Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json)
Hash identifier: EvLpFJNsHl0uh4EHF0cZxKyPPbH0suw0q0fgLMpfAwY=
Subject key identifier: 03:27:BC:7F:65:07:D2:75:F1:EB:35:E7:4F:3B:67:F9:FD:EB:74:20
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 0198D4DFEEE27393B44027916166257286BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (hash: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=)
2: ihKky7iErFMr7G88FOVCnj74bps.roa (hash: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=)
3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: uGfIVMO3EBLicVAgaWYZ9W5NMrEoDZIW2HT65CN+wMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ee:e2:73:93:b4:40:27:91:61:66:25:72:86:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=0327bc7f6507d275f1eb35e74f3b67f9fdeb7420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:b2:66:37:34:e6:21:0c:14:01:17:e3:4f:
cb:05:7a:92:ca:3c:16:37:0a:05:c8:61:9b:4d:5e:
e8:32:b1:6f:be:9f:71:78:47:2c:d3:24:0f:cc:ec:
f7:59:07:d8:3d:54:c6:58:15:a5:01:e1:db:42:79:
27:28:73:07:fe:58:34:2f:87:7a:5a:c9:70:e3:91:
22:8c:22:48:0f:84:da:8e:3b:1f:9c:59:6b:0d:49:
80:36:47:a6:f4:b0:78:0c:65:81:3b:18:ad:05:ea:
fa:fa:29:fc:80:77:f3:eb:50:80:96:6d:c6:87:39:
64:7d:1b:40:c5:ef:69:7b:54:96:89:99:b1:a1:92:
d3:e7:b9:ea:b5:75:9a:78:f2:1a:16:9c:c4:d6:48:
da:88:21:42:30:2b:4b:89:f8:33:de:9d:02:b0:b1:
f1:7b:ed:61:2b:ac:ed:fd:5c:b5:79:47:99:19:62:
f0:8b:1c:cb:3b:ec:c5:6a:d0:98:55:ea:b4:20:59:
3b:bc:01:38:d9:6d:d9:96:69:de:8b:b6:c7:e0:cd:
d5:2a:be:a4:b4:ec:b1:62:cd:b6:78:f5:47:3f:63:
06:12:53:9f:35:57:57:fa:3b:29:d8:39:44:cc:f6:
99:de:e5:cd:ae:81:f6:77:32:4c:33:dc:98:b8:cc:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:27:BC:7F:65:07:D2:75:F1:EB:35:E7:4F:3B:67:F9:FD:EB:74:20
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:07:93:05:d6:8a:5e:8d:b5:6f:d8:84:4c:ad:87:c0:47:d6:
ca:ec:37:02:6b:9b:27:90:79:da:c9:c1:9e:26:6c:2f:aa:ea:
83:bb:83:fe:fc:86:19:d8:06:8d:f6:ee:e8:a0:08:8b:df:25:
b2:d5:6a:8f:75:db:d2:20:70:5d:4a:16:5d:81:af:84:cc:b1:
40:cb:e8:d7:67:25:6e:1c:d8:36:4e:74:cc:80:ec:64:9f:d5:
81:9f:04:10:14:fc:b4:1a:22:52:79:53:0a:8f:b4:50:0a:fe:
ad:68:26:76:09:f0:c5:53:fd:f7:df:51:e0:68:48:bc:31:70:
c1:ac:56:bc:da:15:ca:95:a5:10:a3:b6:ac:31:fd:e3:ad:44:
e8:a8:97:9b:07:8a:11:57:cd:7d:c6:f6:ca:bf:bc:68:09:03:
f8:ae:5e:b0:91:16:e2:7b:18:2b:3d:8b:73:e1:b7:86:4d:26:
c5:6d:21:55:4c:7b:19:82:4f:f7:2f:ae:c5:68:af:2f:1f:2a:
36:17:d5:ad:e8:15:8f:fb:e9:be:d5:eb:9c:93:6a:ee:55:ca:
4f:d2:15:60:fb:86:2d:18:b7:3a:67:21:72:a3:b4:78:c8:1d:
30:7e:f7:ec:1e:ff:bb:f7:f2:0a:a8:7e:8b:3f:dc:67:74:bd:
8a:90:1a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:50 2025 by rpki-client