Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
File: j16oN5vKRPT2p_S2mGTNmwKiexI.mft (raw, json)
Hash identifier: aZgqri5aK1FB9eFgJKUll5Kt8FznZqqnj/HWe6RfQ1s=
Subject key identifier: 67:94:9F:08:BF:73:9E:B5:44:31:4B:BD:77:13:08:41:A9:F2:B0:ED
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 0198D73BC42249E341B56BDCF9B300C53D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 14:01:14 +0000
Manifest this update: Sat 23 Aug 2025 14:01:14 +0000
Manifest next update: Sun 24 Aug 2025 14:01:14 +0000
Files and hashes: 1: GI5eR-bcyPUXcabh8oF3ym-w-jY.roa (hash: HMe9khM1DXfAv5MN/QlZDROBBZj6X8B6CZKWjkcWcFY=)
2: f1jshjvqQC1or_SUp4VaHxnz0vg.roa (hash: HU3zUMPmn0Fu+40+47r6GzF5dnxd/KAN0UXFve0A1sw=)
3: j16oN5vKRPT2p_S2mGTNmwKiexI.crl (hash: 2TUOFKYpNbE8N/si9o+OWQLLkCktC2v46YUMEjNR52E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:c4:22:49:e3:41:b5:6b:dc:f9:b3:00:c5:3d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Aug 23 14:01:14 2025 GMT
Not After : Aug 24 14:01:14 2025 GMT
Subject: CN=67949f08bf739eb544314bbd77130841a9f2b0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:e8:cd:b2:e6:bd:1f:9a:d0:fe:e4:df:43:
a0:f2:3f:37:c2:7a:af:78:44:95:da:2e:6c:cc:e0:
13:06:1e:c8:d0:ae:8e:73:79:92:b1:17:a4:4d:fa:
40:c4:53:86:11:69:e4:4c:0c:65:84:0b:fc:e1:b0:
d8:a9:77:51:85:1f:f0:98:64:5a:42:50:68:51:a9:
e0:ed:9f:42:f6:30:b2:1f:66:fa:66:d5:88:91:25:
68:c4:21:e2:58:17:b3:45:bc:b6:b6:27:8d:3f:4f:
f4:34:e8:34:9b:b3:98:cd:fc:e8:22:27:19:b7:93:
25:6d:e2:b4:1f:a2:d6:51:9f:09:cf:d3:9e:b2:ff:
0f:62:b4:19:f3:2f:fd:a2:34:23:05:f2:0a:5e:85:
2b:01:7d:02:2e:df:96:6e:cd:e3:c6:61:b6:56:91:
58:0b:26:91:40:d4:4e:80:f5:56:9a:16:75:5a:5f:
ca:d4:79:3a:7b:c9:bf:c4:e8:c1:aa:a2:00:a4:d7:
73:39:5d:95:05:c2:00:d8:b6:fd:62:c1:01:93:5e:
30:90:ed:ff:ca:fe:9e:44:1d:39:23:cd:e0:4c:fa:
66:9c:5d:ae:0f:97:63:ff:bd:d3:c6:1d:c8:cf:10:
0e:81:ce:0e:1e:0b:d8:67:eb:60:94:f7:64:7e:2e:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:94:9F:08:BF:73:9E:B5:44:31:4B:BD:77:13:08:41:A9:F2:B0:ED
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:76:b2:84:9f:30:3d:38:78:b2:2e:0f:1c:84:f8:58:89:07:
5f:95:72:b5:11:33:5a:a1:2b:7f:6b:0b:43:43:ab:b9:65:9a:
9d:d3:d5:11:04:8d:42:6f:ee:b5:ee:ec:4c:e3:a4:fd:5a:44:
55:78:f7:2e:cc:54:5b:1e:ce:79:ff:9e:44:3e:2c:c3:95:a7:
48:cf:fc:b9:2a:b1:a0:0b:44:65:59:49:e1:01:7a:ba:18:ac:
12:ae:56:31:f4:85:86:e0:31:ad:f8:f7:b4:02:df:1c:20:8f:
93:6a:be:2c:81:26:55:85:ef:83:38:79:ad:93:61:03:64:e8:
95:b3:94:f9:f5:00:84:43:7c:7e:dd:d2:47:f4:ac:6d:36:c9:
65:e2:0f:37:1c:03:65:15:ab:a7:f4:bf:82:ba:1c:99:59:84:
df:45:8b:7e:a9:b5:3d:f3:c3:45:93:41:8e:13:53:54:fb:f5:
e1:d5:77:5e:ff:33:fb:05:d1:51:b3:25:eb:23:f2:59:4b:1e:
54:36:45:66:18:d4:c5:df:72:06:a9:e8:06:ee:9f:fc:da:b6:
c1:31:8d:da:59:96:50:08:28:62:aa:dc:47:9e:0b:a6:82:13:
d1:fe:7e:04:06:89:c8:48:e2:df:fc:26:33:3c:63:65:25:33:
5d:18:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:28 2025 by rpki-client