Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: 4LXbUHmk6SL3iXPUCAtcJXveV2PnIdIngtzpMJT00WA=
Subject key identifier: 85:25:5D:BF:CB:E0:D4:D9:21:D6:96:9E:10:3A:64:59:DA:BD:EA:0C
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 01989ECCDBECB388B2BC0CD7BCF914B4C45E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 162F
Signing time: Tue 12 Aug 2025 15:01:22 +0000
Manifest this update: Tue 12 Aug 2025 15:01:22 +0000
Manifest next update: Wed 13 Aug 2025 15:01:22 +0000
Files and hashes: 1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: 3wHazyLtI8fBFBe3rpd4FFho7/QMI4lNpuqn87QwQik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:db:ec:b3:88:b2:bc:0c:d7:bc:f9:14:b4:c4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Aug 12 15:01:22 2025 GMT
Not After : Aug 13 15:01:22 2025 GMT
Subject: CN=85255dbfcbe0d4d921d6969e103a6459dabdea0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:23:a9:4c:67:ef:06:3d:eb:0e:f5:a3:5c:c8:
36:03:7f:cd:9a:39:af:31:00:74:07:ec:ff:e7:c3:
9f:42:92:07:69:3d:e5:bc:14:8f:3b:8d:c8:32:73:
96:a7:a0:60:7e:89:b6:c0:d6:60:e3:d2:f9:44:22:
23:bf:a7:b0:7b:56:21:3b:3b:4e:7d:49:69:00:aa:
df:b2:09:77:48:4b:20:96:8d:0d:18:77:64:c6:02:
b5:73:11:a9:cf:b2:9a:27:df:20:7a:5f:2f:dc:e3:
24:0e:f6:59:bf:a8:da:3b:c5:39:2b:22:67:d2:29:
0e:3d:fc:8d:15:d7:02:32:bf:8c:63:c6:c6:1b:55:
44:1a:6f:88:46:ee:18:25:11:bd:4a:3a:a1:d4:86:
c5:c3:f9:e6:62:5c:a5:1d:5a:66:6f:f8:bb:04:1b:
bd:78:11:01:23:e9:d6:c0:3e:95:6e:68:d8:3a:01:
62:08:12:d2:83:15:6d:e0:4a:72:62:7b:a2:0c:be:
78:01:68:3c:97:33:d3:aa:80:eb:6a:23:45:4c:39:
41:36:e3:64:3b:63:1e:27:fa:98:e0:53:68:44:4a:
90:5c:8f:9f:ea:dc:b5:fe:18:b8:f2:3f:21:6b:4e:
78:2a:d9:4b:10:d0:cf:e1:01:bd:24:69:10:3b:a9:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:25:5D:BF:CB:E0:D4:D9:21:D6:96:9E:10:3A:64:59:DA:BD:EA:0C
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:20:99:5d:77:b8:2e:1b:70:51:c7:c8:d4:96:be:13:b0:70:
67:32:3f:b7:37:0b:da:c7:aa:4d:e0:aa:3f:33:32:b6:4d:e6:
92:2a:c0:2b:95:fb:cf:4c:98:4f:e4:c5:69:71:2f:ee:3b:22:
7d:21:ac:5e:07:dd:80:46:07:a4:77:1c:1c:4c:49:61:4b:d2:
ac:0d:50:e3:ac:b8:d1:8b:10:95:5e:89:97:49:ed:0a:30:16:
2e:79:2d:48:19:1e:3b:e6:e0:94:8e:9b:8b:21:9d:45:dc:20:
cc:77:58:fd:3d:b0:45:4b:7e:79:fe:f0:33:98:76:20:57:1f:
4d:58:31:97:dc:38:ed:4d:ca:5a:88:60:3f:dd:f5:13:85:e1:
d0:2e:98:41:d9:db:ab:75:c9:8c:a7:56:47:33:a4:a8:2c:96:
cc:cd:9e:d5:27:2c:c7:7b:51:ae:91:d3:68:73:88:58:cd:55:
4c:7b:c4:cb:87:88:cc:3e:4c:09:38:a7:40:81:8b:31:fa:91:
b0:a9:16:c1:64:43:e4:4a:18:cc:04:50:9f:f0:e3:d5:de:73:
36:9b:07:48:82:75:fd:85:e1:79:f6:f2:5f:d1:cb:16:d2:c6:
a7:1d:bf:f7:31:a6:51:68:dc:19:25:d3:91:36:9e:b2:08:ae:
c3:b9:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:49 2025 by rpki-client