Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
File: u8JktaZJT4kPoxT2H9fSdYfjWDA.mft (raw, json)
Hash identifier: jQ9Letu2wVbhgGwKk5rf++1UP4yAXL1dHZ8UqEJgKG4=
Subject key identifier: A3:D0:C5:D6:9D:34:06:1C:DC:E8:BA:BF:DF:EF:90:2F:A6:98:32:59
Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Certificate serial: 01989C71E73498946977245FF084DE0F1EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
Manifest number: 162F
Signing time: Tue 12 Aug 2025 04:02:46 +0000
Manifest this update: Tue 12 Aug 2025 04:02:46 +0000
Manifest next update: Wed 13 Aug 2025 04:02:46 +0000
Files and hashes: 1: t4qANnEhvVWnrRLkZS7CKoTPpCQ.roa (hash: dm6ZxXeDx09W/sn7TAuJSwJg3JzyL+0jwWDxaTnORrU=)
2: u8JktaZJT4kPoxT2H9fSdYfjWDA.crl (hash: EsMpPqo+wGpqzWrAHKk1sfYoZH6VPq+IAqaheLb4T5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 04:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:71:e7:34:98:94:69:77:24:5f:f0:84:de:0f:1e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Validity
Not Before: Aug 12 04:02:46 2025 GMT
Not After : Aug 13 04:02:46 2025 GMT
Subject: CN=a3d0c5d69d34061cdce8babfdfef902fa6983259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:08:7d:ed:e9:e5:d8:c1:e3:84:b1:7c:41:
8e:45:c4:d6:4f:c9:e7:c0:a8:6e:2b:d1:f7:2f:8e:
c9:49:0d:d8:2c:39:95:7a:d2:74:44:33:ae:74:d3:
4c:4c:b7:2f:32:30:30:a8:c8:67:39:8f:c6:73:f8:
0b:aa:c0:56:f3:d6:12:fb:24:fe:ef:d6:db:da:f9:
0b:5f:26:06:06:ee:03:b5:35:0a:32:ac:5d:51:d6:
01:78:75:94:36:0f:44:ec:d0:b8:8a:1c:f4:c7:c5:
11:b8:f1:ea:a5:dd:89:31:88:d4:5c:31:54:5f:13:
7e:24:c4:79:4e:46:4f:06:88:54:bd:6e:f2:d0:80:
5e:18:71:3d:1b:c5:b2:78:9b:2f:41:86:7a:14:6c:
6e:98:38:7d:7d:62:b9:e3:93:25:5a:a7:46:7b:c3:
d5:3c:fb:d6:d4:86:4c:65:56:35:38:48:f4:72:ca:
e5:22:73:11:ad:7c:fa:2e:db:2e:f4:66:c2:5a:8f:
0e:c2:fa:3d:95:e3:91:4b:87:99:67:de:9d:41:04:
8c:b0:5e:e8:fe:fb:cd:db:76:06:a4:1c:4a:c6:24:
23:0b:25:6f:bf:7f:2d:a0:af:e9:81:c0:90:62:3e:
0b:39:a4:f6:45:bb:9c:0f:86:3f:21:05:1b:c6:4d:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D0:C5:D6:9D:34:06:1C:DC:E8:BA:BF:DF:EF:90:2F:A6:98:32:59
X509v3 Authority Key Identifier:
keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6d:40:88:48:1f:b2:0f:99:16:7a:b4:4c:05:22:0a:40:05:
26:ae:9a:ed:0f:c9:8d:84:4a:aa:d3:b4:af:48:a9:6d:c9:9d:
6b:ec:60:f8:52:a6:75:af:29:86:01:d1:98:00:cb:eb:ea:98:
7a:ef:af:e3:66:8e:4f:07:4e:27:3e:a7:16:af:89:4b:a3:c9:
1c:95:66:20:37:bd:0d:f5:4f:8e:78:a2:dc:ca:12:71:e9:c7:
2d:22:0e:05:61:8b:a0:3a:20:c6:49:1f:77:5f:93:d3:dd:d3:
02:5c:be:98:57:25:77:01:6d:3a:d9:a4:25:6b:a1:4f:39:97:
ef:14:63:b3:2e:f8:4e:96:52:8f:9a:f2:dd:6c:26:0c:37:b6:
11:c2:c5:05:d3:55:2e:1e:1b:33:f4:ed:0e:f8:b5:6f:c5:d3:
2e:23:b3:03:77:b7:b7:35:39:18:2d:b8:27:59:ff:59:2d:4c:
42:69:65:ec:8a:9f:1c:3c:d8:2a:77:39:e9:aa:e6:b3:7a:1f:
a1:63:d6:b8:48:1f:fc:73:07:87:1c:6a:11:36:bd:cd:f2:3f:
88:6b:5b:d0:8d:43:51:8e:3d:b5:18:4c:67:7c:28:ef:bf:b9:
20:98:73:3b:90:2c:19:1c:54:4f:9e:9d:54:0c:e0:34:16:43:
42:9b:63:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:26 2025 by rpki-client