Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
File: jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json)
Hash identifier: WvqvcAUamkT4bE1/uyhevfj/gc1KMmAzHHu3/cfNJN0=
Subject key identifier: 11:2B:9B:8C:5B:20:06:A3:24:18:48:71:7F:8E:B6:5B:0A:82:DF:4A
Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Certificate serial: 0198499C66DB9D10F72168E86A51CBCBC4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
Manifest number: 0FFC
Signing time: Sun 27 Jul 2025 02:00:43 +0000
Manifest this update: Sun 27 Jul 2025 02:00:43 +0000
Manifest next update: Mon 28 Jul 2025 02:00:43 +0000
Files and hashes: 1: AVv7KqsJQ7Zn0lKyZ4rdnlf-GJ4.roa (hash: NUdH+bGXaFI8uXmd6dLOR5WLJnhwd6mvan4jq3rAulE=)
2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: cjJiZDjAfhBtY73dsnHHX7ZyakeUl1eBoPRmpJb2D6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:66:db:9d:10:f7:21:68:e8:6a:51:cb:cb:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Validity
Not Before: Jul 27 02:00:43 2025 GMT
Not After : Jul 28 02:00:43 2025 GMT
Subject: CN=112b9b8c5b2006a3241848717f8eb65b0a82df4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:af:f6:3a:69:96:a7:a8:e7:c7:18:f4:d8:
e2:cd:76:f2:9b:34:ed:bc:8d:d5:3e:37:68:30:13:
0d:70:fe:f9:c8:6f:3a:9e:66:59:39:7d:25:b7:27:
3f:66:49:4d:23:7c:e6:ee:c5:a4:5b:c7:20:f6:5e:
9c:b5:18:3b:2c:56:e9:11:4f:56:92:fb:43:3c:cc:
ac:15:b2:5a:13:dc:77:77:2e:1b:6b:19:aa:49:3a:
31:36:4d:90:26:bf:b5:e7:6a:ec:2e:36:3e:b2:17:
4c:26:cc:2a:d2:9d:b8:13:59:e3:46:1b:e9:a7:4d:
96:73:4b:ff:a7:50:dc:2d:89:d9:f6:81:4b:6c:08:
c1:51:b7:82:c4:77:a3:35:95:d3:f1:5a:87:83:69:
d7:70:bb:8d:bb:d4:87:19:64:97:6b:70:1a:33:74:
a6:5c:dd:a0:73:b9:d5:f3:aa:7a:e4:ec:af:df:20:
46:e1:c5:5e:bb:54:7c:64:a5:db:94:77:98:8b:5d:
cf:c1:b0:69:8d:9a:99:10:ff:ec:d4:2a:99:63:63:
60:1c:b2:08:4e:98:1d:d1:d9:0c:35:df:28:c6:2b:
3b:13:50:af:2c:b2:c0:4c:9b:d8:e2:8d:c0:71:89:
56:44:88:fc:a3:4f:ba:a3:ae:4c:a7:c1:d5:90:89:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:9B:8C:5B:20:06:A3:24:18:48:71:7F:8E:B6:5B:0A:82:DF:4A
X509v3 Authority Key Identifier:
keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ba:05:f6:1f:fc:ba:00:93:31:51:83:08:68:4f:f4:e8:8e:
af:36:c9:03:6f:b7:94:8e:e3:94:29:f2:7d:1d:13:e0:bf:68:
0e:11:04:50:bd:af:09:94:8e:7c:f1:9c:28:b6:94:8d:4c:93:
2d:af:18:3d:c6:6a:3d:61:36:47:21:e1:90:cb:9c:73:c2:dc:
fe:8e:6d:ed:2f:96:b4:a7:dd:a2:72:7c:b7:e7:7e:9c:fd:d7:
12:97:24:d2:62:a9:92:24:38:4f:61:86:b6:fe:44:d8:0c:23:
9f:10:a6:9a:47:60:7a:15:a5:a3:8b:94:ba:54:51:b9:b0:16:
1e:e9:db:c0:24:95:80:07:2f:a0:42:79:49:fa:81:71:9a:08:
ac:a1:6e:ad:da:ff:5f:34:d2:7b:72:4e:78:a7:5b:c7:4f:7a:
1f:26:b6:ab:ac:41:b7:18:6f:ca:64:42:fa:12:8f:17:e7:ab:
3f:ba:34:59:7b:2d:cd:31:36:b7:bf:ea:1c:95:13:18:e5:25:
70:cf:54:7c:bf:d4:84:ec:ca:ff:5a:27:5c:55:13:4d:ce:0a:
77:ab:c7:f9:11:2f:2f:92:e3:8a:cf:4f:c7:01:5c:c8:eb:d0:
b1:a1:4e:13:f3:10:57:a4:52:33:83:28:9f:04:ca:27:1b:5b:
ad:cf:41:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:56:34 2025 by rpki-client