Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: jyekHu5/diyjgr+lnI2TvGhpGOAbwCCbTA+p7yqmUy0=
Subject key identifier: 96:15:2C:4B:82:1D:64:87:A4:6B:5B:9B:C3:7A:55:3A:21:87:C9:F0
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 0198D6608E81337D7B7784C977D78F43BFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:01:48 +0000
Manifest this update: Sat 23 Aug 2025 10:01:48 +0000
Manifest next update: Sun 24 Aug 2025 10:01:48 +0000
Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=)
2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=)
3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: z1aAz6uBQCLkMWMqc33U9Uf1bq0hZlWce67VOvlhaHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8e:81:33:7d:7b:77:84:c9:77:d7:8f:43:bf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Aug 23 10:01:48 2025 GMT
Not After : Aug 24 10:01:48 2025 GMT
Subject: CN=96152c4b821d6487a46b5b9bc37a553a2187c9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:c7:a2:53:c0:26:b9:f8:a9:da:7e:72:16:
05:cc:32:04:fe:e1:40:41:50:23:15:58:74:e1:0d:
b4:85:11:6c:a4:34:81:5f:9c:1e:f4:23:f2:6a:eb:
e8:dc:0f:c1:1e:26:4f:98:cd:e4:4a:46:4c:43:bb:
dc:ac:87:4e:7b:47:6d:c7:df:49:a7:20:50:00:e4:
ac:30:ad:46:ae:49:66:75:25:4e:99:df:e8:99:30:
56:88:6c:86:9b:9f:c8:73:ca:f2:cc:ad:e4:39:f9:
63:7a:fd:49:0a:63:ba:7d:a7:9c:6f:e8:1f:04:b4:
04:70:aa:20:00:48:3c:1a:7f:12:f7:d0:ae:c5:fd:
b4:07:c4:75:06:72:65:17:fa:2b:41:bf:3c:2f:69:
ec:4c:59:db:b6:7d:16:06:13:d9:e4:9a:a3:6f:79:
f2:31:77:92:9f:cb:85:a1:83:98:70:25:d9:04:a9:
9b:64:05:f9:f4:d0:ec:46:0b:5f:73:20:f7:2f:2d:
94:02:37:12:d0:31:5d:d5:e3:bd:89:ef:83:ba:a3:
f2:13:2c:cf:ee:45:ac:1d:f1:1d:93:ba:6c:48:c5:
01:d0:0e:e6:33:23:ff:62:45:a6:e8:df:e3:6b:f5:
34:76:4b:36:ed:97:1d:32:d2:31:a4:f6:0a:96:4a:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:15:2C:4B:82:1D:64:87:A4:6B:5B:9B:C3:7A:55:3A:21:87:C9:F0
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1e:3f:ac:52:ca:95:cd:23:5e:49:be:aa:b9:9e:e8:49:9c:
7f:cf:c4:eb:d2:b6:1b:23:af:b0:52:cd:5e:79:da:be:3b:bc:
14:d6:1b:ca:04:7e:40:7a:20:24:78:98:9b:1e:25:33:48:cd:
73:f8:63:7b:5b:17:c5:81:6c:15:04:75:2b:b1:cf:76:03:e3:
d8:8c:0e:4a:ae:43:2b:5d:14:a3:a6:28:0c:9e:37:cc:dc:c7:
1a:ef:21:be:55:a0:04:69:17:5c:18:13:44:62:3c:7c:27:46:
23:e6:83:4b:96:84:84:9b:25:d1:df:13:0f:0c:7b:85:4b:de:
9a:0f:27:7c:66:b5:7e:44:56:18:f9:0c:a4:76:f8:15:9d:a5:
41:35:73:69:b1:10:03:26:dd:00:41:27:0c:1e:df:3d:7d:5a:
96:6a:10:7a:c1:aa:1a:7f:45:50:91:7c:88:26:a0:39:fa:e5:
a2:7b:ed:85:7d:ad:02:af:74:91:64:18:09:63:3a:38:93:83:
3d:8b:95:1a:fb:21:76:c9:0d:73:68:dc:86:b6:98:7c:43:9f:
df:fc:f0:c5:06:99:78:18:24:ef:01:e5:2a:33:3b:b3:ed:c5:
62:c6:6a:a1:1a:d7:d1:24:77:8d:bc:9c:ee:6e:86:3f:51:42:
c6:eb:e2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:48 2025 by rpki-client