Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
File: jwhPOoC0od9IEWQqq415UWOaLlg.mft (raw, json)
Hash identifier: LGRMKA88XbBMJYd8Dw1WGPK2ED/rrXTD4y0sb1N+ML0=
Subject key identifier: A1:B8:3F:4A:31:7F:B0:77:3F:44:3B:AC:11:33:70:71:3A:0A:7E:26
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 01974A7B144489A8554BE99728E7EBCBBCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
Manifest number: 1243
Signing time: Sat 07 Jun 2025 13:01:09 +0000
Manifest this update: Sat 07 Jun 2025 13:01:09 +0000
Manifest next update: Sun 08 Jun 2025 13:01:09 +0000
Files and hashes: 1: gEYhgGeiO3CvO7L61btMp6FMtUk.roa (hash: t7slYmPenDTs/a8GzhHgCqRYrDeOIVUNfoJ1LIoBLf8=)
2: jwhPOoC0od9IEWQqq415UWOaLlg.crl (hash: nMXEyuMozn1z6a07apxSmJ5T+gT0Odpcb+gACLJWYO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:14:44:89:a8:55:4b:e9:97:28:e7:eb:cb:bc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: Jun 7 13:01:09 2025 GMT
Not After : Jun 8 13:01:09 2025 GMT
Subject: CN=a1b83f4a317fb0773f443bac113370713a0a7e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:82:b9:15:e3:59:15:ee:40:0d:30:3d:06:
04:b2:66:52:dc:d9:7f:20:dc:9e:61:7e:1e:76:a4:
f2:5b:65:2e:5b:15:4f:a2:3e:19:8b:c5:59:33:13:
dd:3b:b1:e7:4d:9a:64:41:c7:fe:09:77:93:3f:3c:
c4:43:27:4a:a3:8b:3c:cd:3e:32:64:07:4b:50:b2:
3e:8d:35:b4:5d:30:a6:53:94:15:c4:27:a4:c1:3e:
57:0b:1e:8b:01:f8:47:e0:ed:2f:46:9d:54:4e:0c:
91:9b:37:35:47:72:e4:a7:e7:d3:e2:2c:88:70:16:
a7:24:63:fd:e3:95:37:5f:26:2a:45:30:87:5a:87:
16:e1:c2:4e:41:ec:3d:21:d6:2e:f1:c3:3f:3d:5b:
32:dc:a8:6c:ad:ff:67:cd:23:ff:b6:6d:47:02:45:
12:66:f0:0d:c9:77:33:a1:8e:a7:fe:7e:92:88:db:
51:06:91:d9:59:70:18:61:1b:14:78:45:94:f8:cf:
bf:f2:a8:ae:96:c7:4d:1a:6a:51:27:f2:d8:74:38:
0f:75:1f:16:69:ab:56:40:f0:3d:58:8f:fd:f3:62:
86:a6:77:b7:06:58:02:45:31:8c:b9:f8:65:53:da:
61:78:03:5e:75:d4:93:e7:76:cf:8d:0d:fb:ed:93:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B8:3F:4A:31:7F:B0:77:3F:44:3B:AC:11:33:70:71:3A:0A:7E:26
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:55:9a:1a:e8:02:a4:88:d1:34:de:2e:78:36:f4:e4:47:2c:
c4:87:0a:29:c1:46:7e:76:62:d8:cc:df:95:4a:ba:4b:bb:e2:
2b:4f:9e:74:56:1f:ee:de:08:fe:e2:7d:86:b3:2a:1a:43:69:
8e:b9:e9:12:ca:e5:23:9b:42:38:6a:c3:d2:ad:14:38:94:87:
18:03:e4:04:a7:de:cb:6c:1b:fb:8b:6c:20:d3:4e:a8:c1:8f:
68:a4:d1:f2:0d:89:da:f6:86:6a:04:b2:7c:f2:95:41:33:15:
c9:c6:c1:cb:ef:96:fc:7e:19:30:9b:fc:8d:0d:2d:98:86:e6:
27:88:bf:1f:57:81:eb:b9:1b:20:34:e8:f6:2a:77:63:fb:1f:
41:02:f3:d5:74:dc:f3:6b:50:2d:5e:c1:17:50:77:68:3e:47:
06:21:ad:8f:0a:2c:7f:41:f6:04:24:fe:e7:ca:13:c8:fa:06:
52:cd:66:59:19:64:a4:12:f2:6c:74:31:ef:d1:a7:9a:7e:9a:
f4:1b:0d:ef:2a:91:88:ec:72:69:dc:80:7b:c4:1c:a3:09:2f:
7c:bf:13:39:eb:73:85:e4:45:4e:db:1e:fb:d3:70:48:b6:0f:
c8:19:43:05:02:0c:4e:f1:8a:93:a7:03:42:9c:b0:0a:17:53:
a7:4f:b2:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKexREiahVS+mXKOfry7ysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDg0ZjNhODBiNGExZGY0ODExNjQyYWFiOGQ3OTUxNjM5
YTJlNTgwHhcNMjUwNjA3MTMwMTA5WhcNMjUwNjA4MTMwMTA5WjAzMTEwLwYDVQQD
EyhhMWI4M2Y0YTMxN2ZiMDc3M2Y0NDNiYWMxMTMzNzA3MTNhMGE3ZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyiCuRXjWRXuQA0wPQYEsmZS3Nl/
INyeYX4edqTyW2UuWxVPoj4Zi8VZMxPdO7HnTZpkQcf+CXeTPzzEQydKo4s8zT4y
ZAdLULI+jTW0XTCmU5QVxCekwT5XCx6LAfhH4O0vRp1UTgyRmzc1R3Lkp+fT4iyI
cBanJGP945U3XyYqRTCHWocW4cJOQew9IdYu8cM/PVsy3Khsrf9nzSP/tm1HAkUS
ZvANyXczoY6n/n6SiNtRBpHZWXAYYRsUeEWU+M+/8qiulsdNGmpRJ/LYdDgPdR8W
aatWQPA9WI/982KGpne3BlgCRTGMufhlU9pheANeddST53bPjQ377ZOlkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG4P0oxf7B3P0Q7rBEzcHE6Cn4mMB8GA1UdIwQY
MBaAFI8ITzqAtKHfSBFkKquNeVFjmi5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84YzVmNWYtYTFiOC00YTJjLTliM2Mt
YjBmNmNjZDQ2Mzg3LzEvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84YzVmNWYtYTFiOC00YTJjLTliM2MtYjBmNmNjZDQ2Mzg3
LzEvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVWaGugC
pIjRNN4ueDb05EcsxIcKKcFGfnZi2MzflUq6S7viK0+edFYf7t4I/uJ9hrMqGkNp
jrnpEsrlI5tCOGrD0q0UOJSHGAPkBKfey2wb+4tsINNOqMGPaKTR8g2J2vaGagSy
fPKVQTMVycbBy++W/H4ZMJv8jQ0tmIbmJ4i/H1eB67kbIDTo9ip3Y/sfQQLz1XTc
82tQLV7BF1B3aD5HBiGtjwosf0H2BCT+58oTyPoGUs1mWRlkpBLybHQx79Gnmn6a
9BsN7yqRiOxyadyAe8QcowkvfL8TOetzheRFTtse+9NwSLYPyBlDBQIMTvGKk6cD
QpywChdTp0+y6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:05 2025 by rpki-client