Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File: jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier: iz6jB4yfvLGySQr5mXKCY/T197likANwPbCvZLHS/+g=
Subject key identifier: B8:79:13:48:46:AC:69:8A:D0:3A:25:1B:2A:4D:E9:BC:E2:E6:36:A6
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer: /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial: 01976D3DBE2DE5E029ED644CAED52D951226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number: 0C9D
Signing time: Sat 14 Jun 2025 07:00:52 +0000
Manifest this update: Sat 14 Jun 2025 07:00:52 +0000
Manifest next update: Sun 15 Jun 2025 07:00:52 +0000
Files and hashes: 1: Qc5cmd1l4zemEHfozY81Dk5Vg5A.roa (hash: 1e50whpvJStdUj8bNZvYvbgVa0jYFa3BmNTPWax7Fi4=)
2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: V3Egwcb9Csqv2mchK7vOJ4dI25QoDJbIb4tjDE+Oel0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:be:2d:e5:e0:29:ed:64:4c:ae:d5:2d:95:12:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Validity
Not Before: Jun 14 07:00:52 2025 GMT
Not After : Jun 15 07:00:52 2025 GMT
Subject: CN=b879134846ac698ad03a251b2a4de9bce2e636a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:8d:36:65:69:e5:58:c1:8a:5a:ff:38:47:
03:b0:3a:67:49:8d:67:4e:86:d6:52:89:e5:32:e6:
dd:1b:07:66:12:e9:f8:2e:58:df:c0:c1:04:cd:2b:
ca:02:32:cc:37:3e:09:61:95:35:10:5f:1a:3f:61:
8e:8e:62:87:77:0a:3c:ab:37:99:4f:ef:f0:9f:0b:
31:73:2b:ae:1a:d7:23:b6:ae:9f:eb:8d:6b:e1:ec:
3c:94:ce:1e:c9:06:c3:c8:ab:ec:ce:22:02:a4:f9:
dc:29:56:4e:98:27:5d:83:39:af:db:b6:73:16:66:
05:8b:02:b3:cc:66:4f:20:92:94:d8:2b:02:31:0b:
ea:88:67:04:9b:7c:3f:b4:54:d5:71:01:97:4a:5a:
e4:f6:4d:a5:59:fa:f4:92:85:73:2b:ec:d0:61:3b:
8e:bf:03:43:cd:5d:da:4f:1c:66:ac:65:ae:92:2a:
00:27:ba:96:0a:77:f2:ec:b4:21:87:05:c5:09:49:
44:ef:84:24:13:14:b9:6b:b7:41:54:de:e1:d7:1c:
e0:2e:f5:3e:2b:9d:f8:3c:75:62:62:94:0f:34:1e:
e4:53:ca:97:4f:58:f5:ff:0e:b2:52:d4:ed:4f:96:
3d:a6:4b:76:a4:24:c1:43:8e:18:52:8a:9e:0b:3f:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:79:13:48:46:AC:69:8A:D0:3A:25:1B:2A:4D:E9:BC:E2:E6:36:A6
X509v3 Authority Key Identifier:
keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:50:9f:f6:e9:b5:7c:3f:f5:b2:08:d7:b4:6e:e2:e4:de:7d:
08:3d:4a:6e:dc:b3:35:f1:9e:10:87:3b:dc:52:45:fd:81:74:
fe:ce:af:0d:c0:e2:4a:6c:40:4b:6b:21:5b:15:0f:4d:07:1e:
53:89:6e:bc:6d:94:86:60:78:1c:49:1a:bb:a8:84:00:2a:31:
7b:28:e1:a5:73:c6:de:e9:80:11:84:3d:a3:cf:6a:fe:cd:81:
3a:fe:92:89:2e:e9:5c:d2:23:47:c7:c1:31:ab:5a:ed:96:2b:
c8:24:55:36:51:da:23:fc:61:40:86:84:13:16:5a:44:a8:ab:
da:c8:9f:bf:6f:a3:e2:37:03:db:1d:04:5d:e6:37:f0:f3:14:
00:b2:a8:12:6e:2e:a0:4a:03:47:88:63:00:80:27:27:9f:5e:
fb:18:09:fc:e7:cf:73:aa:6d:68:bc:89:98:a2:c0:55:06:8a:
f8:ed:44:26:93:8a:75:70:4a:14:43:d0:c7:1d:97:46:53:59:
4b:8b:ce:ee:5e:2c:60:79:5d:48:50:01:20:ea:fc:a8:32:1e:
97:e8:7c:5b:16:dd:07:de:da:59:cc:39:37:e0:75:92:a1:63:
5b:71:c1:50:42:3d:8c:37:73:67:44:1c:9e:23:ff:b3:38:84:
bb:fc:80:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:47 2025 by rpki-client