Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
File: jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json)
Hash identifier: QhlczfjGhBP6zAwqLEey3DIHtt/9crwHzweYJYedcHM=
Subject key identifier: AF:EF:1E:73:F3:F9:2D:E3:3A:35:08:ED:41:E7:22:60:2E:30:80:77
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial: 0198D698230E48F2E8D97E64B22E05509160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:31 +0000
Manifest this update: Sat 23 Aug 2025 11:02:31 +0000
Manifest next update: Sun 24 Aug 2025 11:02:31 +0000
Files and hashes: 1: 1vKogvAJ7aYG5PR2yXnQrWioZSo.roa (hash: 7AslTVaGAxs89CrI0ewnWcmXXnAy3y2uVc1NOrkGAHw=)
2: IGFAJ7tvsxoewBIz-CIaT5Rb9KA.roa (hash: b9kbJBvM0NpcufGFz0NyZFZ9HPycn+QMvqEDUNgTAzI=)
3: ivVRenlAkxSye3NC_DyoAxqoj6M.roa (hash: tMvkuqfZVs7G8eRqzF/eWUmt5tCQ8iMBN+34AAtvEYo=)
4: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: 601xIaG1UWDEQzlPfnz3XAbe6rKmUVa121RQqEZFZ64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:23:0e:48:f2:e8:d9:7e:64:b2:2e:05:50:91:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
Validity
Not Before: Aug 23 11:02:31 2025 GMT
Not After : Aug 24 11:02:31 2025 GMT
Subject: CN=afef1e73f3f92de33a3508ed41e722602e308077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:34:9f:2d:87:fd:e9:b4:4f:4b:70:30:89:
ba:bc:5f:3c:49:41:d3:60:ad:70:f0:03:46:7b:8f:
df:ad:81:2c:55:91:ac:02:38:c4:c3:b8:a8:c1:5f:
d6:2c:22:0d:2f:32:9b:e1:7d:a0:f4:4d:26:9e:7d:
07:12:42:f5:c7:86:9d:e1:61:a9:2f:f4:e0:68:ef:
1b:ff:a0:77:79:7e:6c:a4:63:07:d7:01:c2:d9:b9:
dc:b7:c1:e0:25:54:83:fe:7d:8e:f1:5a:49:fb:01:
8e:6a:02:e0:da:99:70:e1:cd:9e:ac:58:2b:13:79:
ca:60:dd:6f:d5:42:8f:0f:a3:93:e9:a2:7a:cf:0d:
fb:24:c9:a4:23:d3:1b:78:43:4a:fc:7a:ee:1a:a2:
55:d8:8b:6e:98:ec:15:09:6f:fb:37:8f:cb:ba:a2:
d3:04:d3:1b:59:99:ed:68:38:2e:d4:35:27:34:14:
13:a6:47:37:0c:92:c6:c0:38:75:c8:70:10:fa:05:
e9:98:26:cb:9b:37:06:d0:23:2d:36:bd:1f:5d:f3:
f5:f5:b4:b4:d1:39:3a:21:f6:f1:ef:54:4f:dd:b9:
e8:4a:44:9c:29:8e:62:27:03:d9:a0:8b:06:a0:d3:
72:d6:54:64:f7:eb:44:15:f2:b9:d9:9e:de:4e:74:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EF:1E:73:F3:F9:2D:E3:3A:35:08:ED:41:E7:22:60:2E:30:80:77
X509v3 Authority Key Identifier:
keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0a:cd:01:f4:7f:72:3b:81:e7:11:d7:fc:60:a7:ae:3e:c6:
da:07:3f:83:1d:7e:74:80:62:3d:4a:f1:32:01:7e:19:c7:35:
ed:7f:40:17:df:e7:4a:59:f7:7d:bf:52:81:08:77:64:05:4c:
82:2a:ba:fd:62:3f:bd:c2:aa:a5:31:d5:55:e0:65:b2:e2:c9:
a8:92:f2:70:75:3e:5b:53:7e:f4:98:eb:42:2d:3b:45:79:ec:
c8:53:ee:91:70:a7:07:e9:11:18:ab:57:8b:ff:8f:8a:4d:dd:
2c:40:af:eb:79:a8:fa:16:54:dd:4b:5f:4b:24:70:8c:0d:0c:
3c:da:92:e6:03:7f:b9:fb:06:9d:1f:12:05:4b:15:87:c0:1f:
a4:8e:6d:fb:ac:4a:6d:4f:a3:4e:98:68:20:fc:1c:9b:c4:7e:
e0:cd:63:5b:07:83:1e:28:56:25:63:dd:1b:9f:88:d2:a3:2c:
f3:31:48:fe:fb:8e:73:2e:8a:be:9f:96:b7:b7:f8:b7:da:d0:
30:3a:75:e4:68:68:06:23:e7:7c:dd:c9:e9:d1:ed:a6:3c:75:
60:84:54:a4:de:04:6f:e2:e2:18:2e:9f:34:ae:96:08:e0:11:
5b:0d:11:2e:bc:f6:15:d1:67:c4:85:bf:42:8f:c7:3b:8a:e7:
02:3b:6d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:01 2025 by rpki-client