Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: rO2YNvJSxrlJOhDhOkLAugg4LunwBNMTIPV07paruRI=
Subject key identifier: 30:D1:33:AB:CD:9F:45:F6:EB:1F:1B:98:F5:BA:01:F9:79:63:41:95
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 01987E659F0629668CD64BB55DE51B5E2C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 162B
Signing time: Wed 06 Aug 2025 08:00:45 +0000
Manifest this update: Wed 06 Aug 2025 08:00:45 +0000
Manifest next update: Thu 07 Aug 2025 08:00:45 +0000
Files and hashes: 1: J6Kzm9-BHVrTMueLm85flmGpBuc.roa (hash: 9/2ACokdd6WeH0EpVJ7k0Vq4xCNM0q7ZPA1hEeNbMHI=)
2: bijRliPCnbFotmMqItnp-5jqXj4.roa (hash: uM/kaOsx/CgALc1h4UDZdPe4HF4oyeAzB65mv4DJvkA=)
3: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: CeDtsdDVUVLiebqG/fW0zkfANyIXc0fRsO0HFFm6Udk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:9f:06:29:66:8c:d6:4b:b5:5d:e5:1b:5e:2c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Aug 6 08:00:45 2025 GMT
Not After : Aug 7 08:00:45 2025 GMT
Subject: CN=30d133abcd9f45f6eb1f1b98f5ba01f979634195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:d6:f1:03:19:1f:ba:36:22:4e:4d:1c:c5:
86:45:97:72:cb:8e:17:71:e7:e5:9d:b7:86:4f:03:
82:62:5c:4c:40:94:db:d5:2c:1d:2a:e5:a8:55:0e:
0b:e9:74:ce:1a:77:92:92:fd:e8:b0:d1:cd:65:fc:
40:16:77:6b:b1:3e:1e:14:97:85:3e:2f:1b:d1:75:
1e:f4:fe:57:4e:8e:01:da:83:37:b5:a3:07:1f:1f:
a3:80:3a:61:6f:cb:d5:7b:73:49:5b:36:53:29:2d:
d8:49:c9:a5:7f:47:bc:b4:34:dc:82:bf:38:c3:73:
37:cc:ab:9b:06:30:de:81:a8:95:4b:54:57:ce:48:
4f:f9:26:7d:11:48:3a:af:62:98:07:c6:f4:01:5b:
64:5a:68:b1:43:2f:f1:80:25:ba:be:5d:b1:b3:86:
b9:95:21:96:20:af:5c:70:a4:b1:25:81:7b:98:01:
b0:56:c9:6b:f9:67:ce:b0:f4:70:43:7e:fb:b0:48:
92:95:fa:84:2e:13:a1:24:6f:e3:84:eb:f1:c8:05:
9c:55:98:0d:4a:1b:c8:ef:4a:b4:3b:a9:92:39:3b:
37:eb:54:55:44:73:b6:a1:13:a6:f8:04:73:74:c4:
66:15:30:6f:db:c0:78:35:57:9a:e1:20:8c:50:11:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D1:33:AB:CD:9F:45:F6:EB:1F:1B:98:F5:BA:01:F9:79:63:41:95
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:17:19:6f:cb:70:c4:11:0b:a8:9f:e2:56:21:f0:56:1b:ef:
26:09:99:80:9d:95:f8:c4:52:11:44:8c:4b:57:53:2b:6c:0b:
2b:dc:40:85:c6:1f:a3:40:bc:ce:40:08:d1:a7:9e:23:0a:24:
32:56:78:70:24:94:49:ac:16:31:23:48:c7:2e:d5:c8:8d:e7:
b3:78:8a:07:2d:ae:a8:44:db:b5:a7:16:9d:1e:62:22:61:bd:
d0:d9:ae:db:b6:5f:49:e6:b4:9c:9a:ad:26:12:c9:94:bb:3c:
32:7b:22:02:5a:6d:6b:c4:89:2b:90:90:f3:10:12:46:73:c8:
f1:7b:88:ef:b2:cb:41:10:6d:51:e7:ef:ee:e1:e0:d7:ed:17:
25:4a:6d:ce:9a:16:4d:21:e0:62:e7:02:7c:6f:91:97:fc:87:
91:cb:ad:e3:6d:40:27:85:71:69:12:28:cf:87:f7:48:51:c2:
76:be:86:57:a3:e3:60:66:de:13:ad:d1:0c:8c:8b:fd:4b:76:
bb:d0:a4:04:5a:1d:56:23:85:05:27:e6:a6:68:9f:9c:b3:4b:
f4:b4:7a:20:21:db:a4:be:03:09:d2:8f:25:b7:df:cf:33:e9:
ca:4b:53:97:a5:c6:72:5b:29:dc:b4:d6:ad:d9:cb:47:4f:c6:
c9:fa:44:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:23 2025 by rpki-client