Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
File: jlKjlU4w5HU-LgCg74FpZtbWDbY.mft (raw, json)
Hash identifier: e1HVA6L8DJoQTj1lwhbJyyUqeNBVwcdolKmLwrEEJy8=
Subject key identifier: 9A:1C:F5:5E:AB:56:48:CC:E1:1B:1E:22:CD:53:1A:CD:FD:15:60:10
Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
Certificate issuer: /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Certificate serial: 0198D69852EF22A77333F9F81BE57ABE4DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:43 +0000
Manifest this update: Sat 23 Aug 2025 11:02:43 +0000
Manifest next update: Sun 24 Aug 2025 11:02:43 +0000
Files and hashes: 1: fUQfJ9b5u35O0_p-iUp42Os46hA.roa (hash: 0cvi4gkix6mewQd5i5/nO5DzbnNjSl7ne7hKCvJ5puY=)
2: jlKjlU4w5HU-LgCg74FpZtbWDbY.crl (hash: b8hb/Z/igMy8C64Pf5hgFZiH8nMJ7bnabsI5u7WRWtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:52:ef:22:a7:73:33:f9:f8:1b:e5:7a:be:4d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Validity
Not Before: Aug 23 11:02:43 2025 GMT
Not After : Aug 24 11:02:43 2025 GMT
Subject: CN=9a1cf55eab5648cce11b1e22cd531acdfd156010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:88:1b:9c:b9:81:b0:c2:1f:2a:62:80:cb:
0b:f6:f0:18:24:15:20:4d:ad:01:b5:bd:80:c3:1a:
cd:16:51:a9:57:e1:fe:87:ac:b4:e5:81:d4:11:be:
12:bb:8b:71:c0:5e:c1:18:90:88:e5:5b:72:52:cc:
f5:c4:6d:e0:33:61:c0:a6:0f:79:6b:d6:bc:34:2b:
97:6a:4e:d4:83:82:49:59:18:61:d6:bb:21:f3:aa:
f7:2a:49:29:c8:fc:97:ba:c9:1b:c1:31:c5:5b:43:
94:c5:4d:a8:63:26:d4:6f:28:f8:92:6e:e8:24:b0:
8a:51:fb:73:2e:ea:39:72:bd:a5:0c:f2:10:a9:12:
62:c5:ec:67:bb:b2:70:92:3f:9f:e6:88:da:a7:57:
2f:e7:91:76:b5:a4:17:f3:de:81:73:b0:0b:5e:06:
a8:34:8d:6a:d8:75:85:78:2f:6b:8e:ff:98:36:2b:
5d:b4:20:1a:23:c2:fb:02:54:43:38:c8:d5:9b:9f:
c8:18:f4:b4:88:e8:77:ca:b0:a5:d7:47:0a:46:3a:
6b:f3:65:59:2a:b6:48:7e:70:bb:87:98:1b:fe:b0:
51:7b:f9:74:d5:05:34:1d:f1:fb:ab:3d:63:68:94:
96:75:27:97:a7:a7:d5:0b:85:4a:2c:46:1d:a2:63:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1C:F5:5E:AB:56:48:CC:E1:1B:1E:22:CD:53:1A:CD:FD:15:60:10
X509v3 Authority Key Identifier:
keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:22:2d:59:eb:5e:89:46:d8:03:df:0a:87:6e:6d:7e:6b:92:
2a:cf:fd:82:bf:9b:b4:e3:24:c0:58:05:c0:20:dd:5c:a5:54:
41:c5:11:2c:8d:92:91:10:24:c6:96:90:4e:9b:16:08:0d:7a:
0a:4e:96:6c:be:d9:73:23:54:aa:07:a9:89:86:fa:05:e1:3b:
fc:02:4a:1e:26:1f:0c:2d:6d:04:c8:75:12:e6:28:e1:6f:2c:
85:15:12:ce:2a:5b:2e:0b:dd:4a:0d:59:6b:cb:4f:d3:6f:5f:
de:82:a1:9e:a0:ff:f4:7c:77:d2:1d:37:dd:41:4b:e5:3c:8e:
1a:7a:b8:df:3f:b2:50:48:97:12:d2:e1:20:82:5d:f7:56:f5:
6c:79:ec:e7:7b:20:33:f6:17:4a:f9:2f:35:fd:27:0b:73:d0:
7b:7d:00:ea:7d:25:99:19:41:53:10:43:ba:81:90:55:50:2f:
a2:9b:6f:7e:f9:a7:6e:b7:5a:f8:cb:67:19:f5:5c:96:95:ff:
e4:ab:43:74:72:44:58:c4:7f:6a:fa:22:9d:29:94:f8:9a:fd:
34:aa:3a:cf:72:23:fd:b9:0f:29:c8:3e:b2:4c:d2:61:2b:56:
5c:42:1d:69:71:17:db:ea:dd:d3:95:6e:17:d5:96:38:b0:19:
c4:58:da:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:15:24 2025 by rpki-client