Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
File: jEjc7LvMBSxln5cWCSKeNlaj2VY.mft (raw, json)
Hash identifier: Mv+QRFIPM30OAFu+Bfqq6nU/AVBwBlL+S9Gq8XLiECQ=
Subject key identifier: F2:DF:8D:64:FD:C7:E7:E0:68:77:A6:02:23:4D:28:AF:05:81:01:E5
Authority key identifier: 8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
Certificate issuer: /CN=8c48dcecbbcc052c659f971609229e3656a3d956
Certificate serial: 0198892055825C11B95BAE1AD61FBFE2A1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
Manifest number: 053F
Signing time: Fri 08 Aug 2025 10:00:54 +0000
Manifest this update: Fri 08 Aug 2025 10:00:54 +0000
Manifest next update: Sat 09 Aug 2025 10:00:54 +0000
Files and hashes: 1: 9Ikrgii6aWEfsxAWAi789vrE9wg.roa (hash: iLnyK1Sj4Jg60yb2gV/nuNI+npfH3YvqxRf21D1k0LY=)
2: jEjc7LvMBSxln5cWCSKeNlaj2VY.crl (hash: dHdKKKRSDgGOgwlj71U5BIemcEmciKLugrMsPAVpvbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:55:82:5c:11:b9:5b:ae:1a:d6:1f:bf:e2:a1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c48dcecbbcc052c659f971609229e3656a3d956
Validity
Not Before: Aug 8 10:00:54 2025 GMT
Not After : Aug 9 10:00:54 2025 GMT
Subject: CN=f2df8d64fdc7e7e06877a602234d28af058101e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:78:62:8e:fb:09:bd:ff:b0:51:25:1d:09:
cd:ea:16:4d:64:0f:29:fb:f4:0c:d2:a3:73:93:c6:
1c:d5:79:c8:ac:d6:a4:92:31:d8:57:74:e7:cc:ed:
78:1d:93:68:31:c0:a5:a4:73:e9:1d:97:06:98:76:
83:7d:74:39:aa:56:67:44:ec:6e:18:34:23:f2:46:
0b:eb:2b:d7:87:be:ec:82:fd:22:45:9a:30:bf:aa:
bc:06:4d:77:b8:47:0e:3c:a9:08:58:0a:d9:c8:41:
84:f6:96:c2:fd:4d:6c:2b:f6:29:49:25:6b:5d:38:
9c:30:af:53:b8:e1:6c:94:5b:ff:41:ad:0b:a7:5e:
28:7d:a6:bd:e8:0e:30:98:4b:bb:10:c3:03:23:4b:
be:4c:a3:be:1e:8e:a2:d6:e1:b8:d6:c6:99:12:66:
1c:68:54:f6:d9:55:d8:b9:c0:2e:7f:d2:68:d2:7b:
2d:ea:d2:b2:92:a4:d5:37:f3:50:eb:d3:d0:52:8d:
cf:5e:cb:63:b3:f9:4c:18:f6:c7:a1:e9:7b:54:e3:
0a:e3:47:c1:68:20:d7:fa:ab:c0:ae:e5:95:d1:db:
70:f3:15:4c:72:c4:b9:fc:b0:90:45:0e:b7:80:8f:
26:85:d9:84:1a:a8:d1:1e:70:44:22:88:60:1e:d6:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DF:8D:64:FD:C7:E7:E0:68:77:A6:02:23:4D:28:AF:05:81:01:E5
X509v3 Authority Key Identifier:
keyid:8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ef:b8:c4:4d:6c:38:a7:dd:37:7c:52:d5:b7:69:0a:a4:bd:
4e:98:6c:12:27:b8:10:1b:f0:62:f2:15:0a:26:34:11:b3:32:
ee:5f:5b:96:3e:17:be:60:fc:93:89:1b:1d:93:72:15:93:89:
d4:7a:d7:e5:dd:95:b2:f1:55:bb:c6:11:7a:22:de:59:f1:91:
8e:b4:99:bb:a4:68:76:a6:6d:55:34:5f:7d:e2:a5:5b:fa:c9:
85:87:84:30:a6:8d:49:0b:e2:39:58:18:c3:61:54:e8:e4:64:
d9:5f:6d:28:f6:fe:2a:bc:5d:aa:bf:6e:6d:95:d1:b2:53:60:
8e:e3:0a:f9:38:f7:d4:e5:d0:ed:a5:11:b4:40:14:57:dc:ef:
83:cb:a6:86:05:ba:a8:5c:cb:7a:4b:fe:55:9f:77:2b:f2:4a:
f9:00:f0:2b:fd:4a:e1:85:9e:68:de:ef:83:0e:94:cd:f8:f4:
8a:a3:d6:1a:42:2a:22:71:ed:9b:fa:c7:8e:16:eb:1a:89:46:
e9:db:71:3a:b3:a0:45:06:b5:25:fe:82:b3:a2:a0:9a:8d:4b:
61:17:dd:31:03:a3:0f:98:a6:6c:49:6a:92:d0:dd:56:4f:37:
d8:34:84:71:6f:8b:07:ca:ea:7f:95:e9:5f:b6:1e:57:f4:0c:
6e:7e:13:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:12 2025 by rpki-client