Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
File: jlo2o46eViR2rnC5FQKOMBhxKRk.mft (raw, json)
Hash identifier: zDi/9dOggaCrLzyQUMYSIjwWY36tNU32awkoVebbzec=
Subject key identifier: 11:FF:84:DA:10:A2:D3:B8:3E:56:87:FB:6A:9A:13:9C:B8:AC:DC:8E
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Certificate issuer: /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial: 0199228C2BEF521D2AF7F600A8D810C93F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
Manifest number: 0A12
Signing time: Sun 07 Sep 2025 05:00:35 +0000
Manifest this update: Sun 07 Sep 2025 05:00:35 +0000
Manifest next update: Mon 08 Sep 2025 05:00:35 +0000
Files and hashes: 1: jlo2o46eViR2rnC5FQKOMBhxKRk.crl (hash: /SMK11/hbgjMAgEtHJXPXAesTHph4cQ95GmPi/QHgOI=)
2: lCFWlcHQXl8OCfG8VkJf_ovcDUY.roa (hash: SWucWn1D4Fv0B4+THeJJxTuUCPWrkWrGEDFRw9TIy8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:2b:ef:52:1d:2a:f7:f6:00:a8:d8:10:c9:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
Validity
Not Before: Sep 7 05:00:35 2025 GMT
Not After : Sep 8 05:00:35 2025 GMT
Subject: CN=11ff84da10a2d3b83e5687fb6a9a139cb8acdc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:1e:db:24:1c:8e:78:93:14:5b:e3:51:08:
1c:a6:af:00:80:2b:85:26:09:a2:79:e3:cc:c8:4f:
d7:52:55:2b:59:a0:74:60:07:e2:99:94:4b:1f:ee:
e2:a6:56:6a:2a:bc:14:33:0e:ac:47:27:b9:7c:82:
f9:1b:62:6a:cd:f1:b8:22:52:a5:e8:33:9e:5c:d3:
03:bf:ab:ad:0c:ef:c3:a2:65:aa:81:01:35:ce:e2:
33:67:e6:ff:ec:89:bc:f3:6e:5b:05:22:50:f9:3b:
ec:f4:17:67:19:6d:da:80:7c:cb:9b:cb:f2:89:13:
6d:12:c6:e7:b0:df:bb:a1:5e:56:fd:58:4a:91:85:
ae:06:ee:af:c2:af:a0:b3:db:ca:be:41:e3:b3:3a:
ea:4e:23:1d:a8:dc:f8:c1:46:e5:60:82:bb:14:0f:
3c:af:6b:3a:3f:d3:16:d7:2b:3b:11:11:11:4b:91:
20:b4:e5:4f:8d:e4:35:50:e6:73:f3:60:92:57:5c:
a9:a0:8d:fa:63:8f:d8:35:92:63:ec:76:33:e8:df:
b3:66:1c:05:e0:f3:21:0c:9d:71:7d:a7:a5:be:14:
3e:32:4f:f6:9b:53:0d:dc:ba:ec:bd:84:7c:a2:77:
38:0b:a1:50:71:62:89:f9:8b:ee:5f:41:d5:b2:83:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FF:84:DA:10:A2:D3:B8:3E:56:87:FB:6A:9A:13:9C:B8:AC:DC:8E
X509v3 Authority Key Identifier:
keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b7:ef:0f:4a:1d:be:3c:53:70:c3:a3:be:ad:e9:6a:d2:47:
54:79:5b:46:2b:bb:29:5f:4b:c0:b6:e2:56:de:1b:04:83:63:
25:fb:bf:ee:41:b1:c4:87:25:00:0c:1d:d8:8b:6a:a3:19:69:
4d:c5:43:f2:ae:61:e1:97:99:4d:f7:92:af:ab:9e:eb:fb:1d:
51:1e:99:3f:85:fd:19:35:f9:ea:00:c8:c7:ca:df:f3:7b:ee:
b9:6b:cc:87:04:21:82:54:25:28:b7:5e:ee:38:5a:75:40:93:
de:65:1e:16:ec:44:b4:43:9d:b2:ff:18:e0:d5:67:d0:4c:b9:
e9:f9:11:7b:17:d1:4a:e0:a1:9f:14:b7:eb:a1:b9:5e:5b:9d:
35:22:8d:6c:12:d0:4b:32:7e:03:1a:c6:e0:81:7d:d7:0b:1d:
b6:be:b1:1f:af:f3:49:28:6a:85:89:a4:3d:a7:b3:2f:b4:f7:
f2:1c:5a:62:78:e1:ae:51:b9:4d:5e:a5:eb:65:51:0f:15:6b:
51:c6:6d:5e:fe:26:7b:0d:80:fc:18:5c:1c:29:c1:23:6a:98:
3b:aa:77:e9:8d:69:4f:7f:39:36:44:5a:25:36:34:23:fb:91:
a3:8a:f1:43:09:a1:dd:a4:28:b3:50:c9:28:1e:27:f5:3c:d6:
aa:28:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:59 2025 by rpki-client