Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
File: jjh1qArSM-nChxWYg3H3fuw_Ygw.mft (raw, json)
Hash identifier: QI3t2xxeochYfAnCiFWwblenuFruMSzGoruOAL+E/dM=
Subject key identifier: D3:D1:67:FD:2A:02:84:B0:29:AB:24:46:CE:A5:7D:73:73:30:72:42
Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c
Certificate serial: 01989336C2F805616952571CBCEEDE477CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
Manifest number: 162D
Signing time: Sun 10 Aug 2025 09:01:36 +0000
Manifest this update: Sun 10 Aug 2025 09:01:36 +0000
Manifest next update: Mon 11 Aug 2025 09:01:36 +0000
Files and hashes: 1: 0YS8AQvr8ByNBG7KTwD6sIOGH8A.roa (hash: k8sO4Fn23jLZke1eiUIEXbtdN/A5BluF8j3tNYbaMCM=)
2: jjh1qArSM-nChxWYg3H3fuw_Ygw.crl (hash: 2o+6aDPmGTbe0lda4ijomRk8fIwd9eWu1aXsKeOMk78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:c2:f8:05:61:69:52:57:1c:bc:ee:de:47:7c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c
Validity
Not Before: Aug 10 09:01:36 2025 GMT
Not After : Aug 11 09:01:36 2025 GMT
Subject: CN=d3d167fd2a0284b029ab2446cea57d7373307242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:e6:e7:55:96:7c:cb:83:1e:9a:cc:9e:a3:
44:ff:dc:ba:9c:ae:97:af:d5:9a:2f:64:6d:7f:cb:
7c:9d:f4:0e:bd:9c:7f:00:59:d8:d0:a9:a7:4b:92:
2d:77:55:79:5e:12:e0:61:04:65:97:f4:25:2f:17:
10:c8:f3:05:f5:00:44:3d:13:ba:07:27:f7:dd:ef:
7a:a5:88:b8:03:7e:95:df:8e:2c:b6:75:d1:d5:09:
38:03:fa:0e:85:3f:9b:af:e6:36:2c:3d:98:0c:28:
9d:ff:26:c4:ed:95:e5:9f:ae:f8:f5:14:15:4a:46:
aa:c7:e0:25:32:78:06:33:01:93:db:f2:f5:0b:1b:
98:c4:77:3f:6d:a1:33:ff:99:7d:b1:fc:a0:11:e7:
f4:91:93:ce:f2:39:17:b7:fa:46:90:5f:37:59:99:
22:76:b1:c0:08:0f:d6:5c:7c:ba:de:d9:0f:21:93:
7b:59:00:b1:40:45:4a:ea:df:ff:5b:45:dc:79:6d:
89:8f:71:2e:01:db:9f:09:24:34:bc:f6:68:0a:3a:
dd:27:2b:64:7d:eb:58:2d:10:69:44:df:12:a5:c9:
0a:15:01:9b:ca:08:85:79:57:b8:c3:cb:4e:80:ce:
71:b8:42:92:e3:a2:68:be:cd:36:96:41:12:43:9b:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D1:67:FD:2A:02:84:B0:29:AB:24:46:CE:A5:7D:73:73:30:72:42
X509v3 Authority Key Identifier:
keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:23:67:50:b2:2e:e8:af:3b:60:1a:d5:25:43:62:37:2c:26:
bd:57:16:ad:14:3e:1a:ee:3a:f3:91:66:10:f3:34:a8:f7:a4:
b3:08:45:0d:9a:78:c3:c6:dd:f5:20:8f:91:2a:75:ce:97:69:
26:a2:a0:88:ca:71:53:1c:8d:08:77:31:35:dd:b6:f9:3b:d4:
ab:cb:fe:a0:0f:64:c8:cb:de:33:e6:26:7b:93:dd:56:7e:d5:
36:41:d2:28:c1:3c:3e:d6:bc:87:a0:4e:be:35:9e:92:0c:45:
2c:29:13:79:95:17:23:a5:ae:50:57:2c:78:9f:3d:dd:53:d4:
3f:33:2e:6a:f9:34:4e:57:0a:98:bb:f1:c6:7c:7b:57:4d:bf:
79:f3:70:02:6c:6a:7c:9e:e1:97:10:c7:cd:96:8d:4a:72:db:
7b:7d:83:6a:21:8a:ff:55:f3:13:30:df:b4:29:95:e8:e7:9d:
5e:12:81:05:27:3b:34:eb:6a:ef:0f:c5:78:97:4e:c2:54:93:
42:65:cb:fb:4e:2d:43:ee:96:8e:fa:35:7c:e6:41:cf:0e:96:
15:4e:ce:f5:69:b5:b2:2f:92:a8:6a:9e:c7:26:42:8a:a7:31:
e4:96:cb:a2:f5:e2:d0:5e:c0:ff:bb:b0:51:e8:df:08:39:27:
c0:53:f2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:15:32 2025 by rpki-client