Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File: jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier: TuIAqZ1X91ZEO7lPEBSllrqU4xccwkBYbrYd61PlE6o=
Subject key identifier: 49:56:7D:2B:E7:E0:64:EC:C5:B0:AA:DE:4D:C2:D7:87:67:0A:64:A4
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer: /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial: 01975046485B9340C3027997F1170B6D768C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number: 0C8E
Signing time: Sun 08 Jun 2025 16:01:12 +0000
Manifest this update: Sun 08 Jun 2025 16:01:12 +0000
Manifest next update: Mon 09 Jun 2025 16:01:12 +0000
Files and hashes: 1: Qc5cmd1l4zemEHfozY81Dk5Vg5A.roa (hash: 1e50whpvJStdUj8bNZvYvbgVa0jYFa3BmNTPWax7Fi4=)
2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: 3HjTIhRsZBtOei1HMKTxEyQFTnJCJSNHxKR0U4bX01A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:48:5b:93:40:c3:02:79:97:f1:17:0b:6d:76:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Validity
Not Before: Jun 8 16:01:12 2025 GMT
Not After : Jun 9 16:01:12 2025 GMT
Subject: CN=49567d2be7e064ecc5b0aade4dc2d787670a64a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:b4:52:33:b9:80:69:10:2a:fd:30:0c:42:
54:75:1c:5b:6d:e9:e5:85:13:6c:ca:d8:c0:8c:ec:
ae:c4:dc:34:d3:48:0b:58:4c:c6:8b:8a:b5:ec:a0:
57:97:35:cd:be:29:15:3d:fa:8b:e2:ad:03:e6:bb:
f9:1d:ff:5d:e5:bf:1a:d0:7d:a5:c2:09:c6:d7:38:
19:34:ed:44:e6:ab:f5:a5:71:31:4e:65:09:c0:45:
25:b6:69:28:74:9a:50:ac:08:ee:3a:6f:69:c8:07:
d8:b3:88:52:04:fd:2b:68:4f:f0:33:61:0b:0b:bc:
27:33:0d:59:39:77:8e:a3:7a:c9:84:52:ed:dd:28:
01:d2:d5:07:57:ff:ea:38:e3:b9:5c:59:a6:47:90:
19:e1:24:d0:9c:31:de:55:f8:38:fd:d7:bf:66:6c:
ab:ea:7e:eb:5c:37:07:71:f6:06:c2:ad:44:64:06:
c1:ee:45:8e:2f:2f:ae:32:a8:8f:ed:70:24:9e:3a:
ed:b5:96:57:84:44:c3:df:0c:81:37:b0:b4:69:69:
8e:ec:01:f4:1f:7e:3e:b9:8f:5a:dc:69:e3:61:a4:
66:bf:e9:fe:a3:f9:e2:2d:a2:6b:15:af:23:07:53:
e6:5e:21:a6:1b:f9:c5:a7:ea:69:61:7a:9d:6f:2d:
db:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:7D:2B:E7:E0:64:EC:C5:B0:AA:DE:4D:C2:D7:87:67:0A:64:A4
X509v3 Authority Key Identifier:
keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8a:d4:ea:2c:2f:6e:47:07:50:46:b8:97:76:31:3c:ab:13:
0f:da:24:88:0c:99:c0:6f:3b:c6:52:fc:a0:d5:1a:bd:d1:22:
fe:5c:f7:69:c9:8f:e3:d8:8a:89:2e:cd:93:7d:6d:ee:68:bf:
37:8b:ba:cb:f6:0e:63:bc:50:51:1d:b0:7c:1f:b0:1d:1d:4d:
8c:38:16:ad:d0:dd:51:5f:d3:a4:cc:56:bb:a4:dc:6f:21:20:
a1:89:03:4c:23:51:fe:9b:45:6b:a9:35:04:0f:98:47:4e:51:
30:d2:86:f9:7c:1a:ac:9f:af:86:a6:a6:f3:fa:af:54:f5:ce:
bd:b2:ba:75:a8:eb:19:b5:0b:bf:a6:9d:4f:c0:10:81:c8:ad:
62:3f:41:a9:bf:e1:1e:e6:0e:0b:ad:8f:b3:ca:79:83:93:e7:
43:76:7d:b4:24:fb:a2:d5:27:43:a7:44:59:0e:ea:31:60:18:
ff:f0:4c:fd:5f:ea:99:3d:36:54:2a:5d:75:cb:56:4b:10:6d:
ef:46:e8:af:d9:c6:02:d2:d0:14:74:73:6c:5f:11:a4:03:e4:
63:8f:a6:97:0b:3a:7a:ea:1a:de:f5:4c:ba:c2:86:9c:a5:a8:
ec:72:46:08:37:10:5c:d9:15:d1:64:35:37:d1:bf:c3:d2:7d:
60:58:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:43:02 2025 by rpki-client