Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
File: jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json)
Hash identifier: cIcPD+CSh9LIkvOJ2Fj64hMtVgL3nsdymcj0G619nj0=
Subject key identifier: 31:58:DD:E2:BD:66:2C:B4:09:99:5F:1C:7C:27:DF:9F:F8:20:4B:1C
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial: 0198819E37C1AA7B40E92A59F80DB864B6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 23:01:26 +0000
Manifest this update: Wed 06 Aug 2025 23:01:26 +0000
Manifest next update: Thu 07 Aug 2025 23:01:26 +0000
Files and hashes: 1: 1vKogvAJ7aYG5PR2yXnQrWioZSo.roa (hash: 7AslTVaGAxs89CrI0ewnWcmXXnAy3y2uVc1NOrkGAHw=)
2: IGFAJ7tvsxoewBIz-CIaT5Rb9KA.roa (hash: b9kbJBvM0NpcufGFz0NyZFZ9HPycn+QMvqEDUNgTAzI=)
3: ivVRenlAkxSye3NC_DyoAxqoj6M.roa (hash: tMvkuqfZVs7G8eRqzF/eWUmt5tCQ8iMBN+34AAtvEYo=)
4: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: xl8oykaCfNeWTHiEvzc962r1Kvl5KpL26BU+BRVu8Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:37:c1:aa:7b:40:e9:2a:59:f8:0d:b8:64:b6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
Validity
Not Before: Aug 6 23:01:26 2025 GMT
Not After : Aug 7 23:01:26 2025 GMT
Subject: CN=3158dde2bd662cb409995f1c7c27df9ff8204b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:e1:1e:57:8b:1e:54:d8:29:e9:95:f7:b9:
71:89:e2:e4:5a:62:e7:81:44:61:5d:b9:2c:11:b1:
6e:49:86:92:88:dd:8c:94:e5:07:20:5b:da:e9:c8:
53:d8:39:8c:bf:3a:89:16:8e:21:10:e5:ac:7f:10:
3b:b2:d2:df:f3:34:a0:61:a0:39:b5:32:b3:90:5a:
a7:02:e1:29:ee:41:99:bc:5b:b6:17:60:75:fe:29:
1d:9f:7d:da:c7:e9:64:41:d5:50:54:05:3a:c3:54:
93:a6:b3:79:1a:8d:69:f9:98:17:19:cc:e3:fe:7f:
b3:72:75:5b:1c:69:aa:24:79:b1:f7:1f:fb:14:72:
db:02:c4:ba:13:a8:f2:7b:f8:4b:93:0a:c4:a0:4c:
2f:1d:b9:a0:5b:24:bd:bc:23:d2:e9:f7:4d:00:73:
90:44:e0:5b:90:81:7e:31:21:cb:18:47:a1:ce:99:
87:d8:00:82:fc:8d:e8:a4:6d:61:98:5d:72:cb:3b:
fe:47:14:8a:83:42:90:90:db:91:02:d6:95:fc:29:
8b:c8:4f:16:15:3c:35:7e:ef:04:34:56:53:52:13:
92:ae:41:d0:b9:03:a4:f4:43:ce:45:4f:27:88:1d:
f1:79:68:19:d5:fd:d9:59:d8:40:41:af:80:32:6e:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:58:DD:E2:BD:66:2C:B4:09:99:5F:1C:7C:27:DF:9F:F8:20:4B:1C
X509v3 Authority Key Identifier:
keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0c:4f:db:ec:30:9c:48:43:6f:a1:56:fa:05:3f:31:cb:cc:
e3:c8:f0:55:bf:8a:58:d5:58:a5:7d:ad:0d:09:c2:0f:64:a1:
4d:87:1c:f4:bc:a5:6d:25:b0:d0:ed:ee:6a:07:26:75:dc:73:
b2:d9:b8:ad:c8:c7:5e:e2:2e:ee:9c:70:3b:41:7a:0d:10:ab:
99:b3:98:4a:a9:e9:1f:5a:22:75:f9:8e:15:39:6a:ff:5f:db:
2e:ff:60:ce:cd:e8:34:e7:fe:54:47:e8:0e:a3:30:b1:9b:dc:
f0:ac:79:16:52:80:cc:c3:c1:b8:57:bd:c2:e6:cc:05:1e:72:
b1:85:78:88:b0:3e:e5:a1:e5:a2:ab:ef:ce:6b:7d:7e:03:6e:
1c:7a:6f:de:3c:de:21:cb:fe:ac:9f:44:e3:ff:c0:65:28:59:
01:d0:14:dd:dc:b1:58:87:8d:f4:d6:9b:24:ba:42:b0:e1:ba:
c2:a7:5b:a1:5c:1b:f2:5d:61:6b:3a:4d:c7:0c:e5:38:c4:ca:
a4:df:c9:45:3b:ee:30:9c:49:22:e5:ed:ec:21:09:bd:b2:2b:
b9:01:34:a8:af:c7:cb:48:b1:04:46:e8:4a:02:fc:0c:0f:ba:
f8:7f:a9:5a:67:cc:5e:d2:83:62:f5:b6:d3:2a:40:68:56:55:
dd:4c:b5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:01 2025 by rpki-client