Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: /Re41FzKdttgemxhfDxSgnUd9CNbhEUHLwkO+uVmEfQ=
Subject key identifier: 61:68:89:6E:2E:12:10:DB:AF:08:14:86:C5:8C:EC:0E:52:12:CA:E5
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 019892C8C0285236BB4D0ADA70258088F37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 162A
Signing time: Sun 10 Aug 2025 07:01:26 +0000
Manifest this update: Sun 10 Aug 2025 07:01:26 +0000
Manifest next update: Mon 11 Aug 2025 07:01:26 +0000
Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=)
2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=)
3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: FzKS0QNkEVXBI8p3i6hXdMNLx7H7CXfx3Sj8P6dHZCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:c0:28:52:36:bb:4d:0a:da:70:25:80:88:f3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Aug 10 07:01:26 2025 GMT
Not After : Aug 11 07:01:26 2025 GMT
Subject: CN=6168896e2e1210dbaf081486c58cec0e5212cae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:0b:8c:4d:0b:f3:23:27:16:d9:c2:06:e3:
99:3e:a1:88:d2:f1:3a:0a:c7:aa:39:79:24:41:e3:
2b:42:19:f6:89:d7:17:9b:ab:18:0f:79:f3:c3:c0:
0c:55:88:4f:87:c7:86:08:d5:b7:45:80:02:7e:15:
ab:6b:35:1d:82:45:ce:c0:38:01:29:86:c6:7a:a5:
10:b7:90:2e:a4:e0:74:7a:ad:f1:e4:a1:38:5b:8d:
79:4e:fb:9a:d0:bb:d1:3e:ca:cc:c4:47:30:84:4c:
8e:53:36:bf:71:e0:bc:a6:3f:b7:58:fe:b5:f2:c8:
2a:f9:26:d0:d8:9c:18:11:28:6a:0d:d2:0e:0d:c7:
11:80:7f:d6:28:36:cf:6a:ff:fb:e4:0f:41:5d:4e:
b9:ea:ac:7c:26:1f:ff:7b:64:6e:67:62:d7:de:bf:
11:aa:60:83:50:7b:55:00:bb:17:09:36:81:8c:cd:
3d:5e:c4:2d:2e:49:5b:a0:c6:92:27:42:a4:25:f2:
02:97:8c:ad:1d:9a:a5:7c:4a:54:9e:e9:5d:6a:e5:
14:ba:9f:c8:f3:33:18:f0:a9:83:eb:97:3d:f5:59:
28:ca:ac:02:c0:59:93:2a:28:d1:5f:1c:29:89:fe:
72:00:0c:cb:83:1a:43:fb:61:2e:86:8d:15:05:92:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:68:89:6E:2E:12:10:DB:AF:08:14:86:C5:8C:EC:0E:52:12:CA:E5
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:bf:81:68:90:b8:3a:95:ed:3e:76:98:d7:12:59:d3:3f:a2:
bc:51:ad:02:a1:7d:88:a7:c0:22:12:c4:d2:72:e0:36:a0:79:
7c:17:4a:62:c6:d3:ef:02:2e:45:fa:26:fd:fb:fe:09:65:04:
74:aa:c0:cd:85:03:98:0a:50:f2:8d:ea:fe:e0:18:4c:95:3b:
51:32:30:cb:f8:eb:99:b8:36:6c:73:f8:5a:7b:17:85:85:da:
5c:d1:0d:58:d2:3d:28:57:5b:20:f7:01:09:96:9e:6b:88:3d:
4a:89:06:bb:8d:eb:c5:d5:3a:59:36:88:1a:c7:5f:44:f9:ac:
41:e4:7e:82:38:99:fd:65:80:6a:c8:ab:7f:5c:1d:d7:da:7c:
f5:d3:52:a5:b8:de:79:7d:7a:0b:da:76:47:c7:09:b0:54:b2:
fa:8d:87:2f:3b:c8:b8:84:96:1f:13:15:19:de:99:ee:f3:ed:
05:16:f3:b6:b5:7f:13:32:4d:e9:1e:76:1f:4f:9e:86:79:db:
69:a9:d7:46:85:a3:e6:f6:65:a6:dc:5f:ca:74:05:cc:ea:c1:
8e:fc:70:e8:50:aa:b8:9e:32:2b:1e:03:3a:d8:0f:1c:d3:bb:
75:22:ca:bd:79:44:06:91:2b:3f:ec:84:0b:0b:6b:67:d7:69:
05:43:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:41:14 2025 by rpki-client