:1f:ad:11:8a:8f:4b:
1e:e7:87:8c:2e:b9:f0:2d:45:c5:74:6a:00:02:31:35:8b:19:
78:43:26:40:98:7a:6d:d3:6a:af:cc:b8:29:48:a7:f3:b4:78:
a6:6b:52:16:49:a4:e8:69:a7:61:72:67:40:e5:8c:43:61:65:
a0:a4:0d:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz9QcQjL44XZ/WACzrp/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYTgwYzQ4MzM3YmYyN2RiMmZkMDgzYzE3MmM2YTFjYzVk
MWQxN2MwHhcNMjUwODA0MDIwMTE5WhcNMjUwODA1MDIwMTE5WjAzMTEwLwYDVQQD
Eyg1Y2Q4YjNjOTU2NTVlYTdkZTU1Yjk1MzNkODkzMzMyMTUwZWZmMmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YHfblLjlRvjAYKhh1ZqFw0uEY0C
nADIaPSL4kWP/2/6UgGcMd8zOh5slvm2KsBWcudkJI9UWSoO0LcPvmL2/wlEh4tn
1b+cg6C9A98j134L4z3iXPOLQv05zWKBzNID8GbVTY/vmFqirregMXbDDvRx9hD4
ogCncb5wzp9eqxft/K0tCf1UrSw8C5pOSzKjHnTS1aoPgYBcIzR55Khg4J/nT1YV
by/OXUi+v2KxiufJ1pNavgeCugL/Spv/RaK4OBb93UeJU4EQ1wTUkRICLWBu2AoE
1ISq9F+YK1VaqGkU59wY1ginsRBq0nfWGPe5xdb55LQ3+pI0t84t8RewAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzYs8lWVep95VuVM9iTMyFQ7/LUMB8GA1UdIwQY
MBaAFPOoDEgze/J9sv0IPBcsahzF0dF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjkt
MjY2NGRhY2U5NTgwLzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjktMjY2NGRhY2U5NTgw
LzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsyx0+g4
MHaP3COIVxP37FyQFfDMNe68GpcqRBXNr0XE3SoWbWcDi35KGCcJ46Kkcyamk1cv
zNDM5WX5GV0fTBVBNw8ymi8ljTp4Z+AgDs77XX+BXN6FT9lnHCazQY+7tXGUS2B7
4NU798o9d4IHEh29yJsDZO/MoemFWBLbbCsEY5lSWRMP+g750qgZAcceFnyuJurQ
IogbGsV1zWt2hqOGJoJ2J4btva8olrYwSnmtiEeYwofGBmT9qM6GSBEqH60Rio9L
HueHjC658C1FxXRqAAIxNYsZeEMmQJh6bdNqr8y4KUin87R4pmtSFkmk6GmnYXJn
QOWMQ2FloKQNVg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:43 2025 by rpki-client