Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
File: j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft (raw, json)
Hash identifier: dloYEj5B/ZxVIcTZQgQIqKdwPpauJ/uYyznESs+KRhY=
Subject key identifier: D9:FA:61:C7:49:6C:88:FD:1A:01:51:28:C5:C3:94:CF:39:5C:A1:BA
Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
Certificate issuer: /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Certificate serial: 0198D5838728B9DCBF320857859645EDD89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:23 +0000
Manifest this update: Sat 23 Aug 2025 06:00:23 +0000
Manifest next update: Sun 24 Aug 2025 06:00:23 +0000
Files and hashes: 1: 10WRObO3tmaDpYMoBfmVIGzlnrU.roa (hash: n66l+JhsIf8xYrrxl7QWiJVsW0qqjRpUm2OsP46Hyms=)
2: j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl (hash: UpPsw9f1G3x/Z67vxdlNC5iUx0EMrwKNNLEU2mLmTBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:87:28:b9:dc:bf:32:08:57:85:96:45:ed:d8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Validity
Not Before: Aug 23 06:00:23 2025 GMT
Not After : Aug 24 06:00:23 2025 GMT
Subject: CN=d9fa61c7496c88fd1a015128c5c394cf395ca1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e9:f1:b7:3d:c1:39:d1:9a:16:a7:e1:c8:de:
a8:72:2b:1e:b3:b4:32:3e:b7:61:68:62:d7:72:1e:
cb:a7:94:c7:fc:2c:dd:b3:e6:b6:be:05:77:5f:9e:
17:d9:28:cf:7b:f2:b3:86:66:42:1d:df:99:2f:21:
c9:c8:be:0c:47:1f:51:30:b3:ba:48:9d:b1:b9:1a:
c1:2b:6e:6d:5f:60:de:fd:b7:ac:8f:38:3a:2d:27:
09:01:17:02:46:19:56:49:89:71:90:6c:63:23:e4:
41:9a:77:78:27:c6:50:df:a7:7f:90:69:a8:b8:7a:
b7:8d:6a:d8:e5:84:89:a4:3a:1e:08:87:9b:73:75:
bc:03:b6:88:2e:b9:ac:3e:ca:77:b1:da:bf:9d:99:
bd:1f:ec:43:11:34:73:0f:dc:8f:dd:3e:e4:00:27:
9d:7e:00:bf:72:f4:71:45:5c:eb:62:4a:48:d0:65:
22:d1:e4:75:f4:11:2d:90:89:14:34:2f:5b:3d:94:
c3:1f:6e:87:08:69:73:1e:9f:b7:77:14:5a:0c:bf:
d8:95:da:9c:92:4d:3b:91:e2:db:ed:eb:04:67:6f:
6c:99:82:1a:1e:c8:ca:26:48:e5:89:80:ae:be:b4:
bb:8f:37:75:63:1f:40:c8:7c:7e:c4:08:08:a6:86:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:61:C7:49:6C:88:FD:1A:01:51:28:C5:C3:94:CF:39:5C:A1:BA
X509v3 Authority Key Identifier:
keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a8:92:c3:03:7c:ac:12:a4:b5:83:cb:7b:72:0d:86:10:ae:
47:8c:13:76:e9:f5:c8:76:30:e9:96:af:f9:43:5a:7f:75:fe:
05:a8:fb:1a:d6:59:cd:9e:2d:cc:6a:99:ca:03:b9:78:00:af:
8f:79:d0:3f:19:c1:7c:63:29:3e:1d:c1:92:c6:68:04:45:3f:
c4:fa:fe:42:60:06:a9:a9:27:32:d1:74:0b:9c:96:ec:fe:36:
e8:ef:9b:0e:93:93:cd:6e:cc:f3:85:20:19:0b:d4:fa:f3:1e:
bf:5d:c3:fd:5a:07:aa:00:62:bc:de:85:f1:a5:a7:e0:01:59:
e5:46:5b:bf:5d:1c:ef:7b:0b:6d:49:3c:5e:ea:fb:80:26:6f:
79:5e:df:6e:45:c3:7d:a6:8b:ac:e8:b4:c3:14:e0:8e:eb:7a:
77:04:ed:03:4e:41:1b:fd:5e:a1:db:58:9b:ca:b0:aa:02:11:
13:08:ef:9b:f0:a0:4b:a5:c5:e1:2a:88:b4:ff:80:51:6e:e3:
51:2c:76:5e:85:94:26:b7:c6:ee:d9:b9:a7:d8:33:6a:71:28:
9d:e2:0e:10:55:16:40:4f:52:da:cd:66:97:ca:8f:ab:bb:0d:
f6:f6:6d:ec:1e:78:0a:05:53:64:04:83:cf:65:97:23:44:d0:
90:ba:35:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:55 2025 by rpki-client