Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: RAhpI0Mo9gwpJ37TPwVwqjHXp3y69z2RflJZQOIFUrA=
Subject key identifier: E5:48:25:FA:58:7E:4D:76:52:62:16:79:A2:E2:E7:DD:87:5C:1B:58
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 019936EE863A4DD6C9788E61CA1FD26206F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 160D
Signing time: Thu 11 Sep 2025 04:00:25 +0000
Manifest this update: Thu 11 Sep 2025 04:00:25 +0000
Manifest next update: Fri 12 Sep 2025 04:00:25 +0000
Files and hashes: 1: 1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa (hash: ChEU1antJRBwFOEOOm1ILlDCVAljbS+GMt59ceUbKBY=)
2: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: +CExR8RtcJraXrqXPwx1d/Cnvjrn9nKfNEGu0ekE/Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:86:3a:4d:d6:c9:78:8e:61:ca:1f:d2:62:06:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Sep 11 04:00:25 2025 GMT
Not After : Sep 12 04:00:25 2025 GMT
Subject: CN=e54825fa587e4d7652621679a2e2e7dd875c1b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cd:92:98:e6:5d:19:a5:eb:e0:30:cf:39:9a:
c1:6a:3c:02:fe:6b:38:b9:ac:45:18:c7:1a:be:f3:
3f:ae:8d:56:27:1a:e1:81:08:83:e4:94:ac:8a:ac:
ff:6c:3a:d9:10:5d:c9:85:81:8e:d3:1b:61:fc:7c:
06:f3:47:0a:07:61:63:cc:fc:fd:56:4f:11:07:1e:
ff:af:a3:e5:28:43:08:ee:17:ac:9d:4c:84:72:f9:
a2:da:c3:27:8e:fe:ed:2a:9c:1e:64:27:79:65:98:
04:af:6e:12:8b:fd:2d:a9:ab:11:72:a4:a5:bd:04:
47:d8:18:62:d0:dd:18:82:94:16:ca:37:24:a4:87:
8a:f9:22:6d:9a:0a:e8:73:bf:4c:23:1d:3e:a4:99:
ed:da:9d:77:70:c6:9e:77:80:a2:2a:d6:e8:a7:eb:
a9:f5:d7:1f:a3:ac:fe:ab:af:47:21:b0:c2:fc:d9:
c7:61:83:21:b1:1f:ae:f9:da:05:de:93:df:c0:b7:
45:83:06:bd:45:50:dc:4a:dd:eb:da:14:ec:76:2c:
bd:65:6b:5b:be:81:09:1f:0a:ca:72:7f:e4:bf:30:
b2:01:7e:09:22:ba:77:d8:4f:7d:75:73:80:c4:75:
8b:20:bc:d8:f8:c5:70:54:00:05:47:8b:37:12:78:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:48:25:FA:58:7E:4D:76:52:62:16:79:A2:E2:E7:DD:87:5C:1B:58
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:38:84:a6:8d:7c:9f:d5:fd:c0:d5:f4:f1:d1:e2:f0:56:fb:
8c:e2:75:d0:d6:fd:c1:6b:bc:96:a9:ec:5a:b3:85:48:d4:63:
2b:29:d4:a5:3a:c5:1f:fc:d5:84:4e:c3:96:55:67:22:f8:f2:
ed:09:d3:60:f7:bb:d8:63:33:5a:7a:4d:a5:6a:86:80:fc:ec:
3b:f8:0a:20:19:3c:97:2f:0e:93:98:4d:b2:10:ec:79:2e:c6:
5f:7b:ff:b8:52:2b:b7:27:1f:0e:90:71:66:6c:2a:6a:10:9a:
95:86:d9:12:12:e4:86:ac:d4:3e:76:7b:2b:9f:22:fd:1d:54:
63:e4:c9:53:4f:5d:4d:49:ef:b7:d3:b3:76:a9:ac:64:2c:e9:
5b:f0:b0:fd:14:5f:5a:59:0b:f4:15:3b:4f:65:a1:04:9a:82:
81:cf:7c:f3:ce:71:ea:c8:c9:cf:d5:c1:cc:24:2a:1b:19:a0:
0b:62:24:19:ec:31:6a:43:79:11:60:d7:25:80:53:bf:5c:a1:
54:43:5d:98:b3:68:83:90:73:c7:65:60:70:1c:9c:ac:62:00:
83:60:77:46:9a:cc:75:52:43:5f:0e:d2:29:74:4e:05:9d:e0:
fa:aa:02:38:c5:bc:b8:79:43:3d:bf:ba:d0:5e:4e:c6:a5:82:
d6:e8:a5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:58:14 2025 by rpki-client