Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
File: Jd2bhJwNr644b0cBI7CSYa41VRc.mft (raw, json)
Hash identifier: cNkNuWJJGq7dvaE1Afj8Iud9i28SLmiiJqhkqic11a0=
Subject key identifier: C1:74:D1:32:E9:9A:B0:A1:46:06:21:14:3D:53:5D:A2:52:46:D5:FC
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial: 0198D583C611B2973DC38201DF615CA4F70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:39 +0000
Manifest this update: Sat 23 Aug 2025 06:00:39 +0000
Manifest next update: Sun 24 Aug 2025 06:00:39 +0000
Files and hashes: 1: E5UqsHXI4rxEYamOG66v7YvvX58.roa (hash: 58pJlWEPXnRDyDfxMzNI3/SbQdUBvyaiOkTUhmV+dLw=)
2: Jd2bhJwNr644b0cBI7CSYa41VRc.crl (hash: i4PuVQLMLsd3ZtVa2p6JmAyzxdfMEn/uWAR4K1AU2sE=)
3: on-RtWMULYhntqitPVzhY7lgnl8.roa (hash: N1GhLpfbUDUJ0gIZbjVbPi/X8FRKHkZMNhXw3o2Pm+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c6:11:b2:97:3d:c3:82:01:df:61:5c:a4:f7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
Validity
Not Before: Aug 23 06:00:39 2025 GMT
Not After : Aug 24 06:00:39 2025 GMT
Subject: CN=c174d132e99ab0a1460621143d535da25246d5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:56:ed:9e:c5:8b:bb:eb:60:32:3e:94:12:
67:5e:b1:95:0e:6b:99:01:27:13:c1:c1:20:28:c6:
5b:b0:7d:a2:cc:17:be:5d:b4:54:d2:d7:94:af:b1:
f3:7d:44:50:db:b0:55:1e:29:ba:b3:5e:ea:e5:b1:
b7:23:65:a1:9b:72:a0:b4:fb:6e:70:66:c6:a2:db:
0a:87:04:5e:7c:45:32:16:36:f4:0e:e9:a4:51:d5:
9b:b8:91:16:23:b1:79:e8:ce:f5:1d:47:18:ca:db:
0a:60:eb:66:3f:ca:b5:10:51:2e:2b:aa:89:e1:d5:
02:61:01:3b:17:51:11:a3:99:bc:fb:cc:23:5f:e1:
fa:fd:67:ad:4f:85:0b:6f:a1:62:c3:b4:2c:2d:42:
5f:8f:eb:c7:e0:05:b9:13:18:d2:dd:42:a8:4a:ea:
79:ff:0f:74:e4:bb:1d:40:32:08:07:ab:ea:3a:26:
8f:02:a0:ed:60:3f:24:5f:bb:3e:de:41:46:bb:ae:
fd:e0:94:1d:4d:c6:dc:37:9c:25:38:07:95:df:cb:
5e:36:61:82:a0:ce:60:04:a4:d6:fc:c9:80:ce:bd:
2c:9b:9f:d4:3f:61:42:58:0e:c3:81:0f:b8:e9:bf:
76:5e:49:0b:ec:99:0c:ca:61:5e:db:27:01:a0:86:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:74:D1:32:E9:9A:B0:A1:46:06:21:14:3D:53:5D:A2:52:46:D5:FC
X509v3 Authority Key Identifier:
keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:fc:a5:38:d5:45:af:69:90:5d:ea:18:c8:86:f0:10:0a:74:
4d:d9:ed:e9:ef:eb:bf:c9:4f:99:3a:dd:55:c2:5d:26:9f:4f:
1a:3b:d5:d9:09:49:18:94:d2:96:0f:4c:59:19:68:51:9b:01:
49:7a:be:a9:1b:9e:bd:c3:a6:95:df:19:18:7f:03:a2:e6:0b:
e0:ca:15:21:be:58:b1:78:0a:e5:47:5b:89:28:9b:0f:69:0b:
c3:52:ed:cc:69:7b:ae:65:3f:78:fe:4b:ac:26:5d:c9:62:aa:
21:a1:5e:18:12:ca:c1:a5:2d:aa:9c:f1:b2:15:ba:e2:4e:c6:
0e:77:5f:47:7d:6b:0c:70:c4:2c:e9:17:84:63:39:60:80:8d:
6f:ae:46:f5:39:f2:0d:09:fa:4b:50:ab:58:18:b4:1f:8e:ba:
f9:bc:0f:06:bc:7d:85:f5:6d:2c:6f:0b:0b:5f:7e:68:15:12:
b5:d4:89:76:d6:13:cf:2b:22:f4:b9:ce:22:75:1a:1d:89:a2:
e8:bd:9b:52:8e:b2:c2:f9:0a:19:e0:58:86:ed:61:96:e3:f3:
51:0c:81:8f:8d:41:1f:7d:fa:21:2d:52:ca:f4:3c:9b:05:8f:
cb:bd:95:0b:64:de:d3:73:fe:b4:fa:1f:31:d5:e7:96:f8:47:
27:e3:55:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg8YRspc9w4IB32FcpPcKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZGQ5Yjg0OWMwZGFmYWUzODZmNDcwMTIzYjA5MjYxYWUz
NTU1MTcwHhcNMjUwODIzMDYwMDM5WhcNMjUwODI0MDYwMDM5WjAzMTEwLwYDVQQD
EyhjMTc0ZDEzMmU5OWFiMGExNDYwNjIxMTQzZDUzNWRhMjUyNDZkNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFJW7Z7Fi7vrYDI+lBJnXrGVDmuZ
AScTwcEgKMZbsH2izBe+XbRU0teUr7HzfURQ27BVHim6s17q5bG3I2Whm3KgtPtu
cGbGotsKhwRefEUyFjb0DumkUdWbuJEWI7F56M71HUcYytsKYOtmP8q1EFEuK6qJ
4dUCYQE7F1ERo5m8+8wjX+H6/WetT4ULb6Fiw7QsLUJfj+vH4AW5ExjS3UKoSup5
/w905LsdQDIIB6vqOiaPAqDtYD8kX7s+3kFGu6794JQdTcbcN5wlOAeV38teNmGC
oM5gBKTW/MmAzr0sm5/UP2FCWA7DgQ+46b92XkkL7JkMymFe2ycBoIY43QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMF00TLpmrChRgYhFD1TXaJSRtX8MB8GA1UdIwQY
MBaAFCXdm4ScDa+uOG9HASOwkmGuNVUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmQyYmhKd05yNjQ0YjBjQkk3Q1NZYTQxVlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kNGU0MzQtNjM1Ni00NmZkLThiMzUt
N2ZmZDVjNTUwMzg1LzEvSmQyYmhKd05yNjQ0YjBjQkk3Q1NZYTQxVlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9kNGU0MzQtNjM1Ni00NmZkLThiMzUtN2ZmZDVjNTUwMzg1
LzEvSmQyYmhKd05yNjQ0YjBjQkk3Q1NZYTQxVlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfylONVF
r2mQXeoYyIbwEAp0Tdnt6e/rv8lPmTrdVcJdJp9PGjvV2QlJGJTSlg9MWRloUZsB
SXq+qRuevcOmld8ZGH8DouYL4MoVIb5YsXgK5UdbiSibD2kLw1LtzGl7rmU/eP5L
rCZdyWKqIaFeGBLKwaUtqpzxshW64k7GDndfR31rDHDELOkXhGM5YICNb65G9Tny
DQn6S1CrWBi0H466+bwPBrx9hfVtLG8LC19+aBUStdSJdtYTzysi9LnOInUaHYmi
6L2bUo6ywvkKGeBYhu1hluPzUQyBj41BH336IS1SyvQ8mwWPy72VC2Te03P+tPof
MdXnlvhHJ+NVhQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:15 2025 by rpki-client