Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
File: jV8GavgNDp8H6oeyS9r6WdH18m8.mft (raw, json)
Hash identifier: nrs8QFw1FUXB+EZxooGBX/JsDTUp0BHMoD3DsFVtOWk=
Subject key identifier: F5:A1:8D:D9:C9:1B:95:22:22:A5:8C:67:E2:84:7F:09:64:69:AF:5D
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Certificate issuer: /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial: 01987418ACFA8E6E0ABB2190A08F645FE5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 08:00:30 +0000
Manifest this update: Mon 04 Aug 2025 08:00:30 +0000
Manifest next update: Tue 05 Aug 2025 08:00:30 +0000
Files and hashes: 1: Nu6PzktHZPkZpTfNWDAC1WQ31fs.roa (hash: 0olptWKqLuwlqgvdBxIZwPcl+HWoWf7gPYNB7LvpZJo=)
2: jV8GavgNDp8H6oeyS9r6WdH18m8.crl (hash: AMQL3IakKkFFqkkFl3HDy0TLq5GLwhzyw6Mf9egFEoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:ac:fa:8e:6e:0a:bb:21:90:a0:8f:64:5f:e5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Validity
Not Before: Aug 4 08:00:30 2025 GMT
Not After : Aug 5 08:00:30 2025 GMT
Subject: CN=f5a18dd9c91b952222a58c67e2847f096469af5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:64:d0:fb:8b:85:81:32:74:63:2b:52:44:
b7:ae:3d:75:29:ea:11:67:c1:03:de:15:26:0e:d9:
11:8d:9f:d6:ee:61:25:19:cf:81:1e:a0:47:e0:b7:
7c:29:bd:9f:63:7a:ce:27:fd:b5:53:d4:5d:0a:b7:
19:c8:02:9c:a6:c8:a2:a8:9f:ba:51:97:c0:16:d1:
a9:f5:b5:45:3d:79:60:da:e7:ac:e5:27:4f:6b:8d:
13:22:61:6c:1e:15:bd:fa:79:2d:62:a3:aa:38:32:
1a:cb:f0:86:38:cf:42:bd:d1:9d:dd:a0:21:ca:6d:
32:77:55:88:92:da:40:1f:45:6b:43:a7:a0:00:0b:
90:93:7d:11:68:59:cc:d2:be:c9:f3:44:60:cd:60:
c0:bf:70:1b:54:b3:31:3f:ab:1b:a8:45:0e:3d:1e:
2d:2f:45:1c:f5:54:4d:4b:02:ec:6e:23:ab:79:28:
b9:d7:f3:53:89:da:f6:5e:c0:fd:1d:bf:91:e5:1e:
7b:48:fd:ec:95:03:ca:6b:7e:52:cc:5f:77:f2:16:
32:f8:7e:d7:96:2d:86:ed:df:d0:df:1d:1e:53:00:
5a:7a:4a:7e:db:6e:21:01:0c:59:a0:5d:4d:6b:55:
45:26:05:b1:63:ce:a6:fc:27:70:c9:18:a6:f0:04:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A1:8D:D9:C9:1B:95:22:22:A5:8C:67:E2:84:7F:09:64:69:AF:5D
X509v3 Authority Key Identifier:
keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:68:68:73:e8:d3:08:3b:39:7b:ae:41:36:87:62:bc:a3:47:
70:5a:c2:9a:c2:da:85:91:de:35:6a:46:1f:5d:21:77:e0:18:
61:fe:43:7a:79:6b:bf:28:2a:ee:fb:a3:77:0d:29:cc:00:a4:
50:fd:1c:89:fe:ed:2f:2e:e9:da:c3:53:62:1b:02:fd:b4:2f:
a0:e4:d9:15:d4:a7:24:21:2d:91:6e:de:eb:07:8b:ce:8d:a8:
18:f3:b2:a1:88:f6:bf:2d:10:06:37:a5:00:36:e0:e3:9d:8d:
ce:86:4f:76:d0:0f:67:13:f8:6a:bc:4b:51:b5:b3:10:fe:d0:
e3:65:13:c0:ef:3e:05:29:10:62:52:e6:1c:08:cb:d8:df:64:
2d:b7:49:f7:81:a1:a8:69:27:a9:a6:c0:0c:8f:ee:38:cc:6c:
4a:2a:b8:39:8d:48:f1:cc:82:2a:a9:f5:00:f5:1d:ab:21:d0:
99:27:c8:5b:aa:aa:0a:5a:56:b6:e4:52:cd:f1:f2:16:ec:3e:
31:60:04:3f:b5:36:e3:b3:00:84:24:21:46:d9:f8:a3:6f:33:
47:72:7a:6e:8e:98:63:eb:3e:d9:e4:f0:0a:66:c6:9a:2e:65:
82:fc:b4:bd:a4:13:92:d6:c3:a8:5c:d8:ae:b9:5d:a9:37:48:
1d:01:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:23:11 2025 by rpki-client