Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
File: jHr3naXytomGyDVkYKQ_pC0386Y.mft (raw, json)
Hash identifier: HpDRBX4UwlbMfB6pu0kw+BW6tyWyYCl0kqMW25/8f/s=
Subject key identifier: 9F:62:D4:22:26:99:33:3F:67:6E:47:E7:42:60:FC:3F:EC:11:9A:82
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial: 01987DC14BDF1BE2A099CCDF4CC5D6EF7F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 05:01:16 +0000
Manifest this update: Wed 06 Aug 2025 05:01:16 +0000
Manifest next update: Thu 07 Aug 2025 05:01:16 +0000
Files and hashes: 1: Y6x4X7ml7gBX__XgDy6M9m8y_fM.roa (hash: euuUJ2B09SVhI3IDat0XeMWmWw0q0J+4EoTaRS+kLdQ=)
2: jHr3naXytomGyDVkYKQ_pC0386Y.crl (hash: 20nkf+q/qILU9DXY0lIkPJHa+vXFw4/5tPFE0yKW/To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:4b:df:1b:e2:a0:99:cc:df:4c:c5:d6:ef:7f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Validity
Not Before: Aug 6 05:01:16 2025 GMT
Not After : Aug 7 05:01:16 2025 GMT
Subject: CN=9f62d4222699333f676e47e74260fc3fec119a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:35:cf:6e:09:af:39:6f:fa:f4:97:0d:0e:05:
04:5d:52:fc:38:8d:4b:5c:b9:76:b2:8a:ea:3d:ea:
ce:9b:93:12:5c:a3:74:65:6c:f8:06:5d:88:c7:d7:
2b:62:e6:b6:3f:01:ff:f1:9d:87:95:3d:31:49:0f:
7c:32:fa:b6:e1:37:ba:10:40:d7:15:31:01:22:a0:
fd:0b:aa:6a:a3:e0:de:bd:bb:57:67:60:4c:9a:75:
7a:16:e4:a7:99:71:92:f7:6b:aa:ae:d8:7b:8d:1c:
30:49:eb:36:d5:8e:4a:5a:65:83:b4:02:9a:c9:52:
79:38:0c:f7:7e:f6:bb:0d:a7:06:f2:f5:17:22:67:
d6:ac:85:67:cd:33:a7:b7:cd:3a:ed:42:5a:dd:ce:
93:c2:dc:98:26:62:11:2a:c2:5d:1e:0b:e8:fe:f4:
bb:d1:a5:7f:fe:6c:2a:7f:a0:6d:b8:73:b1:c5:5a:
f0:c8:1a:f7:95:08:eb:bc:3b:44:5e:30:31:9d:bb:
ed:cd:ac:c5:95:d5:da:61:6e:e3:e7:14:0c:af:51:
42:2e:5d:26:be:29:15:c1:06:ed:34:e5:0a:dd:c3:
f4:f6:53:11:19:2d:82:26:4d:93:9b:e4:65:84:7d:
51:2d:26:93:40:08:21:76:ab:f7:e5:d0:74:90:85:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:62:D4:22:26:99:33:3F:67:6E:47:E7:42:60:FC:3F:EC:11:9A:82
X509v3 Authority Key Identifier:
keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a4:47:3c:07:74:28:e3:d7:03:14:66:aa:c0:aa:4d:c6:58:
00:b3:c8:14:dc:29:67:cb:1f:89:56:25:80:94:95:82:02:df:
21:3c:bb:c1:0f:78:95:e7:47:d4:38:60:16:c3:ae:f3:f4:38:
96:ba:75:4f:10:2e:75:49:78:ef:f3:7d:79:7b:11:af:55:38:
6f:f8:17:c8:a8:ef:eb:cd:22:f2:3c:cc:b6:59:62:65:78:a8:
5a:11:d5:53:61:76:af:66:ee:c2:77:a3:48:11:d0:46:e2:3d:
86:91:3c:84:5f:a9:86:44:6f:75:f6:7b:13:8a:46:11:9f:2b:
29:6b:e8:04:24:6f:74:dc:be:ea:0b:c5:41:49:17:4f:d2:70:
17:bd:9b:f5:6f:e3:7f:9a:ee:0c:8e:54:34:d3:97:14:35:dd:
7b:58:23:9f:f3:be:35:91:1b:71:05:3f:14:af:d7:ff:ed:b4:
02:84:59:1e:eb:5a:ae:4a:c9:7e:2e:91:c3:8d:b6:55:ae:03:
20:56:2e:24:44:7c:b6:b5:37:28:ff:79:4e:bf:6f:49:29:60:
74:42:2b:6e:35:ef:77:cb:dc:52:e2:3e:46:2e:2c:b6:c3:83:
d2:fb:82:94:16:dd:de:7c:28:12:b3:49:a1:10:da:1b:59:69:
d3:41:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:49 2025 by rpki-client