Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier: bf+oegJ06cWITw940GZRqC+l0GEB4vfT+g9D4uuHb+Q=
Subject key identifier: 2B:26:3D:34:A8:20:6F:3D:B4:55:1C:3A:4B:0D:02:B3:00:49:A6:B0
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 0198D5159ABE5F15B5CCBBAEB56006AB48A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 04:00:19 +0000
Manifest this update: Sat 23 Aug 2025 04:00:19 +0000
Manifest next update: Sun 24 Aug 2025 04:00:19 +0000
Files and hashes: 1: dHwX8PQaURSRhzT9O267zp2eAAU.roa (hash: pQKJANjM+1Peo4ZdiwJW4yKvtPIT0ly/kwXsgNJ+gjU=)
2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: f0ViN+NSOyaS6A+2omJ4ErTxmhldwOo92FSsItkTBk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9a:be:5f:15:b5:cc:bb:ae:b5:60:06:ab:48:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Aug 23 04:00:19 2025 GMT
Not After : Aug 24 04:00:19 2025 GMT
Subject: CN=2b263d34a8206f3db4551c3a4b0d02b30049a6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:56:ea:31:87:64:aa:7f:ee:b7:40:9a:4a:
13:8a:2c:ee:5c:e0:5b:68:e7:77:ee:04:ea:67:0b:
74:97:ef:ef:fd:8e:7e:00:76:b6:0e:2d:3f:35:7c:
2b:85:1a:02:3b:5d:54:08:21:00:11:38:9e:39:36:
3b:81:bb:a9:5d:47:a0:66:55:10:0b:fb:06:67:95:
58:e1:85:c6:da:74:43:e7:7c:08:ad:35:f7:6a:67:
74:3f:3e:d3:d4:b9:89:32:57:83:2d:2e:a9:0b:65:
28:81:35:20:c4:48:71:51:a9:51:0b:fe:0c:ab:1c:
d0:83:e4:57:9f:04:5a:12:6b:ee:6b:00:55:75:2e:
e7:9f:0c:ea:e6:01:0f:73:e8:fb:ab:2d:85:46:a5:
65:31:50:ad:f3:a2:ba:5a:1b:a7:e9:45:8c:94:34:
c0:23:88:05:62:3f:e9:f2:38:3f:8e:2a:81:9f:a1:
be:6e:ba:be:c9:32:62:1d:06:53:8c:24:5b:f6:62:
fa:61:6b:c5:6d:82:e2:16:b7:6a:11:65:d3:d8:3f:
a1:e0:f9:79:dc:2b:f2:58:e2:27:f8:fd:67:39:86:
3e:e8:d4:28:b6:dd:44:9a:55:04:04:35:3d:e6:4f:
dc:b3:17:6b:a0:23:a5:51:71:ea:4e:b5:b7:02:08:
75:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:26:3D:34:A8:20:6F:3D:B4:55:1C:3A:4B:0D:02:B3:00:49:A6:B0
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7f:a4:04:3b:d0:04:2b:75:03:5d:6a:2b:a9:1b:a7:d5:2d:
57:7c:c6:1f:27:54:d4:8d:0a:ff:2b:35:16:0e:b2:b6:e6:8b:
24:a1:55:8f:7f:ec:9d:31:81:e2:1e:4c:14:ec:83:92:db:4c:
af:45:31:c5:7f:6d:f7:93:7c:9a:59:09:98:79:3a:4d:2f:53:
02:28:87:65:d9:49:1b:f6:a6:07:df:b9:7c:80:c5:f6:b1:ca:
e6:79:2d:05:2c:c5:b2:db:3f:73:84:91:e6:68:83:6d:b7:e9:
86:29:f6:82:65:d9:41:9a:23:5d:8f:86:8b:e0:59:51:1b:98:
ad:7b:52:2e:08:2e:29:b9:6f:64:c5:f6:08:98:1c:62:dc:f3:
d8:b7:7d:86:de:5f:15:f0:a0:4e:20:df:ee:eb:e4:d3:07:dd:
46:b6:9a:7e:ef:44:80:3d:82:14:3d:d0:74:18:38:d8:52:e2:
79:6a:a3:63:79:d1:bc:b9:6d:fb:d2:e8:44:ab:20:c3:bd:55:
99:a1:f0:1c:22:3f:ec:96:ad:57:a6:9e:4c:48:ce:26:27:66:
e1:d9:15:ef:13:61:02:69:26:11:c2:38:6d:18:c6:e7:c8:ab:
86:db:41:eb:79:dc:2d:e6:d3:51:0b:3f:bf:42:a0:c2:68:7e:
f6:73:dd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:44 2025 by rpki-client