Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
File: Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft (raw, json)
Hash identifier: Nb+iE+eDhgEnIjJRXLDllJk4JKbIu9zKFZdh8eINZzA=
Subject key identifier: 47:7C:71:3C:09:04:A0:10:29:86:F3:ED:17:89:C7:F3:3B:87:E4:39
Authority key identifier: 26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
Certificate issuer: /CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Certificate serial: 0198D5F145690E59E116692CF79AD4FDC750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl (hash: ekc91DULIlLca9Qr6sTAohOQYr2O6/GA4VwM+2E0t4Y=)
2: JsFuF67j5QQhkERyLc9f-ELIcO4.roa (hash: Jr+i8Pi7L5/o/8dCQ8fKEW/EXyo8XR/bahrVO/hjd9g=)
3: k4opLHE596mDmmleF3IyTuI3JYo.roa (hash: FNLuUm2MqOPcBwdnPkx8HwmBWDjGjRFM7nXpuuRMMIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:45:69:0e:59:e1:16:69:2c:f7:9a:d4:fd:c7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=477c713c0904a0102986f3ed1789c7f33b87e439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:b4:cc:07:b4:5e:7a:a5:1f:cd:f6:06:68:
20:c5:88:9b:a0:fb:65:61:d7:34:6a:4e:40:cc:c8:
24:9f:9a:a0:b7:c4:da:ff:70:89:54:90:09:fc:6f:
ff:e3:e7:7c:fe:c5:89:f7:ea:89:ed:0e:83:41:1c:
7a:12:7b:bf:d8:3c:e0:62:a2:b8:ac:92:88:9e:d0:
49:15:48:a9:95:fe:d5:65:68:39:5d:d1:ff:88:44:
dc:36:a4:cf:b3:aa:85:95:0a:8c:b8:4f:58:6b:2c:
46:39:e6:49:22:d5:f7:ea:91:64:16:99:90:72:a7:
4c:c7:d8:cb:4e:8e:06:b5:cd:18:bd:85:ec:9b:7e:
b7:34:a0:c0:8d:3e:91:22:93:05:bc:cc:0a:6d:1c:
e4:53:09:7a:fe:74:34:05:f5:41:2a:43:e8:05:d5:
3d:94:6a:b8:9e:45:47:eb:79:cc:6a:0e:68:85:7b:
27:83:ba:17:09:25:3e:84:94:54:15:ae:ac:f5:74:
a8:ba:f7:22:a7:c6:8e:2f:28:20:8d:78:0b:9a:a3:
b8:0c:7c:fb:3c:a2:ce:35:ec:27:aa:42:d7:c6:5d:
c7:1e:7d:ec:62:1c:a6:e3:78:6f:7f:67:b2:00:82:
a2:ad:58:21:ac:45:3c:ca:de:a3:c5:02:63:21:e9:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7C:71:3C:09:04:A0:10:29:86:F3:ED:17:89:C7:F3:3B:87:E4:39
X509v3 Authority Key Identifier:
keyid:26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4d:e6:f9:ba:d0:cd:47:05:f9:f1:a1:55:9a:4e:ec:21:a5:
cf:39:fe:6c:c7:c5:2e:af:78:84:9e:41:a4:91:5f:0c:7f:26:
06:11:4b:38:cd:7b:4c:a2:c2:79:85:be:d7:ec:30:96:a6:86:
fa:6a:c2:46:e0:cd:52:ed:77:03:75:07:95:10:a1:8b:31:a2:
32:36:32:01:8d:69:89:93:3f:38:36:c7:6c:f6:83:f3:c5:6e:
07:2e:77:29:c3:a5:20:8c:34:b2:38:f5:7a:b4:c4:f9:82:b5:
3d:60:bc:d0:b1:23:22:0c:e2:0d:d7:ef:2e:13:bf:74:0c:4c:
1d:c2:73:63:8b:6f:bf:92:c5:0c:b0:36:98:be:1e:d4:35:66:
8d:7b:30:58:bc:1e:51:2e:8a:ed:8e:84:e3:ce:a5:62:ec:a7:
86:bc:ae:37:3b:67:e4:e0:fb:32:6d:a5:2d:1f:db:65:02:4d:
f8:de:3a:da:67:4c:16:f7:cb:92:f4:1b:85:eb:d7:5a:b7:ea:
33:12:53:4e:99:66:63:6a:5b:6f:3a:7d:af:a0:82:21:fb:30:
aa:81:f8:07:d9:f0:c8:67:30:70:fd:6d:fd:dd:00:1e:ae:c3:
ec:4c:59:74:c4:e8:b2:98:e6:bf:59:dd:ac:96:60:3d:13:25:
28:f5:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:46 2025 by rpki-client