Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: Btq/6VpI3vGnvAzo/CzLkbQ0ZcLrH934fqH+AYED2p0=
Subject key identifier: 52:45:A5:8E:0A:49:46:00:25:B5:1E:91:A6:44:46:E2:28:84:DA:9E
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 0198D4DFE11721B97E37546E211158554CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:01:38 +0000
Manifest this update: Sat 23 Aug 2025 03:01:38 +0000
Manifest next update: Sun 24 Aug 2025 03:01:38 +0000
Files and hashes: 1: 7jEmnnvVVJelmr8qrjn50rWFOcw.roa (hash: EchIPXfoij0iDBazd31BWfFW6DqbRboeZNJcaicEn4E=)
2: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (hash: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=)
3: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: +nsl26VNcrm5S3KulJOVs0reuXrWPv8EeQeRuNFFWT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e1:17:21:b9:7e:37:54:6e:21:11:58:55:4c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Aug 23 03:01:38 2025 GMT
Not After : Aug 24 03:01:38 2025 GMT
Subject: CN=5245a58e0a49460025b51e91a64446e22884da9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:00:3a:ae:1b:9f:87:08:d2:ce:52:d1:4e:fd:
4e:66:3d:fe:ab:5c:81:7c:4d:9f:87:e7:0d:27:ae:
14:d5:d6:54:ed:a5:ca:07:7d:fc:5b:20:8b:cb:2d:
f0:1d:30:d1:91:1d:31:77:13:83:a8:d0:75:e9:29:
ad:f6:95:90:68:c7:0c:47:e7:6c:c3:08:ea:2b:1a:
a5:ad:cc:04:8b:77:47:26:ed:b3:65:98:e5:bf:39:
f0:8d:cb:7e:58:ab:05:07:6d:f5:69:ee:23:0b:b2:
d5:81:9d:9c:1d:0e:48:68:28:a6:49:20:bb:00:fb:
dc:cb:27:39:48:be:aa:7e:80:58:c7:74:0a:f8:7f:
6b:3f:f2:5f:27:87:f2:e2:81:6b:20:d0:b8:8c:78:
ee:9f:86:ec:ef:86:99:7e:02:d8:d4:ef:4d:3c:9b:
1c:c2:d8:c6:42:4e:e2:bc:31:94:82:b0:df:df:af:
c2:0b:87:0f:bc:f9:67:f1:6d:93:b3:d8:d7:a8:05:
31:ef:9e:83:7b:fe:bc:b1:e0:3f:e0:92:47:d5:61:
d3:33:a2:3e:24:3c:a0:8a:71:14:fc:7a:e2:b8:49:
72:ae:b1:5c:3b:9f:3a:0c:3a:fa:9d:c4:fb:1e:36:
85:1a:6b:bf:a6:b2:87:d6:07:ab:1b:0e:ab:52:b1:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:45:A5:8E:0A:49:46:00:25:B5:1E:91:A6:44:46:E2:28:84:DA:9E
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:23:af:98:0d:bc:d9:91:6f:95:61:2b:d4:df:25:79:51:f5:
f7:22:52:2f:60:c8:a5:1b:ae:19:5c:4a:98:38:84:94:7a:32:
91:49:0b:f4:e2:45:e5:4d:4f:e3:73:43:c8:bd:76:a3:89:f4:
52:fa:be:8e:bc:0f:d2:56:69:2c:fa:91:b8:9b:aa:c7:69:80:
94:a7:a4:fe:0a:c2:79:5b:1f:cd:51:69:97:0c:d0:5c:23:e8:
8c:ae:ba:14:e5:97:dc:f7:13:82:37:5a:76:c4:d9:fa:63:c8:
ae:e5:6e:61:5b:65:5a:23:06:49:d1:94:90:28:50:e0:97:36:
ba:a1:b1:cf:c6:d9:34:3d:b3:53:ac:10:b7:5a:51:df:31:91:
cf:3d:3d:1a:03:73:c3:a5:e5:d5:1d:34:30:0f:19:1f:ee:ae:
b4:d8:e2:9c:be:77:79:ce:e4:24:62:10:17:c7:67:4e:24:60:
10:7a:7f:bb:59:8b:21:1e:d4:00:4a:92:92:72:70:ee:a1:ab:
10:37:b0:b4:12:45:b4:d7:76:18:1f:c8:8d:8d:42:a8:e7:55:
6e:e5:6d:80:83:ab:df:68:0c:fe:99:96:fd:78:7f:db:4a:04:
70:ad:99:38:bf:61:70:1f:64:52:ec:38:d6:a2:5b:06:7b:f8:
b5:f8:22:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:37 2025 by rpki-client