Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File: jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier: 5zCpS4kC9BGLX8789vaae2O+tF4yig27i1jxG4cs2qE=
Subject key identifier: D5:45:75:66:26:2A:E4:43:23:C4:A7:5F:CC:6C:E0:E8:75:8D:C6:44
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 0198D6CCE844175F2787B2112E8EDEFE785A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 12:00:09 +0000
Manifest this update: Sat 23 Aug 2025 12:00:09 +0000
Manifest next update: Sun 24 Aug 2025 12:00:09 +0000
Files and hashes: 1: Zwk791BjXFiWW_GWZuipoheVevk.roa (hash: 98bTEWSKCgsr9ScLAh15mZ7s1p9cPoDYzZZ0PPizWyo=)
2: ebKQop9j6C8Jd62F7ue25JuDgWs.roa (hash: FqOT4Eu6V5AfcUcuw2gXk+K+VJY6kHg+9mF4TAN1HTA=)
3: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: GwfFjLmW+8cUdU6hYGllLzayYMYqYHsUqLU3TiQli9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:e8:44:17:5f:27:87:b2:11:2e:8e:de:fe:78:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: Aug 23 12:00:09 2025 GMT
Not After : Aug 24 12:00:09 2025 GMT
Subject: CN=d5457566262ae44323c4a75fcc6ce0e8758dc644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:36:c7:75:08:4c:32:b7:5e:b7:7f:cc:68:
92:ad:d2:58:b8:7a:3e:b1:d8:a2:5f:ef:6c:76:d4:
a0:03:de:fc:40:f3:76:87:6e:48:c8:08:7a:8b:34:
21:0c:e7:4f:3c:58:8b:25:00:f3:b3:80:b8:f1:47:
c6:34:81:3f:5d:6e:b6:c5:93:1b:25:80:99:86:c6:
84:26:93:29:a2:1f:87:61:9b:7c:50:3f:fa:0e:3e:
99:de:9f:1b:3f:95:72:dc:ac:34:1c:96:5f:e4:9e:
32:01:ea:02:4f:9c:7e:39:59:56:8c:27:62:03:ce:
ba:61:70:2b:c9:80:0f:ac:3d:24:de:5e:66:a5:eb:
39:5f:26:16:ea:3c:78:a8:f0:63:08:12:0e:7a:ad:
12:ff:ac:93:0b:75:a5:26:e2:94:c0:02:5b:03:a6:
df:b9:16:fb:0f:d6:19:a0:60:8f:f3:f8:98:af:64:
99:7a:1f:f7:67:0e:8c:e2:6e:60:30:35:68:e2:8b:
3f:56:9a:fd:54:a9:5d:20:c9:f7:14:bd:ff:5f:e5:
97:0b:87:a0:e2:4e:65:6e:00:c7:03:3a:4e:d7:d3:
5d:43:f1:ec:a4:30:11:3a:3f:4a:8a:ec:f1:0b:6b:
e6:e1:c0:0e:a6:6b:1c:d4:42:fc:46:ef:ad:55:34:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:45:75:66:26:2A:E4:43:23:C4:A7:5F:CC:6C:E0:E8:75:8D:C6:44
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:22:aa:86:12:27:8f:65:fa:0a:62:3c:be:85:d4:5d:39:9a:
36:85:c8:37:94:2b:40:b7:90:10:98:6a:62:6f:9f:4e:20:ab:
e1:87:a3:c7:a7:b6:0d:83:60:f9:95:88:6b:8f:13:a3:42:d9:
b4:6e:17:a5:12:15:18:11:35:64:8f:27:8c:06:da:83:5a:30:
61:c2:1b:a8:f0:d1:e9:06:04:4b:86:a7:e9:fa:97:80:c5:02:
5b:b5:0c:85:9e:b6:0d:c9:2b:ca:9d:93:3a:96:89:f6:83:ca:
65:d3:aa:42:1c:c4:97:6e:6b:e4:b5:7a:08:f6:49:bc:27:fe:
76:fa:ea:05:09:98:fa:fd:c7:a3:1f:c5:35:8d:c2:13:cc:07:
24:1f:04:c6:b5:e6:0e:a5:24:04:23:e1:c4:c4:bb:63:1a:e3:
89:d7:20:cb:b0:b5:4f:e6:40:95:c5:b0:05:1e:35:55:3c:16:
11:8b:18:91:ef:df:2e:b4:88:bd:61:d6:5e:0d:81:b3:8a:39:
a4:05:96:0d:64:7d:7d:42:b5:2e:6f:20:2a:8f:e7:79:85:ed:
95:ed:50:73:09:e7:ed:00:9b:97:7b:a2:3f:97:43:a7:1c:2e:
11:6a:d3:44:79:e0:3f:87:b4:2b:01:87:87:a0:74:f0:12:91:
60:15:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:30 2025 by rpki-client