Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json)
Hash identifier: YCudb9ciUF7VLnv45VvtlzKEk8cAfxdn78Iq9PBRPpM=
Subject key identifier: 21:D1:56:76:1E:49:6A:D9:91:71:5B:67:C7:EA:A5:87:F1:85:54:B2
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 0199221EF79BF1DE14C5386F935BE75DB14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
Manifest number: 167A
Signing time: Sun 07 Sep 2025 03:01:18 +0000
Manifest this update: Sun 07 Sep 2025 03:01:18 +0000
Manifest next update: Mon 08 Sep 2025 03:01:18 +0000
Files and hashes: 1: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (hash: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=)
2: ihKky7iErFMr7G88FOVCnj74bps.roa (hash: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=)
3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: I1UdUr4Ubji0YPm+JPE4w9Zl0KOMLmqcllcoOL8+rXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f7:9b:f1:de:14:c5:38:6f:93:5b:e7:5d:b1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Sep 7 03:01:18 2025 GMT
Not After : Sep 8 03:01:18 2025 GMT
Subject: CN=21d156761e496ad991715b67c7eaa587f18554b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:fd:3c:43:04:e5:b1:58:f2:2b:17:73:f6:
df:90:f7:da:fd:bc:fd:ab:14:d1:61:9f:2f:b9:d4:
54:ef:bc:95:02:92:34:38:1c:95:c4:a2:96:a4:b7:
37:e8:5a:98:3a:23:c5:17:d6:f8:a6:c9:3e:68:22:
7e:07:25:51:33:34:79:45:95:34:ef:6d:c6:97:1e:
aa:03:65:4a:a4:52:68:92:1f:1f:27:f2:83:26:19:
72:a5:b8:da:83:c5:77:e3:7d:79:5c:ef:8b:7e:0d:
4d:63:4c:ec:20:b2:ca:cb:68:0a:43:da:d7:73:81:
ec:95:18:df:b7:c9:e9:2f:b9:62:47:42:80:e3:59:
ba:59:02:82:0b:db:8e:a7:1c:ec:d1:75:b6:e1:fb:
25:92:29:de:4e:81:68:8d:90:18:fe:74:96:ec:7e:
28:24:0c:28:40:6b:ec:48:ab:65:b7:6f:84:1b:29:
b8:60:1e:b0:9c:10:51:ee:27:5c:57:65:03:f9:bf:
c0:4e:ff:4f:67:ba:2c:7d:d0:b4:05:cf:81:f7:c4:
72:8d:01:9c:01:8e:ab:f3:e7:52:f5:fd:e2:fd:0e:
1b:a0:59:92:be:57:3d:0d:05:d9:8b:80:78:61:7e:
50:71:46:dc:98:46:02:ea:a5:36:6c:f8:8d:c6:4c:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D1:56:76:1E:49:6A:D9:91:71:5B:67:C7:EA:A5:87:F1:85:54:B2
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5a:f8:7b:ec:89:ef:d3:8d:3f:a2:64:9c:8f:87:07:f0:af:
d1:2f:c8:f3:7d:3e:a2:2f:89:23:07:e7:84:02:d3:b4:31:ea:
d9:a6:67:b6:1f:5c:24:76:94:61:79:e3:29:5f:b4:2f:eb:84:
75:10:fe:2e:dc:79:a0:f5:fc:b1:cc:35:3c:32:66:81:cb:0c:
7a:81:22:3d:9b:0c:d0:05:92:27:fa:a4:ac:f6:4c:1c:3f:f4:
c6:6f:c6:8f:46:4e:ca:4a:43:54:b6:97:b0:73:4b:42:6e:11:
ae:02:ec:9c:28:1e:c5:13:9b:82:01:e3:ce:de:e4:fc:1a:1a:
10:68:3a:1b:cd:ee:7b:1f:09:ab:2a:0d:1f:44:3d:a8:ca:80:
37:9b:30:a4:77:d8:84:5c:da:cd:24:0c:99:42:39:61:1d:0e:
90:ac:59:20:44:67:1e:c3:6e:07:2a:4c:82:79:37:86:30:60:
a4:ec:78:9b:17:3a:e1:66:42:46:4a:c5:2c:ea:64:14:4c:d5:
28:e5:2d:b6:43:38:82:c7:c9:3c:45:7e:d5:25:9e:83:ab:95:
80:41:06:1c:4d:c6:ce:dc:d5:d3:86:27:eb:49:38:db:4d:e3:
64:9c:ac:f2:18:72:19:a1:40:05:2e:87:96:85:db:75:0e:10:
32:1d:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:12 2025 by rpki-client