
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
File: jAYAQO86CCOqlz8NBZKx3agI94I.mft (raw, json)
Hash identifier: QpwGk3rG3z0DGJfZOKX4e2GEj1gZ1NpP6MgfrI5GIfg=
Subject key identifier: F1:C8:5A:6C:77:0F:20:2D:4F:63:69:A8:A1:80:F2:A1:DD:25:F3:9C
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 0198D65F41A32724124BF00D41494CCC6F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 10:00:23 +0000
Manifest this update: Sat 23 Aug 2025 10:00:23 +0000
Manifest next update: Sun 24 Aug 2025 10:00:23 +0000
Files and hashes: 1: 8ZbyflawwFLPqDg3BZZLbHwGOLc.roa (hash: VykbJevpFsrAKqlNdZuPgmxNQNlKZ+4+VF7D/J1CQCs=)
2: H_TLsPIgEGDD_RE_XHqJUvlqj8E.roa (hash: jVZCYNBVF7woByDpZwClsmu07rKLPUQko61SrEyrK1s=)
3: WyA56EA2oxi30uAjF6x_QQYyE00.roa (hash: 4ql8mO5EaYeFUKdK/VU8GBpEW0nvJwvaHkKL+MQY0zE=)
4: eJe54pJQD4j2JDWbWUTuFe4Zw4k.roa (hash: RfLVPz0RIAcdPGVp8RcU7sTd+HqCq3IoZWz5cYzagaI=)
5: jAYAQO86CCOqlz8NBZKx3agI94I.crl (hash: 38cWiasAIPi9vdoT57dSwobJtdE5tSespxCZMXFDKTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:41:a3:27:24:12:4b:f0:0d:41:49:4c:cc:6f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Aug 23 10:00:23 2025 GMT
Not After : Aug 24 10:00:23 2025 GMT
Subject: CN=f1c85a6c770f202d4f6369a8a180f2a1dd25f39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:84:71:be:d1:a5:8b:1d:38:53:66:82:55:
58:1f:19:d0:00:f1:c8:2e:6c:8e:f0:33:37:2d:73:
73:c3:ce:4d:01:d1:84:c4:60:48:ed:52:54:4a:47:
6b:3e:3d:61:7a:4f:51:18:89:8b:13:d0:88:2f:9b:
bb:f6:19:5c:93:62:08:99:79:e1:3d:85:17:1f:d6:
66:35:4d:bd:dd:50:6a:fa:72:1c:da:f1:a5:ba:49:
32:7e:b8:00:a3:4e:a1:58:1a:f8:b8:03:8c:46:91:
56:0a:ff:a9:12:bb:39:38:14:1e:55:84:fd:87:1f:
87:3d:e6:9b:2a:1a:cd:08:7b:a3:fd:60:2f:85:1a:
65:b1:cb:a8:c6:2f:7f:df:33:c9:f4:50:b4:e6:6f:
42:6a:5c:85:80:26:57:cc:56:35:40:ea:22:15:a0:
ed:04:a1:63:e6:33:31:81:c6:27:72:9f:16:17:af:
a5:ca:e7:77:67:d5:b6:a9:1f:67:16:9f:35:b4:87:
fd:ed:f2:b6:63:64:46:18:66:e0:38:80:97:bb:71:
29:22:03:a3:61:87:de:5d:85:b9:92:97:1c:05:73:
d1:4a:43:f5:5d:dd:ce:97:e9:14:67:9d:4b:34:a7:
9b:9c:6d:0e:23:68:41:63:68:43:47:49:96:70:9b:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C8:5A:6C:77:0F:20:2D:4F:63:69:A8:A1:80:F2:A1:DD:25:F3:9C
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d2:93:50:fb:28:29:ee:02:1c:c8:4d:d6:4e:91:06:15:20:
ca:9b:79:1e:b0:ca:e0:5a:08:d0:c1:95:c2:a0:56:0b:e4:bf:
87:fc:09:2e:13:ed:77:32:78:4a:15:28:49:14:c4:8b:c5:a6:
04:07:cb:7a:8f:66:d3:23:90:31:ac:e8:e4:b5:f9:87:23:2f:
e0:9c:b2:78:9b:96:06:0c:f2:45:51:3b:21:9a:9d:a1:b8:7b:
f2:b3:2a:0a:8d:5b:b2:8e:bf:99:64:ab:5e:b8:63:fc:64:9b:
92:0c:44:89:43:16:e7:2f:d3:5f:16:c8:7e:83:18:68:d3:b7:
fd:ef:d9:73:84:66:32:35:5b:4a:0c:ab:63:b4:b5:c0:9d:36:
1c:35:a0:6a:6d:a2:bf:fa:9e:90:3d:eb:4c:f6:fa:12:99:12:
8a:52:76:93:23:fd:bb:fd:65:12:81:9c:da:61:6d:63:52:b2:
4c:47:49:b3:6b:fc:85:70:be:eb:ec:08:51:cc:18:7d:23:58:
9f:67:cb:fd:3f:1e:5b:0f:8d:02:d0:cf:a2:fe:45:84:8b:08:
c8:e7:c9:de:6d:5e:08:b0:00:fe:4b:2e:25:54:98:60:ac:cd:
33:bb:81:c5:ab:be:f1:b6:19:07:7a:a2:eb:a3:df:7e:1a:e3:
59:80:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:21:45 2025 by rpki-client