Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: fzzW+v4pr5ul57laO6sKkaAKjpKoMM6vwhd5Mz9U3XE=
Subject key identifier: A8:ED:E9:01:E3:9E:4E:34:54:17:04:28:08:93:60:FA:43:6C:1D:BA
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 0198D4A7F0E0370F21CEC6A747FBC4EFFFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 150E
Signing time: Sat 23 Aug 2025 02:00:32 +0000
Manifest this update: Sat 23 Aug 2025 02:00:32 +0000
Manifest next update: Sun 24 Aug 2025 02:00:32 +0000
Files and hashes: 1: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (hash: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=)
2: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (hash: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: 72jdkuSt0l3n+niQTHjVN37MzGkjd8EgS86c/0epq/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f0:e0:37:0f:21:ce:c6:a7:47:fb:c4:ef:ff:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Aug 23 02:00:32 2025 GMT
Not After : Aug 24 02:00:32 2025 GMT
Subject: CN=a8ede901e39e4e3454170428089360fa436c1dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:b9:80:11:34:6e:07:f4:87:22:b8:2e:ac:
64:e4:6c:b1:2c:17:c5:79:e7:2b:98:1a:e0:6f:88:
a5:6e:e7:e5:54:0a:50:cc:f6:54:94:7d:df:50:75:
77:6e:94:aa:0e:ae:2f:cc:70:8b:2b:43:90:ca:2c:
b6:f9:57:90:3b:8a:b0:95:20:af:a8:b1:62:e3:db:
b4:52:71:eb:b0:a3:8f:60:17:23:4e:96:10:8d:ce:
33:49:36:ff:b8:06:f9:32:c5:82:73:1d:d1:1c:b5:
9a:cd:b2:58:2a:07:f0:cf:8e:09:94:aa:3d:41:cb:
82:6e:04:04:92:ea:41:0d:c2:bc:d5:c5:88:2d:d5:
b4:ac:c1:ef:95:eb:0e:98:a5:51:90:93:ff:9c:98:
49:89:1a:7f:51:c9:87:d3:bc:de:8c:70:f5:9f:fb:
72:0b:f3:99:59:50:89:8d:71:53:25:e9:96:6c:cc:
cf:73:18:cb:96:0c:b0:97:ff:51:41:ab:18:51:b7:
07:2f:d1:4a:9a:7e:3b:99:45:9f:08:f1:f4:c3:21:
1a:cf:2b:8a:6a:a2:13:90:91:17:e5:23:56:67:47:
57:0b:0e:3f:84:2c:db:4d:10:5d:1a:fe:56:60:d8:
52:f5:47:4f:98:ac:f7:f9:7a:aa:ae:a1:c4:39:e1:
6e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:ED:E9:01:E3:9E:4E:34:54:17:04:28:08:93:60:FA:43:6C:1D:BA
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:81:93:9c:39:c6:15:e9:c6:a7:5d:f2:cf:fe:93:7b:f5:c1:
72:63:b7:4d:16:1d:82:94:1c:68:33:3e:f4:52:ba:cb:ec:c6:
a2:b4:9b:ef:47:91:12:85:17:52:02:b1:4b:c2:ba:a0:42:ce:
e2:4a:99:7e:fd:54:84:2f:d4:30:90:62:1d:e4:b7:13:e3:69:
ca:ee:77:8e:19:ea:3d:c0:c0:61:ca:90:82:1b:8d:0c:0e:65:
17:03:e0:94:be:c6:06:73:8e:a9:ff:d2:13:bd:bf:c6:4a:ae:
b2:22:e4:ee:9c:c3:a3:a6:43:b8:6c:b1:33:ea:20:dd:46:d2:
a3:e7:e4:f3:b4:9f:ed:f4:66:d6:84:7d:46:0d:38:30:2e:1e:
49:90:9e:76:cd:59:1d:61:20:83:ed:94:51:ef:b2:05:53:ad:
cd:7f:dc:1f:f0:d4:a7:48:8a:ff:f3:7b:26:e6:57:2a:34:c6:
dc:a5:d3:dd:5f:7c:31:0f:2f:58:8d:14:e7:c8:4a:a4:3d:3c:
fd:60:69:e4:94:45:c9:cf:ab:3f:1e:09:fe:e7:62:a8:19:73:
ef:ba:57:87:d8:11:a3:95:01:0e:c4:6e:e0:ea:33:af:62:9c:
99:18:a5:92:e0:51:08:b5:27:96:47:e3:79:44:66:51:33:2e:
77:78:ca:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:57 2025 by rpki-client