Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: QLkFwFrky+SIrGm+MmSupf93yscfn7B9D7msAN07xp8=
Subject key identifier: B4:AD:14:55:AC:1A:7B:1C:55:CE:E9:7F:2A:3C:D9:1D:57:BE:4C:9D
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 01987418B790678846D59DF80EB769454407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 162A
Signing time: Mon 04 Aug 2025 08:00:33 +0000
Manifest this update: Mon 04 Aug 2025 08:00:33 +0000
Manifest next update: Tue 05 Aug 2025 08:00:33 +0000
Files and hashes: 1: 1gqy8jv-V_H7oweUasDl-ECUQ1I.roa (hash: w7kEB0Eg8qOWOT1pz0wZhRGBM4Y+whIgLQrg7qaGMxo=)
2: EHlGqb04iAIbXB5rqXIY0OnBfmY.roa (hash: 81m7h3zrGqKLifk2aQp93enuHjOZTif5bviOShjKwd0=)
3: JwRfQe1RRMFqmouHM8GDCbBv0qg.roa (hash: HeOaGIUlAHS+jA2tQ0PvTXar52BfbpysaRlaXP3EMw8=)
4: OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa (hash: gKkiytrZ0hzX5R/Kg8dR7Gdhl0r2rLxr0t9FK+F8kjA=)
5: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: 9+t2AZawxdTUFZgEWSg2nOGDuF1botUADud1GmknVL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:b7:90:67:88:46:d5:9d:f8:0e:b7:69:45:44:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Aug 4 08:00:33 2025 GMT
Not After : Aug 5 08:00:33 2025 GMT
Subject: CN=b4ad1455ac1a7b1c55cee97f2a3cd91d57be4c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:43:6d:53:ce:0f:e9:83:77:75:94:a5:f6:
d3:32:e6:9e:c4:56:f1:9d:36:2b:15:07:89:7c:4e:
5f:25:c4:26:50:d2:08:e0:b9:e8:7e:45:fb:bd:c5:
2e:12:58:3f:3d:f6:c4:7b:2f:56:c3:af:02:0a:20:
90:56:2d:95:b6:2f:ff:d0:ab:97:ba:a6:c2:9e:cb:
84:d2:78:b1:8b:d7:fc:23:fa:c5:fd:24:87:be:a7:
75:7d:02:91:76:20:ab:7a:35:77:8d:64:4b:fa:7a:
fd:07:20:61:85:ec:ca:a6:61:a5:0f:71:5c:88:5f:
c5:17:f7:40:6d:b4:cf:db:7e:06:0e:01:75:5d:ed:
3a:2a:f6:f3:6e:c1:9e:ba:b7:34:bb:56:13:f8:45:
3a:88:33:71:69:0c:40:ca:92:a1:90:e0:24:82:57:
b3:c0:d4:5d:f1:c5:cb:15:aa:23:27:e8:bb:8b:89:
34:e9:f0:a2:6c:74:97:fe:a9:db:b8:f7:45:ac:e4:
33:07:0e:16:b4:84:07:a5:10:fc:d5:82:ea:7c:1d:
0a:a8:3a:c3:5c:7b:79:e5:c3:04:46:c0:97:7c:28:
4f:c6:4f:d2:7d:3c:bd:f1:12:92:8f:05:3e:f7:63:
2a:e4:91:64:1d:a9:0a:d4:4a:a5:7b:b5:c8:85:19:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AD:14:55:AC:1A:7B:1C:55:CE:E9:7F:2A:3C:D9:1D:57:BE:4C:9D
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a3:63:b5:01:78:94:bc:0a:db:0d:79:d0:f4:68:52:f1:c9:
ef:30:1a:17:aa:c4:5b:c3:4a:82:7c:70:33:19:39:91:29:0e:
54:16:52:68:04:d4:79:6d:55:b4:06:af:cf:b6:03:1b:8a:10:
a4:97:ec:83:ab:b8:96:b2:0b:5c:a9:6a:67:0a:1f:1b:3c:60:
74:39:c5:f4:c1:2a:75:5b:e2:5c:ed:36:f8:81:dd:3b:e7:fd:
ab:b1:19:5a:ea:79:df:55:e6:d7:e2:3e:bf:74:ef:61:c7:1b:
7e:ac:32:6c:05:23:f9:a2:88:93:89:d2:83:18:3c:f7:38:a5:
81:d0:3b:99:ee:00:a8:4d:9d:bb:7a:42:b1:8b:fa:22:15:46:
57:b8:fb:95:90:97:06:28:f1:e8:fa:3c:ef:87:c2:4d:c1:21:
15:44:38:2e:77:1c:2f:e9:dd:c3:44:64:1b:a5:fb:86:bc:3c:
30:5f:ab:f3:e5:87:7b:dc:41:c3:0b:37:3a:55:53:bd:e3:0a:
43:44:75:f7:eb:6c:26:a4:cc:72:0e:91:56:e0:ae:7d:e6:7d:
dc:c4:22:5f:46:04:93:cf:0c:b7:7f:2e:35:46:c2:7e:d2:e4:
c8:28:99:aa:b3:14:dc:cd:f8:65:10:33:c9:b5:f8:c4:23:fc:
c8:53:64:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:07:09 2025 by rpki-client