Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File: jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier: mk6SgfY1y1FfTaFmx5H19EeLFM53DqbTC3Ztz0QwR1M=
Subject key identifier: 78:09:5F:96:80:31:95:E0:A6:2D:DD:58:63:C6:23:D8:17:99:58:13
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial: 0198D4737D30BB83FD47F2F9C600F9EC0C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:03:15 +0000
Manifest this update: Sat 23 Aug 2025 01:03:15 +0000
Manifest next update: Sun 24 Aug 2025 01:03:15 +0000
Files and hashes: 1: 7Ih44HEchM76fosssYsDhPW80DM.roa (hash: fUnotk/PUA4nwBmKa2OkgoRu1RIyYVBHFgrPwz0Fmwc=)
2: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: TMwPAQWDQJsNygIPlDGAWXZHet0ds2M4lia9Vu2FLS4=)
3: tnLXZpAcdsupjiIll_iKlzExQoQ.roa (hash: mDoarqNRra8hpVT2LOO1TVGYi/0LvJxSxAQ/O0wAR7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:7d:30:bb:83:fd:47:f2:f9:c6:00:f9:ec:0c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
Validity
Not Before: Aug 23 01:03:15 2025 GMT
Not After : Aug 24 01:03:15 2025 GMT
Subject: CN=78095f96803195e0a62ddd5863c623d817995813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:cd:68:5b:dc:b6:dd:79:b3:ad:ed:4d:a8:
1f:d9:46:7a:d1:81:93:9e:37:84:1a:83:eb:96:29:
e1:0b:c5:96:72:6a:ab:2d:47:bd:6a:41:79:ef:ab:
16:70:b8:76:7c:ab:e2:b1:30:81:92:1b:06:7b:02:
89:4e:12:4b:1c:c5:e5:b7:5c:55:3d:d0:f8:71:80:
e3:1b:a4:8a:13:3a:61:d6:b1:1a:4f:f1:33:fa:a9:
0f:40:47:df:b8:d1:2b:ba:67:f7:e0:b8:cf:47:af:
3a:24:03:76:2b:90:5a:d4:8c:09:41:24:31:04:30:
48:06:01:df:19:c4:07:d4:f9:df:7c:d1:c9:da:45:
70:57:8b:92:9c:80:bc:92:41:52:fa:31:75:44:dc:
ee:ed:23:56:f9:32:b8:3a:74:6b:aa:86:be:fa:7e:
b4:68:b4:e1:06:e9:0e:ba:be:1c:ec:8b:a5:4a:f3:
7b:f6:3e:0e:45:46:89:e9:69:c2:b3:70:86:17:75:
ca:e2:76:bf:1a:f6:56:1a:0e:99:14:c0:0d:62:5c:
76:24:3a:4d:24:14:16:c2:c2:2d:29:b1:a5:99:ec:
76:bf:c7:c0:3e:f8:e5:78:4c:38:50:a3:88:bd:3e:
b6:70:e1:60:c0:dd:8a:89:04:b2:4f:3b:22:ac:36:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:09:5F:96:80:31:95:E0:A6:2D:DD:58:63:C6:23:D8:17:99:58:13
X509v3 Authority Key Identifier:
keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:30:8d:3f:fd:0d:24:25:87:d4:8d:03:3b:10:cc:ce:ed:cf:
c3:0f:4f:0b:5a:db:88:c2:ce:ab:16:76:87:d3:72:6c:d6:dd:
e8:68:49:73:ef:0f:51:b5:24:c2:79:1b:bc:82:8d:7f:cb:fc:
31:21:13:93:3e:b6:bd:6d:34:1e:7a:b1:47:26:4c:9d:35:b8:
ab:c0:c7:d7:9d:34:fb:f7:12:b3:2b:d4:f8:0f:ce:02:6d:7d:
54:04:d8:ab:bf:7b:af:50:a9:40:21:07:1b:98:0a:2f:59:d5:
5d:2d:7f:4f:34:81:4a:33:c1:56:88:17:91:84:4c:1d:c5:da:
8b:18:46:93:8f:5a:43:29:b5:b9:32:5e:c5:dd:4f:ba:8d:fb:
d2:9c:21:d2:26:62:2d:80:0f:4a:b3:a7:f1:dd:e2:6d:62:af:
18:4e:cd:20:65:72:02:07:c8:3b:92:be:21:44:2d:77:7a:29:
09:05:53:33:c2:3d:e1:14:f4:6b:a3:c4:10:63:f5:39:7e:32:
63:19:06:39:b1:60:a7:ed:05:ba:d4:ba:d4:77:4b:dc:46:cc:
9b:8b:df:2b:58:82:4c:6a:b7:82:d5:ed:c1:24:14:ef:06:93:
f2:57:b8:02:a2:c7:4b:0a:0a:63:f2:27:c9:fd:8b:65:0d:6b:
69:86:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:51 2025 by rpki-client