Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
File: jY9-tNJUj5zL88s45wKhkMEXQvU.mft (raw, json)
Hash identifier: 3CHTU5Y88GoecMry+olrfWJH8Yo7KoolLVxXeSApB4w=
Subject key identifier: D8:03:B3:B0:E8:2E:54:53:D5:F3:14:25:80:8A:A7:60:74:36:6D:FF
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial: 01987D8AF515FC57C8EEADC5E2E69AA330CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 04:01:55 +0000
Manifest this update: Wed 06 Aug 2025 04:01:55 +0000
Manifest next update: Thu 07 Aug 2025 04:01:55 +0000
Files and hashes: 1: JoTSZ8E8fkiS501xBbOY7pc3jM8.roa (hash: JoNzI4ZspphrrJoARed2dcoamemKZ5kg0l+d/5sdlcM=)
2: SqfaLa-P64VMRzLu45OzZ7O-myU.roa (hash: 8RixXJbGYWZA//tOAjP6K4ex9vVhr1Y3178psfUi1TM=)
3: jY9-tNJUj5zL88s45wKhkMEXQvU.crl (hash: qyR1NI4yG/nk3XjXAjV7ACiPYFiURA4ccDRVTK/PEaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:f5:15:fc:57:c8:ee:ad:c5:e2:e6:9a:a3:30:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Validity
Not Before: Aug 6 04:01:55 2025 GMT
Not After : Aug 7 04:01:55 2025 GMT
Subject: CN=d803b3b0e82e5453d5f31425808aa76074366dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:a3:10:ea:c1:58:cc:fb:c0:0c:44:31:68:
ca:45:6e:f6:b0:89:20:33:bb:84:b8:fe:c0:4b:c9:
3b:94:79:cf:0d:20:01:00:4e:ca:34:f7:39:5e:7a:
88:68:ce:c0:b9:48:79:e9:14:44:bf:d4:4f:7e:d2:
7b:78:98:e7:8d:bf:5c:c8:0e:9c:f8:9f:da:c8:01:
01:f5:c1:09:91:9e:58:6e:4a:43:25:36:a4:80:27:
bb:0f:77:97:90:73:ed:a4:ba:53:94:df:f0:f7:c5:
ec:50:8e:be:66:69:7b:42:19:13:61:2e:44:40:84:
f2:3b:eb:83:38:f2:aa:0e:1d:2a:41:da:01:d5:a0:
c8:7c:5b:11:03:30:43:ff:51:bb:30:83:0a:8d:0f:
5d:86:33:71:78:ca:13:42:e8:9b:02:5a:de:ca:f2:
6b:80:d1:f5:71:f6:3a:72:9b:39:49:70:08:bf:97:
1a:68:62:d9:48:9a:89:45:fc:59:20:18:5a:c5:0e:
f0:8d:bb:e4:08:74:81:fa:3d:a4:a1:dc:1b:7a:94:
75:ed:f2:c4:dc:84:fd:07:24:5d:85:06:4a:57:80:
a8:29:7e:c6:71:c7:07:90:41:79:fe:10:0a:b9:30:
a5:aa:20:ed:56:0c:d6:e5:84:1a:6f:80:e2:da:e4:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:03:B3:B0:E8:2E:54:53:D5:F3:14:25:80:8A:A7:60:74:36:6D:FF
X509v3 Authority Key Identifier:
keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fb:e4:ef:90:b1:4e:12:f1:dc:6b:ef:22:44:5d:7a:ff:17:
90:31:86:03:22:2a:83:12:3b:f5:f7:0b:e2:72:56:57:e6:2a:
50:72:87:aa:b2:d8:74:2c:15:81:70:f0:af:18:2b:ec:64:10:
f7:f3:82:e2:36:0c:c8:1b:22:ad:14:07:76:e0:2e:59:d6:e6:
17:4a:93:44:3c:54:ee:64:c3:30:f9:3c:53:ed:80:a0:25:c9:
65:3f:65:09:a5:fa:2d:09:80:a6:42:a9:c6:a3:74:d8:97:05:
0a:74:2c:a9:c6:68:d7:73:6a:d4:de:65:76:98:25:5a:15:de:
0c:6c:65:08:31:ef:83:55:6c:ba:46:3a:5a:05:9f:3f:ce:bf:
30:21:b0:53:59:3a:44:c8:8b:07:13:c4:8f:3a:d0:0e:36:6a:
2f:8a:d0:b4:58:19:d9:b5:11:8e:11:c1:a2:11:6c:be:37:59:
1c:c2:4b:d9:a1:99:15:18:29:b5:ca:21:5e:d6:57:7d:43:04:
b6:f9:62:aa:0e:56:50:8c:a6:ed:3c:fa:38:8a:2f:86:8a:34:
d8:86:86:08:f0:a4:2f:1d:c9:d9:1b:3c:be:74:98:dd:ce:46:
65:95:6f:54:8c:04:d4:07:bd:22:44:34:59:11:c6:2d:46:9c:
1d:55:d0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:52 2025 by rpki-client