Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
File: J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json)
Hash identifier: hfZP7acHhCC3nOyLmsZRzd+TykEraGz94i42g+4ghC4=
Subject key identifier: CE:E5:F6:5A:85:14:1B:CF:4F:B1:4F:9F:60:AB:60:20:FF:49:0D:9D
Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Certificate serial: 0198D69847BB5B47D1DDFB4C4C9BF9F93F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 11:02:40 +0000
Manifest this update: Sat 23 Aug 2025 11:02:40 +0000
Manifest next update: Sun 24 Aug 2025 11:02:40 +0000
Files and hashes: 1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: IdiMCaTa+he9kMSRvD0OpZJtNRGaVaSFOxoLuaXCA7A=)
2: hwA0UWKL_slMireOaLXKWCZKMxk.roa (hash: Cs+6QJ4Ir+A+/zhLEyGmKYQ1SWGWIXNvlkhllKogGis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:47:bb:5b:47:d1:dd:fb:4c:4c:9b:f9:f9:3f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Validity
Not Before: Aug 23 11:02:40 2025 GMT
Not After : Aug 24 11:02:40 2025 GMT
Subject: CN=cee5f65a85141bcf4fb14f9f60ab6020ff490d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:aa:b1:39:4f:b8:1c:d8:3d:d9:5a:e8:97:
a2:0e:45:5b:5b:41:9a:58:89:55:6a:c6:6e:6b:7f:
ef:a6:76:53:8b:b7:be:d8:9e:49:49:f9:ba:1e:ee:
cc:43:7d:70:3c:7d:4e:3a:de:b7:e0:39:7b:5f:df:
b9:2e:28:0d:6a:4b:80:c5:9c:ef:31:4b:34:14:89:
82:8a:50:a6:2a:23:7f:81:73:8b:85:26:d7:2b:51:
57:eb:44:20:d0:ca:6d:39:1b:8a:ad:32:ed:f7:bb:
b0:ea:78:6d:4f:ee:a8:ac:5a:5f:88:84:f9:9e:9d:
35:61:26:32:37:44:2e:f3:01:9b:d4:a4:7a:c1:51:
29:7a:1b:43:52:9a:3c:2d:2e:34:2f:47:68:c5:75:
ee:24:81:23:4a:54:98:b8:37:1d:7a:71:b4:62:cd:
44:0e:ce:06:3c:02:2a:9e:b4:99:65:d9:60:0f:0b:
4f:92:d0:36:d9:9b:3c:49:9f:3e:38:0c:2f:23:7d:
ad:4e:09:30:88:43:80:77:73:4a:cc:ee:f4:13:3e:
25:f9:7d:ac:93:6e:ad:97:04:d9:c2:8f:90:66:f2:
1f:45:df:a6:6a:52:02:cd:74:87:bf:cd:5e:11:3f:
81:7c:3d:e5:4a:3f:f6:45:bd:ec:86:b1:07:22:8d:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E5:F6:5A:85:14:1B:CF:4F:B1:4F:9F:60:AB:60:20:FF:49:0D:9D
X509v3 Authority Key Identifier:
keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f3:6a:41:54:d3:54:14:d0:09:58:9f:83:23:f1:db:53:84:
ab:2e:e7:ed:54:e4:a4:eb:ad:89:86:aa:12:2e:08:b2:da:6b:
9f:c7:f7:b1:ca:b7:3c:19:25:62:cf:a3:46:df:c2:8c:5b:aa:
50:75:9c:7e:cf:10:04:7c:00:5a:76:58:81:32:24:58:36:8c:
97:1f:e1:b8:ca:21:37:2f:62:cb:bc:31:59:3c:80:12:6d:28:
6e:2d:24:24:a5:55:2a:35:31:04:0b:82:e9:84:73:6e:16:09:
a1:5c:90:8a:af:47:34:46:cc:9c:41:ea:9d:c8:38:d0:b5:ad:
9c:60:4f:17:e5:a8:6a:c3:10:3a:8e:17:50:19:08:88:e7:2b:
24:d6:df:95:10:9e:9a:1b:53:07:16:fa:e7:1d:e9:9c:b5:68:
be:4c:4b:00:b7:00:ce:3f:a0:cd:85:f6:40:bb:25:bb:9c:2a:
9a:cd:b1:fb:cd:c8:6a:a2:43:68:92:00:52:08:ef:26:d7:a5:
0f:be:c1:ba:ea:82:25:79:4b:a2:05:74:6b:49:27:eb:94:99:
3d:47:3b:7d:69:be:de:39:35:8a:9d:ee:78:9c:50:e0:89:34:
d8:c7:07:ee:40:c5:e8:39:f2:01:a7:be:df:5c:c0:94:f7:40:
e7:63:66:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:23 2025 by rpki-client