Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: Vm0WbiQLUUcHVp3jN9kqNwnh9GCCVHMzGKqMVtXtzyc=
Subject key identifier: 72:B3:3A:7E:BC:26:35:DD:B7:A8:47:FD:73:FC:8D:80:C7:B2:F2:41
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 019936EF9DF5D45FFA62989BB44BAF3346E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 167F
Signing time: Thu 11 Sep 2025 04:01:37 +0000
Manifest this update: Thu 11 Sep 2025 04:01:37 +0000
Manifest next update: Fri 12 Sep 2025 04:01:37 +0000
Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=)
2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=)
3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: yipPvEPSJaSvqwFiXc7r83noweS+gk45sXa2M1ahfqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:9d:f5:d4:5f:fa:62:98:9b:b4:4b:af:33:46:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Sep 11 04:01:37 2025 GMT
Not After : Sep 12 04:01:37 2025 GMT
Subject: CN=72b33a7ebc2635ddb7a847fd73fc8d80c7b2f241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1c:e7:bf:60:bd:9e:2a:95:11:e1:d8:f0:de:
a6:cf:73:b0:d7:4d:66:fe:5f:d3:ce:0d:b2:e0:2e:
e1:96:77:f9:ae:95:0a:08:6c:86:63:14:d4:48:72:
1f:92:1b:9f:4b:4b:fe:91:2a:4c:08:e2:16:3d:9b:
1d:74:d9:fd:5c:21:9a:ad:5d:96:ce:6b:91:5f:8b:
03:af:32:eb:d5:4e:19:aa:cb:14:39:f7:f2:50:1d:
4f:5f:54:a6:ab:8a:5e:47:7b:74:4f:49:2e:e9:24:
dd:70:e2:50:4b:d3:74:69:29:31:7c:e7:44:45:04:
37:7b:d5:c6:04:bc:5a:b6:0e:37:fc:45:79:eb:91:
5d:27:e0:01:39:a3:dc:16:d4:f8:cf:07:0b:c2:c0:
09:5f:2e:62:d2:3b:19:72:56:83:3b:55:0d:fe:f0:
16:3b:c1:d4:3c:ab:69:13:a6:df:ec:a2:37:07:73:
c0:b8:58:55:c2:5a:23:ed:76:43:33:5c:ad:a6:e3:
01:6a:cf:68:53:e8:e7:ae:7f:f0:d7:89:ae:bf:c9:
d9:d7:8c:cc:19:db:5b:35:4a:09:87:6d:17:4d:86:
e1:c6:cb:31:9f:76:8f:b8:5a:e6:f9:28:ee:bd:82:
d7:94:bc:42:f1:14:75:1d:06:b3:b7:da:b3:24:f4:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B3:3A:7E:BC:26:35:DD:B7:A8:47:FD:73:FC:8D:80:C7:B2:F2:41
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:dd:e6:cf:6b:41:c7:5c:65:2f:80:a1:c3:b6:56:88:5c:bd:
67:35:51:a2:64:00:0b:6d:1f:5c:0e:f1:da:f1:b9:c7:dc:dd:
89:05:02:0b:8f:03:c4:ba:45:66:7c:d9:71:37:05:0b:48:b1:
ed:59:88:75:ab:b0:7e:35:ed:cb:55:3d:11:d8:0b:7a:33:b5:
c1:ce:15:40:c9:d9:69:1b:17:fb:18:71:71:66:5f:63:9e:69:
19:d9:27:f5:2a:36:57:52:67:75:79:c9:f0:9c:d9:fb:d2:78:
d6:9e:2f:11:cc:cf:17:3f:a8:a1:e6:7d:d2:f4:82:04:e8:97:
2e:58:41:06:19:83:d0:0f:67:f2:d9:fd:16:36:06:20:8a:c9:
3a:a3:3e:4f:49:c6:e4:a2:83:b9:9e:44:b6:9b:36:26:41:d9:
bb:57:27:17:9a:1e:bb:0e:34:00:2a:d3:fe:53:dc:1d:8a:cb:
c3:30:3b:21:d2:a8:cc:f1:64:8f:bd:4d:a6:06:ff:16:da:95:
e4:a3:30:2c:76:ee:78:38:a5:81:50:17:a1:6c:1c:57:e8:bf:
90:d5:50:68:bf:f3:08:45:72:6f:8c:67:98:60:43:90:84:2c:
59:88:f2:6f:57:de:e9:be:7c:b8:b2:08:4d:c2:2b:c3:ab:58:
e7:e3:a6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:52:07 2025 by rpki-client