Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
File: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json)
Hash identifier: cn74wqjZi8jY23uDcz7YrPZIdj5AEj+B4Mf1NcTYeBI=
Subject key identifier: 79:EE:42:8B:B1:5B:C6:FB:2F:4D:03:03:95:C1:43:6F:86:DF:B4:69
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial: 0198824298EC1DCE61AC211460C704A11EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 02:00:59 +0000
Manifest this update: Thu 07 Aug 2025 02:00:59 +0000
Manifest next update: Fri 08 Aug 2025 02:00:59 +0000
Files and hashes: 1: P3AaYGSGMDc5V6XvnMWc4NJ8Sbg.roa (hash: chczXDm1de+BLC6EnaRddxxMZYpPZHccFuKW2GUWjQY=)
2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: HMl1+oPDuRUUqbCLGk6yM/k1ZKsx3TZGl53aBLFEVXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:98:ec:1d:ce:61:ac:21:14:60:c7:04:a1:1e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Validity
Not Before: Aug 7 02:00:59 2025 GMT
Not After : Aug 8 02:00:59 2025 GMT
Subject: CN=79ee428bb15bc6fb2f4d030395c1436f86dfb469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:22:3c:83:18:aa:7a:fb:44:33:4d:85:10:
b8:7a:c6:15:8e:73:68:1d:c9:78:74:d4:35:e6:de:
c5:c6:5e:d5:7e:de:ce:ef:61:fe:93:c9:1f:86:84:
c3:b6:22:85:00:0f:93:63:77:57:1c:37:5c:10:2d:
16:85:a9:f7:78:41:27:c2:96:7c:10:14:37:39:a9:
9c:b9:43:9e:b4:2a:34:c4:a3:7c:61:33:84:fd:44:
b1:69:03:50:ce:2c:99:08:3f:21:45:37:f3:d1:44:
82:a0:81:aa:9c:a4:e0:ac:41:64:41:63:af:73:36:
b8:aa:92:c0:af:70:61:b9:af:9e:de:c4:91:25:41:
b8:c2:82:7f:e7:01:28:73:cc:23:89:e8:c9:c9:49:
16:10:d2:b2:1b:b1:08:56:47:f2:ed:4f:ba:c8:66:
de:a9:c3:88:f9:ad:09:48:ea:c2:39:d7:e6:0d:f8:
30:0d:4b:38:68:2e:88:d1:4c:a9:72:83:11:3f:cc:
d8:18:50:84:b1:43:d7:17:94:3b:5e:23:9f:74:7e:
93:65:e5:c7:b2:48:c2:4d:a8:3c:f3:68:c5:bd:75:
95:5a:57:f4:d7:de:b3:a9:5a:45:47:3a:07:07:f0:
09:5c:bb:d4:99:04:2e:3a:a3:72:35:44:1c:a4:8d:
5c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EE:42:8B:B1:5B:C6:FB:2F:4D:03:03:95:C1:43:6F:86:DF:B4:69
X509v3 Authority Key Identifier:
keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:39:bb:df:49:c2:b7:2c:2d:e2:a8:4a:2b:9f:57:52:18:19:
69:71:49:f3:55:84:d5:03:f3:18:aa:18:24:6b:6b:58:58:2f:
42:66:5e:8e:1b:dd:11:df:e9:7c:dc:57:1d:a8:e9:5f:e4:8a:
d0:e7:f1:38:1b:3e:80:cf:7b:4a:de:41:b8:bc:29:f9:7b:b6:
d3:6f:ce:98:1a:eb:c4:dd:90:a7:24:51:c1:99:0d:35:5e:31:
91:58:f3:9d:f2:9d:99:83:0e:7e:86:ea:9d:05:63:26:39:b7:
be:5e:c5:33:d8:3d:49:1b:37:f3:3a:2b:78:da:24:b1:95:3e:
0e:73:40:68:b3:ad:ed:68:44:43:4e:c0:bc:54:73:62:a5:f2:
b6:18:cc:80:0a:f3:52:6f:6a:24:71:ef:c5:4b:b6:68:e0:78:
3e:7e:74:b8:53:6a:bb:b3:65:88:13:ee:bb:b8:1c:2c:d8:87:
c5:3a:35:6a:55:45:6a:96:48:74:1e:06:06:01:da:18:8e:b8:
6b:21:4d:3c:25:fa:6e:7b:49:6c:1e:a4:34:87:3f:ae:96:38:
bf:29:65:87:00:6d:68:8c:88:ea:1b:b9:22:10:90:57:0e:c6:
0a:81:54:cb:54:15:0f:33:b3:a5:e2:38:02:68:19:c1:cf:ed:
49:52:c9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:16 2025 by rpki-client