Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: 1uNaA+QdrdbYZM7VpiocJDKvSsv5/IDbZ7o7wfSIKb4=
Subject key identifier: 8E:9C:9D:8F:27:02:20:75:E6:2B:EF:B4:38:F0:D9:6C:03:B8:FA:82
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 0198D6982B6720FEAD992D166AF125BB2EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 11:02:33 +0000
Manifest this update: Sat 23 Aug 2025 11:02:33 +0000
Manifest next update: Sun 24 Aug 2025 11:02:33 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: pUHbhDPATSSTyRuZ/ryXykUQL+9DrRE5HfO9E9mu958=)
2: RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa (hash: dQnKrWhdakZ+384uTWhQC1swu7fczbqA0NfqM/pjIIQ=)
3: wtfqM181rNTZILTtZZuVyGYsV2g.roa (hash: jL1T6NkOiM+9LzgY51xQQ/S9ZQ9hPL5ZNlX1CHentpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:2b:67:20:fe:ad:99:2d:16:6a:f1:25:bb:2e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Aug 23 11:02:33 2025 GMT
Not After : Aug 24 11:02:33 2025 GMT
Subject: CN=8e9c9d8f27022075e62befb438f0d96c03b8fa82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:31:b0:05:82:2a:73:76:f1:90:81:ad:95:
a6:89:c9:5e:39:35:99:fe:46:2c:27:90:be:6f:65:
b9:08:d3:e1:ac:06:47:d7:53:05:09:af:5a:22:06:
7b:68:98:19:2f:0c:dd:6c:6e:05:ff:ef:a8:21:4f:
d6:cb:2a:d7:17:27:60:94:9c:2c:ea:91:85:a1:bd:
5b:50:79:26:f9:26:5e:41:92:4d:a3:d8:32:8e:58:
7b:2d:5b:81:dd:8f:b8:05:06:ee:9f:ca:a4:e9:4e:
85:86:63:3b:ac:ce:d7:28:4c:c2:0f:b5:97:d2:f7:
c7:9f:9d:33:f0:db:d7:5d:f9:63:65:57:c7:d4:58:
63:0a:f3:79:44:40:1a:ec:1d:11:07:89:f5:a1:7b:
46:3f:60:13:88:5f:b3:05:7f:fa:c1:b9:13:c8:12:
35:94:18:7b:bf:d1:bd:7a:98:d1:5f:19:c5:66:ea:
e1:f5:74:db:f6:78:22:6e:95:87:5b:e5:22:04:d2:
9b:cf:79:e3:48:51:11:ae:4c:ae:79:8e:9b:53:cc:
b1:f4:a8:08:13:b3:82:2d:14:10:84:9f:da:40:79:
0d:78:bb:4e:93:03:65:36:61:6c:f0:3f:bb:e8:0f:
e6:d4:14:1b:85:25:7e:d3:33:56:72:b4:50:d1:c9:
86:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:9D:8F:27:02:20:75:E6:2B:EF:B4:38:F0:D9:6C:03:B8:FA:82
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4e:84:77:06:3c:d3:1b:57:7f:47:e5:07:b4:fa:91:ba:19:
63:1f:64:34:44:b4:78:c8:c2:0c:ab:b5:87:45:41:02:00:9f:
c4:73:f6:6e:e6:43:12:6f:1e:68:8c:da:c7:6e:e6:2b:b4:0c:
a5:4d:7e:d5:c5:b8:ed:04:70:d1:40:78:95:29:0a:4a:12:09:
09:9d:cd:c3:bd:e5:4e:da:72:38:2d:c9:38:a6:65:a7:b8:ad:
53:f1:9d:62:c3:89:4c:2e:d4:9e:2a:8b:9f:17:a8:09:5a:3a:
a4:9a:64:70:f6:78:12:ac:3c:19:ba:77:fb:92:08:12:03:f2:
60:41:47:cb:f9:f4:86:24:ba:85:f5:1d:cb:a2:9b:78:64:48:
f7:16:04:26:05:30:0e:24:e8:43:9e:07:8f:33:8c:be:71:a9:
7e:f3:93:09:38:4e:0a:34:08:08:60:b8:e5:a1:b6:fb:b7:f1:
8e:6a:3c:28:88:73:6e:97:2e:41:42:3f:13:ee:70:d4:02:ae:
47:63:5e:06:39:1f:f4:67:5a:c1:b8:2b:ae:4a:a2:07:88:c8:
a3:ff:ea:35:60:ec:e3:89:c5:81:ab:4f:76:03:2b:64:e4:e8:
99:e6:e1:3c:04:94:11:8c:56:dd:0a:df:c1:2f:62:d1:f1:05:
35:85:f6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:38 2025 by rpki-client