Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
File: u8JktaZJT4kPoxT2H9fSdYfjWDA.mft (raw, json)
Hash identifier: Ffxq6qKp5iKBh0FwYmTVEyIY+06mRgsKIRiqKAZpyDU=
Subject key identifier: D5:16:F3:36:3A:5E:B5:C3:EF:C5:97:9E:04:EE:47:80:A2:C0:18:C5
Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Certificate serial: 0198D65EFA2E774D7A59E3EFCBAC47002BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:00:05 +0000
Manifest this update: Sat 23 Aug 2025 10:00:05 +0000
Manifest next update: Sun 24 Aug 2025 10:00:05 +0000
Files and hashes: 1: t4qANnEhvVWnrRLkZS7CKoTPpCQ.roa (hash: dm6ZxXeDx09W/sn7TAuJSwJg3JzyL+0jwWDxaTnORrU=)
2: u8JktaZJT4kPoxT2H9fSdYfjWDA.crl (hash: Qa7HFdT6BXTXAGwmPOngT1c/rNfhSxalr43UWOeb9i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5e:fa:2e:77:4d:7a:59:e3:ef:cb:ac:47:00:2b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Validity
Not Before: Aug 23 10:00:05 2025 GMT
Not After : Aug 24 10:00:05 2025 GMT
Subject: CN=d516f3363a5eb5c3efc5979e04ee4780a2c018c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:7b:66:36:1b:21:dd:c7:ad:eb:09:3a:35:
e9:00:38:7f:3e:4c:0b:f1:bd:da:66:73:78:37:07:
e0:10:3b:b0:a1:a5:c8:96:30:9c:c4:8d:6d:e0:38:
17:4d:fd:35:57:25:52:82:8d:2d:82:9c:c6:8a:5d:
f9:f9:89:46:07:b4:5d:62:5e:04:2f:04:f0:08:88:
19:fa:47:39:fb:2a:2b:78:67:16:47:f6:db:b3:eb:
d4:44:bc:54:87:e0:b4:ff:dd:51:56:0b:25:ac:41:
5d:d3:43:37:23:59:17:23:f7:e8:51:62:76:df:a8:
ca:18:70:1c:dd:de:09:cb:fc:c5:b0:aa:66:08:67:
bb:38:e4:da:be:ff:2d:e5:1b:3c:67:04:36:9e:7e:
e5:e4:b2:6a:7f:86:ed:94:d0:bc:d9:5e:86:ad:85:
d6:cc:6c:4d:78:73:12:44:b0:bf:b2:5d:26:bf:b3:
ed:81:7f:af:17:be:8f:77:11:69:98:07:ee:77:03:
fd:a5:73:be:83:b3:4b:aa:66:23:56:17:cc:04:80:
66:4a:d5:f4:f5:32:e6:4c:f9:91:fd:d5:89:aa:cb:
b1:6a:dc:aa:c7:88:4c:40:58:e1:5b:70:d3:60:b4:
9b:39:05:cd:a9:23:aa:24:94:6a:87:1a:88:0e:57:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:16:F3:36:3A:5E:B5:C3:EF:C5:97:9E:04:EE:47:80:A2:C0:18:C5
X509v3 Authority Key Identifier:
keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2d:8f:cd:9b:b6:c6:77:1b:cf:05:18:9a:dd:d5:ad:56:25:
0d:75:84:2d:8e:b7:e3:ca:75:be:6b:b3:b0:6c:b1:71:40:84:
9d:36:b1:85:c6:9a:38:60:b6:37:53:5a:84:58:89:e3:8d:42:
7a:8c:48:e8:ff:a7:74:d1:a5:c6:8e:4f:61:19:9c:ab:6e:6b:
73:57:be:1e:35:b7:33:3c:fe:b8:87:df:d0:e5:90:ff:49:5c:
7e:0b:fb:b1:75:59:6f:53:d9:d2:b6:4e:e4:2b:12:74:82:72:
74:43:12:58:41:24:45:c5:b6:ee:39:87:1d:fa:14:ff:d4:f8:
5b:0a:2d:81:39:01:0b:b1:a2:3a:b4:2f:e4:7a:51:45:80:0e:
35:b2:00:bf:29:67:ac:ab:39:0b:86:87:3e:a3:6d:08:21:ab:
b0:35:d8:5c:d2:84:80:be:29:12:22:e0:62:19:47:b3:2b:ad:
57:0c:35:ea:df:fc:6f:02:0b:4d:42:27:49:33:89:ce:de:41:
59:11:4c:13:51:4b:a0:eb:c6:de:5b:6d:db:42:60:de:95:ca:
0d:30:45:8a:df:35:45:30:a5:0d:3e:32:cf:e7:73:fc:f1:8f:
40:9a:4c:d1:1c:39:1d:6f:8b:3c:64:6a:9b:85:d0:42:61:72:
ed:8c:71:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:00 2025 by rpki-client