Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier: ai0aPUY928ReNPFZyindJlj81SiZKckP3LVLH3JGmYo=
Subject key identifier: 9B:80:95:A9:C8:BC:FC:55:AB:C8:1F:C3:F6:E2:75:B4:10:55:E0:DB
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 0198D5BBF78E1116978851794949D30D88F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:02 +0000
Manifest this update: Sat 23 Aug 2025 07:02:02 +0000
Manifest next update: Sun 24 Aug 2025 07:02:02 +0000
Files and hashes: 1: 8XphOJkPtZHC_4MC2PQEPr0m2ac.roa (hash: dXWM6e00IU0bRpxg53QiBkBA19LCXMaHdPOkhO8paFI=)
2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: 8tpyU2rYu4CHyviTYpwYWK61be5AVj3CU+XuG10ATSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f7:8e:11:16:97:88:51:79:49:49:d3:0d:88:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Aug 23 07:02:02 2025 GMT
Not After : Aug 24 07:02:02 2025 GMT
Subject: CN=9b8095a9c8bcfc55abc81fc3f6e275b41055e0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3b:22:9c:75:10:44:fd:62:75:6e:71:07:16:
5e:32:e5:cb:70:c4:67:36:c7:fb:15:d6:ee:43:6c:
79:26:be:a0:0c:62:30:5f:6e:4a:f7:e4:4a:64:37:
87:bf:3d:2f:a7:76:86:37:a3:13:75:f1:b4:fa:f7:
08:2f:3a:b6:2b:fe:d8:d9:f8:b9:1f:a5:aa:a8:e4:
78:68:de:22:50:5a:68:42:0c:2c:d4:5a:8c:d7:c4:
5d:52:13:d4:df:eb:b3:13:19:82:75:7d:ae:bb:ea:
a1:15:65:81:9c:53:8d:52:05:1d:a1:7a:90:db:7a:
d8:98:b5:34:55:b7:fd:76:e2:f6:63:9e:26:3a:40:
e7:42:e6:27:bc:3e:4e:c8:f4:e4:d8:08:fe:92:6b:
0c:53:9a:35:21:5c:79:87:39:e0:5c:d0:88:ad:f8:
64:5b:52:a0:2e:11:6e:4e:91:73:b6:0d:94:7e:e0:
ae:f0:32:30:25:9a:79:68:8d:63:94:e4:3f:54:fd:
60:e0:89:bc:6d:9e:a9:62:20:d7:53:44:f8:ab:0d:
24:e8:c9:d5:db:2f:71:78:96:ae:70:e7:eb:42:b4:
1e:fc:4a:a4:06:f0:eb:2f:40:0b:01:2a:f8:f0:ab:
46:87:47:83:79:26:68:82:00:5a:ec:29:69:a9:08:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:80:95:A9:C8:BC:FC:55:AB:C8:1F:C3:F6:E2:75:B4:10:55:E0:DB
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:16:0e:78:af:c9:c7:d8:0a:d2:ed:a4:dc:62:c1:c2:36:af:
78:fe:5b:33:cd:cd:98:5c:63:09:86:b9:f1:3b:ae:e2:a2:00:
39:ee:24:a0:32:ac:28:a5:dc:82:52:12:e8:56:63:17:9b:43:
36:df:d9:2c:27:b8:65:f5:66:62:1a:f6:a1:1c:78:87:14:c5:
4d:e5:5f:9a:4c:72:96:43:44:7d:ca:8e:d6:e5:1e:b9:5f:44:
05:2b:16:d0:f0:a7:c4:4f:08:1c:89:ef:54:24:c9:36:db:c9:
5d:5a:76:6f:4f:bb:67:07:a2:bb:5a:23:e8:15:c7:ed:3d:04:
1d:61:d4:79:b7:8e:af:5c:b6:79:85:25:9f:84:81:55:1f:3b:
bf:68:fb:d1:4e:61:ca:0b:c9:b6:28:b9:2f:40:69:73:94:9d:
3f:d8:82:b9:14:d8:15:34:3a:a5:22:b3:b4:61:13:4f:95:2d:
41:76:b6:c2:a2:ad:2a:0d:1a:db:7d:4b:dc:0f:55:0f:70:64:
38:f2:52:7d:62:e8:ac:99:b7:fd:70:b1:01:98:36:9f:e7:28:
84:53:75:ef:24:35:2b:7f:4c:0f:4c:7c:d1:e1:21:5e:f1:16:
91:4b:5e:ae:ca:c7:fe:5c:d8:8f:01:c9:a3:9c:f8:e9:96:81:
90:d7:88:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:15 2025 by rpki-client