Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: 9Cejx4d3N7ebrMfLn6P6kpbwQvb/RVNr8a1a1tE8sP0=
Subject key identifier: DA:EB:4A:D8:52:E3:9E:4E:37:86:A4:51:D2:DC:7F:D8:F7:4F:E6:AE
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 0197B89067CC19A5A02058726D0855806CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 10AA
Signing time: Sat 28 Jun 2025 22:02:40 +0000
Manifest this update: Sat 28 Jun 2025 22:02:40 +0000
Manifest next update: Sun 29 Jun 2025 22:02:40 +0000
Files and hashes: 1: ExwmpmCoQJo2OxTGvS9tBUVoCTI.roa (hash: 5uKveASNNkoz3m6Z/IoI5wPaRI1/s/iR92XdJr3b/vs=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: 2xml+g6gPZWxKdrAA4FRfZtdoAYnJCZhvT65QFdBGPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:67:cc:19:a5:a0:20:58:72:6d:08:55:80:6c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Jun 28 22:02:40 2025 GMT
Not After : Jun 29 22:02:40 2025 GMT
Subject: CN=daeb4ad852e39e4e3786a451d2dc7fd8f74fe6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:d4:bf:30:0d:e1:03:d9:72:58:83:6b:c4:
28:0a:e5:39:4b:04:4a:dc:60:ad:a9:10:c1:b3:65:
f3:8b:9f:cc:08:d9:50:24:3d:8a:bb:27:17:5f:6b:
26:60:7c:1a:b9:74:5c:d5:af:de:c1:6d:1c:f8:ad:
fc:08:c0:7f:01:cf:28:18:d1:7d:28:67:14:0e:86:
3c:55:71:f7:c3:8d:18:79:cc:ac:ea:74:f7:07:78:
35:5d:ce:ad:9d:70:81:50:02:8a:8f:b2:a4:e5:8e:
f9:b9:64:69:f9:a1:06:39:aa:7c:10:af:de:94:47:
e1:93:af:75:12:24:18:5f:7c:a6:a8:ad:9b:20:40:
3d:c8:88:d6:41:16:38:b5:67:85:07:99:44:a8:81:
9a:0c:ea:08:72:bb:f9:89:75:28:96:51:16:ea:99:
4d:9b:c5:89:07:cf:4a:11:36:0f:5b:83:65:88:97:
37:dc:a1:0f:d6:f6:1e:73:4c:c0:fe:77:98:10:a1:
9c:18:24:98:2b:25:8d:b1:b3:4a:5b:6f:e5:58:62:
6a:2e:4e:9d:92:3e:37:98:b3:62:99:d5:38:f9:03:
ef:d1:5b:f2:88:ff:e1:de:3a:cc:13:ca:6e:92:c0:
50:1b:9c:99:97:a5:f7:5d:c5:12:9e:0a:ca:d0:86:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EB:4A:D8:52:E3:9E:4E:37:86:A4:51:D2:DC:7F:D8:F7:4F:E6:AE
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fa:22:ea:85:7f:d1:4f:d7:2f:c6:a9:35:17:6d:76:6f:7b:
de:e3:59:fb:0d:5d:01:d5:5e:1e:5a:d9:57:3e:39:5f:d8:4f:
cd:97:47:92:8f:0c:04:6c:be:a3:a7:7b:4c:93:01:48:f2:5d:
98:1b:1a:a0:fa:92:04:44:1f:7d:9c:b4:ea:7a:32:20:a6:4a:
7c:9b:1b:f0:2e:ff:74:9d:29:18:c9:18:67:b2:93:0e:49:3f:
48:b9:e0:c8:c4:e9:2f:7d:ec:e3:dd:76:65:09:36:33:50:37:
00:10:74:d8:a2:6a:3a:9b:62:ce:19:fd:81:e6:36:20:af:08:
51:58:ba:a3:e8:6d:53:95:4d:d1:64:72:fa:2e:59:b0:17:27:
28:93:6e:c3:d7:88:62:93:2d:4d:cc:c8:d3:41:fc:70:1a:1e:
72:b2:dd:d0:14:8f:20:8f:d3:0e:a0:39:52:ad:4d:02:b3:19:
63:72:3b:8d:16:ae:1f:57:c2:fe:04:d3:a0:8d:2d:cd:39:08:
49:e7:e6:0a:7f:84:a5:9b:44:3e:14:af:1a:67:40:53:0a:7f:
a9:f6:b0:29:e4:a6:30:7c:b3:f3:1e:79:c8:97:36:4b:10:3c:
05:44:56:56:f1:d1:e8:99:1f:12:f1:e8:47:46:1d:54:86:33:
b2:73:be:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:01 2025 by rpki-client