Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json)
Hash identifier: BhtmNeDGWZ/wrXWcXVObPNllPBO2uOViuH+QOv929dM=
Subject key identifier: 79:B8:90:62:47:22:3B:C0:A5:90:07:80:C0:35:34:E4:41:9B:DD:03
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 01988B7D535B98E538E93348CC2F4F1DE95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
Manifest number: 162C
Signing time: Fri 08 Aug 2025 21:01:43 +0000
Manifest this update: Fri 08 Aug 2025 21:01:43 +0000
Manifest next update: Sat 09 Aug 2025 21:01:43 +0000
Files and hashes: 1: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (hash: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=)
2: ihKky7iErFMr7G88FOVCnj74bps.roa (hash: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=)
3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: FgGxcTnCxHbtfHLEdDTgUD4ZgL/F216aII/0MOiMnqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:53:5b:98:e5:38:e9:33:48:cc:2f:4f:1d:e9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Aug 8 21:01:43 2025 GMT
Not After : Aug 9 21:01:43 2025 GMT
Subject: CN=79b8906247223bc0a5900780c03534e4419bdd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:6a:7d:42:50:d4:aa:9c:9b:d3:30:39:54:
c7:92:84:cb:5b:78:04:c3:57:ab:4d:cf:47:ef:3c:
e7:02:fb:09:77:da:9c:24:b2:0b:b3:66:32:97:25:
a4:88:ae:fa:02:cd:85:7e:5f:4d:22:a4:ea:05:47:
ee:74:50:ee:b3:ec:b1:22:80:32:73:44:57:6f:12:
f8:8c:27:47:b5:68:ff:cf:c0:93:f4:b0:f4:34:a4:
bb:58:44:61:a3:76:6b:9c:34:65:b5:ca:03:75:bc:
e1:f8:65:f0:a4:1a:a4:9e:b6:bf:12:15:1f:9f:2f:
3e:35:a6:98:33:ce:78:3c:73:f7:fd:37:83:63:fa:
40:c4:2d:6d:d3:02:7d:b0:fb:26:1e:71:92:f3:b3:
47:98:5a:fd:47:fc:e8:17:03:19:fc:1c:b3:a2:e9:
08:c6:8e:87:20:a9:4d:0f:d6:c4:9b:9d:bc:95:d7:
df:41:94:ff:d6:e6:ae:69:ce:b0:13:9b:5a:ea:a1:
08:51:29:38:b0:8f:da:90:5b:31:30:61:b4:09:5c:
69:ee:76:7c:98:49:86:7f:d8:90:25:76:c6:72:ce:
ad:a6:2d:38:a7:c1:04:63:ba:de:4a:a9:f2:59:fe:
2d:6a:05:61:c2:27:59:81:12:a0:90:90:71:e1:6e:
61:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B8:90:62:47:22:3B:C0:A5:90:07:80:C0:35:34:E4:41:9B:DD:03
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5b:75:ba:bc:f6:f4:54:bb:cf:05:ca:52:16:61:a2:4c:98:
cc:31:16:3d:64:94:8c:22:f4:3d:c4:ae:f3:0d:6c:88:a3:7a:
a6:be:98:59:b4:99:2f:2f:eb:98:94:45:a9:43:03:39:fc:9f:
5c:b7:a3:a9:10:c7:74:67:af:7b:3d:63:0e:e0:8b:85:3c:b0:
db:a2:89:19:f5:68:9c:b9:c3:7e:f9:94:19:48:41:d4:47:5e:
88:87:b6:c8:c5:82:ca:0e:7a:ac:69:be:2a:3a:8b:15:17:0f:
92:4d:12:81:f2:37:fe:87:03:71:1b:70:2d:bc:0e:ee:57:be:
da:b5:0e:3c:ad:6a:6b:18:ec:b6:d0:42:c5:e8:66:33:de:b4:
b4:65:8a:80:96:73:a4:f9:04:17:6d:0f:ca:23:f1:a8:e9:f8:
b7:ab:9d:f2:a2:eb:d2:a3:ab:c8:c7:c1:b3:34:ae:3b:55:b6:
57:b9:99:aa:c3:ed:c2:b1:82:63:81:e3:ec:66:1a:f8:9a:d6:
87:8e:a8:a7:52:00:15:d8:0e:81:a8:5e:c1:b9:00:f1:d4:2f:
05:4d:2e:89:9c:c3:5a:e1:ad:d9:1c:58:e2:c3:31:41:cb:2f:
20:3f:f0:4e:e0:5e:5b:35:c4:2e:6d:83:5c:96:50:6d:c7:96:
28:a1:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:46:19 2025 by rpki-client