Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File: jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier: 5qo8h5yyk0IMhsfzMkkm2KInZzzgsUyJZVVNsQPwkEQ=
Subject key identifier: 58:37:F4:52:A6:F7:C8:D9:0F:48:93:19:FA:C4:83:77:DA:0D:55:F2
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer: /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial: 019A4D06DE2D7B93CA8851C116228C79A5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number: 0E1A
Signing time: Tue 04 Nov 2025 04:01:26 +0000
Manifest this update: Tue 04 Nov 2025 04:01:26 +0000
Manifest next update: Wed 05 Nov 2025 04:01:26 +0000
Files and hashes: 1: Qc5cmd1l4zemEHfozY81Dk5Vg5A.roa (hash: 1e50whpvJStdUj8bNZvYvbgVa0jYFa3BmNTPWax7Fi4=)
2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: 2c3L9SPZLbG+5qqdbVd2j+QrgoAGdl//MCzTUjuFWc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:de:2d:7b:93:ca:88:51:c1:16:22:8c:79:a5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Validity
Not Before: Nov 4 04:01:26 2025 GMT
Not After : Nov 5 04:01:26 2025 GMT
Subject: CN=5837f452a6f7c8d90f489319fac48377da0d55f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:39:d7:fa:45:91:44:72:cd:a8:6a:26:f2:
25:19:f7:1f:7a:b8:7a:4b:3d:dd:5a:59:fc:f6:27:
48:58:fd:d5:62:60:4c:92:8e:e2:5b:47:8c:f5:e6:
e8:5f:5d:8f:ff:94:55:89:82:7a:e4:c1:9c:84:0f:
bd:89:67:8d:8d:df:8f:8d:db:1b:d5:dc:70:d4:98:
cc:b5:b7:fc:41:e4:7a:b8:54:6f:7f:3f:af:3b:b1:
33:da:6e:4a:6f:1c:90:fa:1b:6c:da:64:e3:99:81:
19:ea:f4:6f:b0:37:0b:bd:46:01:36:cb:c6:f4:37:
87:cd:ab:ac:57:d2:e1:04:62:78:d0:96:cc:d9:3d:
79:a2:5d:97:6a:e2:51:64:b3:12:5f:06:0e:f5:6f:
62:08:31:20:de:d0:6c:a4:d4:62:68:0d:24:7f:f2:
c5:31:c0:a3:77:be:d1:21:60:1e:aa:78:c0:b6:49:
a3:81:b3:8c:0e:d5:ad:ff:6d:91:4e:03:0c:b5:17:
91:33:b7:cc:ab:71:79:85:11:22:eb:0f:e2:91:1e:
c7:81:e0:d2:b2:10:f1:d8:f2:cd:ff:12:75:15:e2:
d2:e3:be:03:f3:35:50:84:07:ff:01:42:5d:0a:94:
75:40:9d:f7:8b:a0:9e:4d:68:c2:39:d7:08:55:98:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:37:F4:52:A6:F7:C8:D9:0F:48:93:19:FA:C4:83:77:DA:0D:55:F2
X509v3 Authority Key Identifier:
keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:75:55:f0:36:74:a6:b4:a1:49:80:8b:80:c8:90:d0:43:a7:
c6:70:fe:80:30:f5:ef:cc:1b:0a:3f:6a:40:b9:4d:39:b7:2d:
b5:ed:a5:ec:f4:6d:27:2f:32:7d:91:2b:c0:13:7a:c3:c0:2f:
05:f2:22:ec:4e:52:10:c5:92:c8:fa:22:b5:2a:b5:10:bb:e8:
42:de:77:a4:71:c4:4c:bb:2f:64:b2:1b:94:f6:91:65:18:30:
22:49:ea:b9:7d:b6:87:6a:11:a3:2e:55:8b:b7:48:9c:03:8c:
85:3d:e2:c6:35:78:e3:12:e5:9e:bc:6f:02:d9:4c:00:7f:68:
f3:78:a9:dd:88:ec:e5:12:e8:e8:2c:c1:d8:4d:ae:6f:45:11:
95:25:f1:82:59:45:1d:f3:f5:52:6b:f2:59:15:e4:d6:d3:68:
e1:1f:2d:56:5e:32:98:60:0a:55:b7:44:cf:68:25:2d:12:94:
83:ca:fe:14:e7:60:90:6a:c8:6d:21:64:0d:5b:92:fa:e6:b2:
f7:ba:47:88:b0:80:9f:b5:f0:1e:01:ef:ac:7f:e4:92:5e:de:
3d:1b:44:f2:dd:36:cd:6e:d7:dd:9a:67:52:27:e6:43:0f:a7:
79:a0:0f:02:3d:67:4f:c6:ee:5f:e5:61:2a:90:86:06:18:42:
4b:d9:c8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:01 2025 by rpki-client