
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
File: j5D2t16RPyeC7VSetyFyxZzEevE.mft (raw, json)
Hash identifier: m37BFY5fD3xmGNWcUQ2ODv3y0B2KHDMQizrfejfRE9U=
Subject key identifier: 4E:ED:D3:DD:82:D6:9D:0F:2A:10:AE:6F:BB:37:53:04:76:84:C9:27
Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Certificate serial: 0198D4A83E0F06E095E2BF34BE240CF38D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 02:00:52 +0000
Manifest this update: Sat 23 Aug 2025 02:00:52 +0000
Manifest next update: Sun 24 Aug 2025 02:00:52 +0000
Files and hashes: 1: iyPNjwJabCXXK6p6-uFNI9tlBmA.roa (hash: gNpFReUeQCJp2ONtKUvB3iNXDc2qvV1lA6rnPgigdyw=)
2: j5D2t16RPyeC7VSetyFyxZzEevE.crl (hash: RbuztWHygC3SN6KSho0avRG11nx4k80LhTyhnw/MB1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:3e:0f:06:e0:95:e2:bf:34:be:24:0c:f3:8d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Validity
Not Before: Aug 23 02:00:52 2025 GMT
Not After : Aug 24 02:00:52 2025 GMT
Subject: CN=4eedd3dd82d69d0f2a10ae6fbb3753047684c927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:88:25:b9:1f:ef:23:1c:6d:b2:1d:ef:f1:
ef:ca:42:12:fb:0b:20:cc:73:7b:36:91:2e:8e:10:
37:03:0b:51:da:59:ed:4b:0d:29:e0:1a:1a:bf:7f:
ef:b1:8c:0c:71:bc:6c:dc:cc:be:92:ec:3d:3b:d0:
f8:70:87:fa:fe:1a:12:c5:dd:eb:c8:e4:a2:16:21:
9a:a6:0f:01:06:2d:12:45:95:e2:ec:17:45:45:a6:
b3:5b:d6:ed:56:ef:3c:7b:77:5e:2c:b4:04:93:3f:
a5:e8:98:1c:42:29:3e:11:e0:a8:c7:8f:7f:ba:88:
83:2c:2b:76:39:b6:22:df:59:ba:6b:33:19:34:26:
c4:be:09:69:6b:6a:0f:da:2d:96:af:a3:4a:18:96:
d6:ed:92:f2:59:6a:55:f0:ce:61:4c:ff:80:d7:7e:
81:bf:57:4d:64:99:5b:06:da:10:50:e9:59:d6:a0:
84:b5:13:e5:22:f0:8c:db:aa:c7:21:71:1b:98:e7:
57:51:16:f1:5e:74:53:1f:bb:4e:2b:d8:2a:0d:0f:
ab:d2:1b:a0:96:14:40:7c:fd:fe:f1:1f:69:0e:16:
8f:87:8a:69:3e:38:4e:96:63:36:6e:b1:36:65:9c:
a4:fd:be:e4:c9:fd:7b:da:1b:16:bd:52:e9:c6:7f:
d6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:ED:D3:DD:82:D6:9D:0F:2A:10:AE:6F:BB:37:53:04:76:84:C9:27
X509v3 Authority Key Identifier:
keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:71:3c:e8:62:d0:7e:07:76:57:7a:bf:f9:d8:dd:8e:57:30:
03:d2:a5:76:39:6e:69:a3:cd:87:5f:44:ff:88:51:ca:30:23:
8f:0b:d5:53:0c:85:4a:82:9d:7a:e5:52:7d:31:6e:da:ab:c2:
e4:35:b5:30:26:4f:1a:64:ba:44:c7:40:d9:89:50:d4:0f:da:
fe:7a:68:e9:eb:7e:51:6b:b8:85:17:b0:57:af:0b:06:97:2c:
f3:0c:2b:2b:13:42:bf:59:87:3d:68:93:50:3d:d0:ed:72:bc:
df:32:de:48:5f:73:5b:82:1f:ca:fd:9e:08:71:45:18:c1:57:
04:ed:40:66:a8:52:a6:78:9d:cf:82:5c:bc:1e:10:d2:82:d0:
d3:61:7f:62:fd:25:fb:e7:c0:fb:8f:ad:3f:bf:60:80:25:39:
59:ce:57:78:d2:0a:3d:97:02:c3:43:46:de:16:cc:fa:5e:e4:
4e:bb:31:8b:48:49:6d:fc:a2:7f:64:e7:a4:12:f1:72:4f:08:
66:74:ef:c7:32:21:51:e8:bc:49:b3:46:a6:ef:eb:c5:71:c6:
f6:8a:d1:09:13:6e:20:3d:64:65:94:4e:9c:63:dd:31:18:3d:
51:01:57:ee:5f:24:4c:26:70:14:37:8b:2d:c5:e9:4c:0c:fb:
2b:f9:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:53 2025 by rpki-client