Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
File: jmOEMlhq5gL_Datn0JsZUVJOggU.mft (raw, json)
Hash identifier: UjUa6hZh2ZH4gk4QwlAPNXiXWDbxM1nGTuv+igqW8S8=
Subject key identifier: E8:7A:DC:01:FF:B1:38:7F:76:40:47:00:32:51:0E:DF:89:69:1D:6E
Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
Certificate issuer: /CN=8e638432586ae602ff0dab67d09b1951524e8205
Certificate serial: 019829DA8B7B39F1510CFEF2F0A8B843FC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
Manifest number: 13
Signing time: Sun 20 Jul 2025 22:00:45 +0000
Manifest this update: Sun 20 Jul 2025 22:00:45 +0000
Manifest next update: Mon 21 Jul 2025 22:00:45 +0000
Files and hashes: 1: jmOEMlhq5gL_Datn0JsZUVJOggU.crl (hash: MhsupsVAo6d3m3uP9tKW/UEWFjfpv6zrGP4GRZEps00=)
2: lRoCCR7d7sV8zan-pzAzhXIb0yk.roa (hash: zsjWkEr7wbMEPevuos7iGWcpCUsff/MP3ODrwkUVgTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:da:8b:7b:39:f1:51:0c:fe:f2:f0:a8:b8:43:fc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205
Validity
Not Before: Jul 20 22:00:45 2025 GMT
Not After : Jul 21 22:00:45 2025 GMT
Subject: CN=e87adc01ffb1387f7640470032510edf89691d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e7:90:19:00:6a:cf:5d:af:36:b1:6e:4c:97:
32:63:c1:83:57:73:42:b8:62:40:57:d7:bf:b4:ec:
f0:9a:36:8e:cc:80:7f:3a:08:34:ae:61:49:2d:53:
38:5f:c3:57:84:70:2a:16:ff:bc:0c:43:8a:05:17:
36:6b:9b:46:af:d5:80:d6:97:0a:87:04:6f:9d:60:
35:a5:82:4b:c5:90:08:70:64:67:77:ec:98:68:4e:
3e:0d:d9:3f:f9:30:66:31:91:62:b4:ab:0a:e1:f4:
a5:89:66:3e:37:bc:43:b0:da:1d:73:02:06:ef:10:
7e:a0:de:3f:6f:5c:6d:a3:46:0b:ff:3f:f1:33:c3:
b6:e5:03:2c:f4:f7:f0:a5:9a:fa:d0:26:56:8a:d8:
ce:cb:3a:62:24:da:f3:49:cf:f8:2e:27:34:9b:09:
f2:86:38:b6:8a:91:cc:fd:ac:ca:1b:1a:b7:de:6d:
39:13:5c:0a:13:00:6a:87:ff:c6:65:94:37:b2:cf:
d2:e0:d8:f7:99:76:61:75:58:fc:dc:af:0b:16:93:
4c:f1:9e:9b:c3:85:1f:4f:4a:c2:9c:c9:06:8e:c1:
e8:20:08:1c:68:bb:0a:41:c3:10:12:47:94:04:63:
1f:4f:6f:7e:59:d5:3b:a5:bb:07:9a:3f:03:dc:81:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7A:DC:01:FF:B1:38:7F:76:40:47:00:32:51:0E:DF:89:69:1D:6E
X509v3 Authority Key Identifier:
keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:48:69:ef:3f:06:64:48:d6:61:c5:d2:c6:c8:bd:28:aa:c4:
ca:02:e6:ac:88:52:e6:42:2b:0d:d9:93:c5:a3:7c:eb:6c:ec:
db:55:c0:15:6e:1b:54:89:2a:3b:57:c5:1d:09:e1:bf:7f:c1:
6d:4d:6c:b1:b9:74:7c:bf:82:a4:85:b9:51:8a:56:8a:19:1d:
ab:50:f3:5a:d7:0a:4a:99:a1:f6:90:76:a0:39:db:4d:a0:18:
95:6b:82:e9:e8:27:f4:87:b2:8c:5d:ae:ca:29:2e:0c:a8:d6:
37:a8:d3:45:0d:82:ba:36:40:f8:32:6a:36:8d:e7:e9:94:71:
45:b0:02:c2:30:b5:52:96:f1:fa:73:1a:60:7a:18:1d:00:60:
92:f6:82:be:19:64:c4:76:86:2e:ac:a0:76:52:79:7d:07:62:
71:bd:e7:72:61:3e:4c:98:4d:92:8f:04:a4:57:48:9d:c5:ff:
c9:c4:87:2d:29:9f:1e:b4:e3:79:60:f8:88:e7:7a:4b:0a:73:
d1:7a:92:88:cc:8a:34:7a:bb:1d:b3:23:be:21:cb:6f:f0:52:
5c:67:86:ec:9e:8f:00:83:b4:e8:4d:7e:50:2d:48:e0:03:2b:
cf:e8:4a:c2:ea:98:2c:5d:9d:28:38:6d:92:cd:81:f8:c5:65:
1e:59:75:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:25:11 2025 by rpki-client