Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
File: j5voJHXSWAjiFOmlyieRNHwR2rY.mft (raw, json)
Hash identifier: VHcF8r38v1+c+AbR+va35yZfeIpnHZ6cNJDEfa8yoSs=
Subject key identifier: 68:DD:FA:3C:88:D5:DD:47:71:CB:51:DE:2E:FB:04:75:F2:E0:B1:06
Authority key identifier: 8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
Certificate issuer: /CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Certificate serial: 0198D5BBAE23DA3523A36087C09A7BC0AE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: j5voJHXSWAjiFOmlyieRNHwR2rY.crl (hash: hpLc4wlvHEDNVwZ9o5O2g834sh3nuGmj62l1e692Iu8=)
2: ys17eRZKf5P4ptEUO7CgY8DVnRY.roa (hash: CelwNs3p1o5270NUJj8ZM/1/+n0plK08szDLjDEXAmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ae:23:da:35:23:a3:60:87:c0:9a:7b:c0:ae:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=68ddfa3c88d5dd4771cb51de2efb0475f2e0b106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:a1:4c:e4:e8:26:70:36:30:05:b7:97:19:
95:c3:bf:d4:12:7d:ca:f1:e2:bf:22:b9:e3:ca:44:
93:ca:b6:3d:be:31:25:38:21:87:3e:97:63:28:95:
a9:57:30:05:1d:1e:5b:b0:16:8a:5a:6b:b5:42:11:
ee:5a:09:19:d0:55:5d:69:69:24:e8:42:8b:d5:5d:
b3:f2:3e:67:8f:21:1e:da:62:9f:0a:3e:6b:fa:5d:
de:09:22:e1:ff:04:13:bc:78:42:24:b5:8e:a2:e8:
4e:29:18:cf:d6:18:21:c7:22:76:84:24:ef:0b:f5:
65:52:5b:de:f1:aa:2c:0b:e9:67:b8:e2:09:7c:46:
12:6d:db:a3:04:02:15:f7:cb:4f:e1:c8:f0:9a:64:
f2:b6:c9:28:d8:13:1c:49:4c:33:ef:98:74:37:cd:
b6:24:4c:9f:b0:73:4b:50:62:6b:9f:13:e9:3e:ad:
8f:32:a4:32:fd:c8:bc:a6:48:b4:ec:e5:a4:35:3b:
94:98:f2:55:7c:ad:62:c7:7d:fb:cb:58:7b:40:3a:
20:04:a3:bc:10:cf:fe:31:77:f4:07:83:c5:7f:cd:
46:76:62:29:44:83:bc:38:c9:09:4b:01:c9:39:c3:
82:6c:35:e0:57:07:f0:7c:ad:9a:70:f7:65:eb:27:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DD:FA:3C:88:D5:DD:47:71:CB:51:DE:2E:FB:04:75:F2:E0:B1:06
X509v3 Authority Key Identifier:
keyid:8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:37:15:e1:ce:c1:e1:e9:8c:99:92:bb:74:3c:ab:a3:31:f0:
08:b5:dd:50:82:65:e7:91:0a:40:25:de:7d:03:c2:b5:dd:66:
dc:a7:2c:98:2c:8e:bb:c2:f1:c1:1e:3d:77:0d:99:20:b4:ae:
3d:ac:dd:58:67:ac:09:26:cc:e3:99:bf:0e:d1:68:7c:2c:f0:
0c:44:a7:2c:e3:db:93:72:18:01:b0:fd:9b:92:9d:9a:04:38:
19:61:8f:66:99:4e:34:ad:27:a8:e9:f7:df:42:de:67:0e:9d:
91:ef:29:95:15:5a:d8:b2:e9:84:57:fa:50:63:12:10:8d:68:
15:da:28:81:e2:6f:1a:b9:54:76:8a:44:1d:05:36:76:75:86:
38:3d:d6:fa:fd:70:31:5f:73:6b:38:e5:4c:1e:23:27:3c:27:
b5:ae:ec:3c:fb:c7:0c:35:60:0a:7b:70:90:77:08:a1:58:37:
4d:89:e7:d7:81:91:1c:cf:62:3b:1a:2a:1b:d4:11:2c:8e:68:
b7:d6:6d:be:b6:d1:40:92:a1:4c:1b:61:ec:56:24:e2:2a:38:
56:00:41:76:11:6b:77:1f:37:df:f2:15:ad:ad:89:b6:69:e2:
c3:00:7e:cd:f6:5f:10:d0:01:3b:a5:c0:a9:75:e4:fb:3d:e1:
97:33:26:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:05 2025 by rpki-client