Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File: jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier: Wg0uGOhKdFGXWMWijojqQ3VA3DqKUF6fdcJrI3JuqN8=
Subject key identifier: 28:93:6F:EC:4C:6D:4E:90:6B:42:01:06:07:6A:AF:FC:82:83:66:64
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer: /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial: 019A71B8DB75698F19F9CBB8052DEEAE6F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number: 0E2D
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: Qc5cmd1l4zemEHfozY81Dk5Vg5A.roa (hash: 1e50whpvJStdUj8bNZvYvbgVa0jYFa3BmNTPWax7Fi4=)
2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: TcJ7BQeK899Kfw4nnl5PWCnJZ/l+EfFMsbuwi6hT3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:db:75:69:8f:19:f9:cb:b8:05:2d:ee:ae:6f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=28936fec4c6d4e906b420106076aaffc82836664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:7c:a7:03:7f:16:7c:21:da:2a:21:07:4a:
f7:64:1a:b7:11:88:8f:67:dc:0c:fd:48:fa:c1:35:
c1:bf:35:38:4f:3a:76:24:11:d9:2d:c5:c0:f3:fd:
59:34:ec:ec:27:74:e9:b3:8b:28:75:77:3d:63:33:
57:d6:a7:aa:48:d9:65:2c:86:fa:7b:c8:05:92:37:
81:12:0a:89:6d:a4:db:08:6b:99:02:00:59:4d:fd:
ae:08:3e:34:41:65:48:9c:7a:ce:59:1f:aa:be:d4:
91:2d:5f:6a:0b:fc:6e:d7:90:19:26:21:fe:a2:c2:
b9:99:fb:ee:c2:f5:a7:ee:8c:73:1d:fa:18:c2:34:
ae:c9:5e:cd:c1:11:0c:c6:13:8f:d3:7d:48:7f:cb:
28:aa:97:2f:04:bf:5e:7b:da:67:a1:9e:20:eb:19:
2c:44:ed:92:96:d0:e7:38:14:a0:ed:c8:23:44:d3:
d0:15:47:6b:cc:b2:d2:82:bc:47:b8:1f:64:0a:d2:
87:c4:1d:46:fd:1c:a5:4d:17:49:88:96:86:e1:00:
6b:6a:d5:63:8a:6a:74:ef:c5:af:72:91:78:bb:d5:
c3:c2:d6:2a:78:83:f8:35:b2:f2:b3:a0:1f:7c:c5:
8e:3e:cb:73:2a:11:48:ae:d5:38:1e:a5:47:2b:11:
cd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:93:6F:EC:4C:6D:4E:90:6B:42:01:06:07:6A:AF:FC:82:83:66:64
X509v3 Authority Key Identifier:
keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:55:fa:29:52:b0:3c:51:9f:49:2a:1e:01:ce:a1:46:67:57:
04:e6:c6:0b:04:4c:fb:b7:ab:da:c4:71:04:e5:46:55:d5:5b:
70:49:7f:75:0b:62:95:02:dc:ad:de:c3:c8:bf:68:0e:2f:fa:
df:31:8f:34:f9:1d:a2:00:08:b6:3c:a1:59:a4:2a:20:7a:10:
9f:d9:ff:5a:b6:f1:66:04:91:90:4b:12:45:6c:3e:59:fc:cc:
d0:c5:b8:86:f0:87:a1:b2:15:a9:a7:19:b8:5d:50:76:85:2c:
88:b7:62:c2:b2:f4:ad:82:be:eb:d4:a9:75:ee:5d:06:70:e7:
d6:ee:fd:54:38:26:b5:1c:b5:ed:5d:7d:08:24:9c:e0:b7:7d:
48:0f:e5:c7:25:81:b6:72:89:eb:b4:bf:f4:c4:82:2d:c6:30:
c9:4c:1d:b3:b6:76:5a:52:87:f2:2d:28:c9:2d:cd:3a:d3:f0:
75:34:0a:76:f6:04:1b:c5:48:08:52:f8:e4:36:f8:00:b1:56:
97:85:65:29:2b:ea:e4:da:16:24:55:da:91:65:54:31:4a:9d:
a2:1e:3c:51:8b:b5:53:2b:31:a7:86:12:a5:7a:64:98:0f:85:
49:f3:c2:c8:a3:e4:1f:94:50:ea:ac:23:1a:b0:40:0b:79:3d:
0f:11:4c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:32 2025 by rpki-client