Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
File: jmOEMlhq5gL_Datn0JsZUVJOggU.mft (raw, json)
Hash identifier: obXILCg4U8xq3V+uof3wIhrC7EGjyxvWNVvLvfVLv5s=
Subject key identifier: 2F:60:3C:44:86:BD:34:4F:FB:EE:48:69:BA:46:CD:FC:BA:77:5D:24
Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
Certificate issuer: /CN=8e638432586ae602ff0dab67d09b1951524e8205
Certificate serial: 019917646FF09BD1181ABD868398EA564920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
Manifest number: 8E
Signing time: Fri 05 Sep 2025 01:01:22 +0000
Manifest this update: Fri 05 Sep 2025 01:01:22 +0000
Manifest next update: Sat 06 Sep 2025 01:01:22 +0000
Files and hashes: 1: jmOEMlhq5gL_Datn0JsZUVJOggU.crl (hash: +yDFEHP5Y0QC8g7mzbzIToDuGwk3NW/g+eT6mGGTFtI=)
2: lRoCCR7d7sV8zan-pzAzhXIb0yk.roa (hash: zsjWkEr7wbMEPevuos7iGWcpCUsff/MP3ODrwkUVgTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:6f:f0:9b:d1:18:1a:bd:86:83:98:ea:56:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205
Validity
Not Before: Sep 5 01:01:22 2025 GMT
Not After : Sep 6 01:01:22 2025 GMT
Subject: CN=2f603c4486bd344ffbee4869ba46cdfcba775d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:67:d2:c8:48:b6:95:ea:86:8c:8c:fb:01:f8:
36:d2:06:c2:26:6f:5f:93:e7:1f:e2:6d:5b:6d:35:
9c:34:e1:91:24:4a:ad:80:bd:61:38:97:6f:8c:41:
0b:90:7e:77:c4:cb:46:24:8f:43:cc:c3:a4:5b:6b:
3d:d4:4f:5d:c6:0f:b7:5e:f8:d8:5f:d8:e2:dd:00:
31:17:30:22:3f:ab:84:72:aa:06:36:35:40:14:5a:
ef:e9:88:c5:bd:78:5b:ae:00:c5:fb:90:25:06:af:
47:5d:fd:e2:90:2c:0f:c3:7d:03:04:a3:f6:db:9e:
51:d0:71:ed:fc:81:c9:28:e4:af:47:f4:f0:fd:76:
d0:e8:fe:fc:ff:8a:40:cb:6e:29:4c:e2:57:25:32:
17:dc:12:11:f3:f1:28:99:32:9c:a3:78:4d:fb:89:
45:6b:d9:7c:6c:97:49:02:07:83:45:db:3a:8e:72:
bd:2f:7e:a8:44:6f:ec:58:74:1b:61:bc:a9:af:95:
e5:be:ad:a1:c3:b6:77:89:4f:0c:98:0e:ff:ca:a1:
b6:d4:7f:4b:6e:ca:d5:e7:cb:ff:53:63:df:a8:f9:
37:9e:7f:c3:f2:84:94:26:b2:b0:21:00:ac:ce:62:
21:17:7e:b1:17:e3:44:96:8a:2f:81:29:b6:69:0e:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:60:3C:44:86:BD:34:4F:FB:EE:48:69:BA:46:CD:FC:BA:77:5D:24
X509v3 Authority Key Identifier:
keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:dc:fd:de:7b:8d:c2:6b:11:f0:f5:87:f3:0e:d2:86:4e:a3:
6c:56:84:5e:39:c5:1f:b6:aa:62:3f:b2:d0:72:79:9e:36:b6:
f6:ab:84:14:97:62:1b:64:88:e1:9b:73:39:55:8b:92:6d:12:
59:a7:3b:93:41:cb:42:13:81:f7:bb:4c:90:78:99:1c:4c:05:
a8:61:8c:0e:74:4f:6e:c9:01:d5:e0:81:59:49:86:05:b7:9d:
3c:dc:a4:ac:bd:3c:a9:4a:54:a8:91:f2:6e:94:7b:89:a3:fe:
1b:32:a7:2f:e6:9b:18:8f:56:93:03:63:8c:83:07:be:6a:09:
65:0e:76:a5:ba:5b:fd:13:cf:d1:ea:22:b2:89:51:b4:72:2c:
54:55:e9:7b:a2:88:e4:00:bd:5a:99:13:9a:bc:d7:85:28:03:
07:08:52:2c:12:cc:c2:38:53:6f:3e:b7:c4:b4:57:a9:e6:47:
6c:4c:ac:ca:39:72:c2:63:14:36:49:8b:a4:51:8d:55:f4:fe:
b2:37:1a:cd:07:4c:b0:9e:db:45:90:4c:31:d6:da:2a:22:ca:
70:09:26:68:c1:94:6f:d7:d7:72:a4:d3:c1:b7:fc:49:2a:4b:
fd:67:52:34:2a:f2:1f:25:fc:10:b4:0e:e4:a1:e6:87:2d:ce:
9e:a9:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:49:30 2025 by rpki-client