Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
File: jl3HMsooNJc1R8eA4cOlq0eAW-A.mft (raw, json)
Hash identifier: dku6VkyjJXpQ/CfZF3vYcVMgCC3enObgWmmwGZqgWEc=
Subject key identifier: EF:A6:D8:74:19:9A:55:2B:6E:81:BC:1D:A7:9A:B3:9C:3E:31:7E:EB
Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Certificate serial: 019856EBB3B5A6D7912EE10C5C1880E5A841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
Manifest number: 111D
Signing time: Tue 29 Jul 2025 16:02:24 +0000
Manifest this update: Tue 29 Jul 2025 16:02:24 +0000
Manifest next update: Wed 30 Jul 2025 16:02:24 +0000
Files and hashes: 1: jl3HMsooNJc1R8eA4cOlq0eAW-A.crl (hash: e6n3FFUjzLj1PUElnhmonLjg0ctDlgLAAu2cw6iU0kk=)
2: jlfdZHmVvHdz_53apg0OZWLxSVw.roa (hash: jgBY+KV60Sm5+edJ00g2iCkNCnIW/XdZGLc1p19ckko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:eb:b3:b5:a6:d7:91:2e:e1:0c:5c:18:80:e5:a8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Validity
Not Before: Jul 29 16:02:24 2025 GMT
Not After : Jul 30 16:02:24 2025 GMT
Subject: CN=efa6d874199a552b6e81bc1da79ab39c3e317eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:7a:03:78:21:28:b9:eb:b3:8f:62:23:d9:
16:5f:9e:47:9f:70:5f:72:b3:e4:f2:12:c7:bc:19:
a3:fd:dd:f4:7b:4a:9b:e4:7c:3b:02:3f:18:57:27:
b0:a8:c4:b7:11:62:05:76:e2:1a:27:2c:0e:fc:c2:
4b:32:a2:fb:3c:f5:f0:45:63:a9:54:8e:cf:60:af:
b1:ad:1e:8a:4d:e7:5c:33:60:ed:9f:45:0b:37:e6:
55:ef:0a:88:d0:97:23:05:e8:99:cb:f0:08:25:66:
a0:0b:f3:ca:a3:89:56:ae:48:b5:64:ee:a2:3d:bd:
c6:56:60:25:ab:82:5e:d4:a9:52:67:c3:3e:af:35:
e8:73:bf:fc:8a:13:18:38:da:f7:25:99:78:e8:eb:
b9:13:44:a0:e0:ef:1f:df:db:45:bd:bb:e1:94:93:
8a:4b:86:dd:2f:be:5a:fb:6d:3c:2c:2e:cf:3f:0d:
07:ab:6f:70:3b:42:70:5d:8a:91:ea:a9:11:74:ce:
56:95:59:ce:37:63:d5:4e:c5:70:a4:2d:ca:1d:94:
04:fe:91:a0:06:84:5b:13:33:5b:3e:f2:66:57:a3:
a7:45:95:77:14:78:84:8a:ea:9f:b8:cd:bb:12:7a:
0c:cc:d6:34:e2:08:b8:00:c3:6b:69:01:b7:5e:ac:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A6:D8:74:19:9A:55:2B:6E:81:BC:1D:A7:9A:B3:9C:3E:31:7E:EB
X509v3 Authority Key Identifier:
keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:56:99:bf:df:1e:97:dd:b6:72:9c:6c:08:e1:02:74:5f:52:
de:29:dc:bf:04:dd:57:9b:09:db:6b:15:33:1a:d7:bd:7d:8d:
5f:39:1b:28:8c:7e:f3:38:60:d4:e8:75:d8:06:1f:3e:41:7f:
6f:63:74:b0:a4:73:43:cf:be:cb:55:e1:81:b7:3b:cd:51:ea:
cf:3b:fe:b4:d6:3b:bc:7d:48:48:d5:5e:d1:6c:7d:fc:3a:21:
fe:9a:dc:d2:2c:7b:b5:d4:09:fc:60:9f:f6:1a:f7:28:b9:85:
f2:40:21:8b:b4:21:dd:5c:67:99:d9:b6:99:5a:59:bb:42:24:
23:84:6f:d2:d3:f9:d1:99:41:32:c6:24:69:7d:b4:97:d4:ff:
31:4a:7d:09:e7:d4:bc:f9:c4:87:dc:aa:80:74:4d:40:cf:95:
5a:c2:51:d4:4f:a1:63:97:5a:f9:76:82:c3:89:45:ee:1a:c1:
70:c3:dc:70:9e:19:98:3a:4d:1e:50:85:13:a2:de:89:6a:89:
18:10:e9:15:7d:18:44:69:03:df:22:fd:8f:6d:bc:de:25:aa:
b2:15:96:a0:08:11:51:63:1a:61:4f:d4:53:60:e6:bb:96:31:
03:5d:83:0b:72:ca:06:7a:df:ff:d2:e9:81:8b:f0:11:bb:1f:
74:28:c2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 21:10:15 2025 by rpki-client