Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File: jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier: NDlp4tcA2yjL3IJdYMZDxEeyd0Ph+VpUi+SLm3HVMLg=
Subject key identifier: 34:DD:4C:CC:6D:1B:06:CC:85:4D:3A:B0:52:62:B2:4B:A5:EB:B5:FE
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer: /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial: 01992F34F0BF60AC92B86A2928D51D04FA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number: 167A
Signing time: Tue 09 Sep 2025 16:00:22 +0000
Manifest this update: Tue 09 Sep 2025 16:00:22 +0000
Manifest next update: Wed 10 Sep 2025 16:00:22 +0000
Files and hashes: 1: LMeAQnqXAno2ePthwCoJjGfcb2A.roa (hash: No1WA2LE8faZkFieSxcHhVUWaXGzU/xeEQ1/oG4+fLo=)
2: VTn6EUtQCO3oepKWF0k0ld0XSjA.roa (hash: Tq2gVAAnQassaUGQuCNSlznhLVZoKruMbeiYe+SNasU=)
3: duhqaZfDGitvRaokNyqOu5bk0v8.roa (hash: BL1fv/RwGJqefrtoFnvmlovZ7pP8X3nS9B+9usaWWNI=)
4: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: xH3nuwswc/1y+FbtasAXkyGfBXIQStXNepmrvKrt+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:34:f0:bf:60:ac:92:b8:6a:29:28:d5:1d:04:fa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
Validity
Not Before: Sep 9 16:00:22 2025 GMT
Not After : Sep 10 16:00:22 2025 GMT
Subject: CN=34dd4ccc6d1b06cc854d3ab05262b24ba5ebb5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:1c:07:3b:74:28:49:54:64:79:1f:33:9b:
27:53:87:9a:ce:f3:c9:9a:68:62:f7:44:08:e6:c4:
7f:14:9c:32:3b:dd:7c:f4:d0:39:98:26:ac:2b:e7:
cd:49:07:7a:3f:75:27:be:d7:a9:54:b4:0c:d6:51:
05:3f:c1:01:c2:42:94:8c:5a:6b:3a:bc:3e:23:61:
9a:f7:63:2b:52:86:07:2f:f2:5e:18:1b:75:03:e4:
fa:68:46:56:9c:b6:01:3c:89:23:e7:2d:15:a8:eb:
36:67:e5:d8:e9:96:b1:0f:9f:77:76:79:7f:38:99:
c6:53:c5:3d:53:34:20:0f:c1:40:95:4d:db:81:5d:
d4:16:2d:a0:f8:27:8a:54:e3:33:f5:02:cc:2d:9d:
73:45:d3:c1:2b:a3:46:ac:bd:10:94:83:c5:30:0b:
e0:0e:9c:f8:ea:39:01:c1:df:20:dc:44:c1:48:ab:
0a:4d:1f:cb:fa:3d:b8:ab:7c:66:8e:a5:59:9f:2b:
78:cf:ed:0f:35:e0:e7:37:7e:7e:ac:a8:a9:63:d4:
df:be:bd:6f:44:99:60:b0:a8:85:c1:57:45:e6:5e:
03:2b:63:d4:d0:83:44:8d:c9:53:a3:06:65:7f:bf:
9a:ea:a4:51:b9:76:35:33:84:49:50:73:2a:b5:c5:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DD:4C:CC:6D:1B:06:CC:85:4D:3A:B0:52:62:B2:4B:A5:EB:B5:FE
X509v3 Authority Key Identifier:
keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:db:32:f8:fa:96:19:f5:21:3c:6c:63:cc:96:23:67:27:d1:
ac:b2:74:ef:46:92:89:95:44:4e:6a:b7:0b:ed:62:63:db:57:
61:5d:2c:76:e1:25:e5:a1:43:d9:d1:c3:b1:3a:49:9c:b8:a5:
87:14:69:6b:50:d3:13:fe:0f:b1:c7:83:9f:9b:fe:42:fe:cf:
d0:5a:75:d2:0e:66:80:f2:1e:79:af:0b:3f:af:2c:77:39:7a:
67:e9:37:34:2e:fc:9c:71:1a:99:c7:b3:58:d9:5c:98:28:c3:
b4:38:9b:22:5e:1a:f8:d8:fd:71:0f:f5:e7:fe:93:52:d2:b6:
19:6e:3d:b9:ff:3e:26:72:fb:15:99:9a:d6:d3:44:79:b5:12:
c0:b6:cf:a9:83:79:e8:91:1b:ac:d5:ec:79:9f:71:08:6b:31:
b1:9f:7c:69:eb:85:08:d3:5f:cd:c7:0d:84:5e:33:d9:17:f7:
47:bc:f1:79:32:87:f7:5f:8b:8e:c7:4d:ab:78:09:82:00:20:
8b:0e:7a:5d:54:3b:4d:e7:68:61:ed:49:fd:6c:94:43:5f:cc:
04:92:3a:e0:6a:b5:34:04:87:85:ae:69:e3:78:3d:79:0d:45:
13:0e:9f:b6:d2:21:0b:51:f4:67:27:e4:9e:ff:94:58:b6:1f:
11:a1:3e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:50:53 2025 by rpki-client