Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
File: Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json)
Hash identifier: l2FHY5GgZSz2yaUxxIoslpK8jNmkFoXQ5FEqfwICLPo=
Subject key identifier: 95:37:06:E6:65:C0:FF:26:7D:FD:32:0F:DE:25:19:B1:0E:E1:61:D3
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial: 0198D6CD432E54BB7C9C2FC77EC304AEFEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:00:32 +0000
Manifest this update: Sat 23 Aug 2025 12:00:32 +0000
Manifest next update: Sun 24 Aug 2025 12:00:32 +0000
Files and hashes: 1: 8uqjL1Q7jgFdAvMEecW_AW4apnU.roa (hash: IZPA4o1k55p7lULIvDMGq6iadu+UZEquYpH4pdM728U=)
2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: JsPgMOHvC3Gehszr2SWNDCnhMAhrULd0uDnEqNoJdQo=)
3: LrkB9dXr22HFK0At5t4rrNYD7PQ.roa (hash: pK+9flLjEvjRYAQ3vaW216H5wdCjdNXzoh5ryOe38KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:43:2e:54:bb:7c:9c:2f:c7:7e:c3:04:ae:fe:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Validity
Not Before: Aug 23 12:00:32 2025 GMT
Not After : Aug 24 12:00:32 2025 GMT
Subject: CN=953706e665c0ff267dfd320fde2519b10ee161d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:70:97:e7:af:4f:a3:d7:91:81:5b:6f:c3:
b7:82:f0:f5:60:15:38:1a:0c:8c:34:41:e9:8b:d3:
18:73:12:76:a9:f3:8f:8e:ba:50:98:13:b0:09:41:
3c:2d:03:00:b4:84:af:c3:00:c0:e9:e0:f8:bf:db:
94:74:13:11:dd:00:0a:94:c8:c0:70:77:20:fa:64:
b9:33:b5:8a:f7:2f:47:87:1c:0f:f7:af:7b:c1:f5:
e3:5d:a0:da:bc:b6:12:1d:ce:13:09:1a:77:89:92:
20:4e:ce:11:78:31:28:1a:06:4a:e0:dd:2f:b3:99:
cc:94:c6:96:e2:db:b4:01:b1:d7:5c:5f:8d:53:78:
af:16:86:b2:2b:f0:8c:bc:b4:b3:0c:e0:23:32:5d:
d3:bd:16:b7:5d:6d:3a:2d:f6:e3:9d:40:eb:63:b1:
f6:5a:be:fd:c9:c4:d3:8b:2a:e0:e5:65:4f:41:f5:
ab:97:fa:70:33:e1:bd:63:9d:e4:00:d4:3a:79:9c:
6b:49:17:f9:f0:78:5f:0f:c3:12:4a:28:d4:a1:d9:
2b:3f:9c:66:9e:e2:6e:a3:23:37:99:2d:7b:26:25:
68:b6:21:a5:55:cb:71:68:41:e3:c5:13:8e:d4:a4:
cd:e8:78:eb:55:31:9e:32:7a:96:8c:8e:87:38:dd:
5c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:37:06:E6:65:C0:FF:26:7D:FD:32:0F:DE:25:19:B1:0E:E1:61:D3
X509v3 Authority Key Identifier:
keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c7:5c:56:22:5f:54:2a:d1:57:9a:8f:00:0a:df:91:b9:62:
e9:42:19:17:8b:83:8b:09:b1:c0:77:a5:e9:3d:f5:b9:62:de:
72:04:08:9b:1d:d6:92:30:d2:e7:94:b3:0e:26:8e:99:32:bd:
8c:97:bf:2c:1a:af:1c:68:75:fd:09:12:14:03:b8:e0:74:bb:
f9:d7:6d:ba:d3:4b:fc:fb:28:d2:52:5c:29:cd:bc:2a:05:7c:
12:11:83:00:9c:c3:a4:12:d4:98:28:2d:23:51:68:26:70:10:
79:7f:52:4e:14:d0:a2:29:18:b6:ac:08:6a:c4:38:88:72:e9:
1f:b1:99:ec:1c:da:da:7b:30:05:39:e7:aa:4a:c6:89:7c:f8:
5e:45:c4:2a:e9:a2:88:c8:41:e1:c1:c1:2f:5d:58:4e:51:84:
1a:c7:4d:72:e7:24:de:30:f7:fa:26:70:f0:8c:fb:5a:3e:4d:
9f:39:30:d6:8a:6e:e2:86:95:f1:6e:6d:69:75:bd:ac:5e:a5:
11:b5:b8:39:23:8d:07:d8:3a:87:71:4c:cd:43:78:d2:8d:a2:
1d:79:82:4d:9c:ec:f2:f1:6d:54:48:e0:b1:5d:fa:f6:ee:62:
3d:e0:49:40:70:ed:5e:eb:c7:5f:1e:15:e2:cb:25:63:1e:20:
ac:43:7f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:13:28 2025 by rpki-client