Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: DZO3Ro+dciSSJPamRp5UsWxjzTzgvd5ACAr1s3R1sts=
Subject key identifier: 9D:3F:6E:77:AA:1B:85:4E:32:30:5B:24:B6:25:4B:2C:9D:7F:3A:66
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 0198D47449B195D49C4E590ED4824A705F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 113D
Signing time: Sat 23 Aug 2025 01:04:07 +0000
Manifest this update: Sat 23 Aug 2025 01:04:07 +0000
Manifest next update: Sun 24 Aug 2025 01:04:07 +0000
Files and hashes: 1: ExwmpmCoQJo2OxTGvS9tBUVoCTI.roa (hash: 5uKveASNNkoz3m6Z/IoI5wPaRI1/s/iR92XdJr3b/vs=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: elDlQV3Gz9Cim1zNBuySfQSl8vuK5Jqpwm6ADX7jvZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:49:b1:95:d4:9c:4e:59:0e:d4:82:4a:70:5f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Aug 23 01:04:07 2025 GMT
Not After : Aug 24 01:04:07 2025 GMT
Subject: CN=9d3f6e77aa1b854e32305b24b6254b2c9d7f3a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:fc:5e:87:4f:7e:8b:76:aa:b8:2f:70:4e:
07:09:ce:fe:cf:42:d6:98:3b:1b:a7:5b:73:7e:e4:
65:a1:15:cd:29:1f:8c:47:87:30:e7:0b:49:b9:b1:
12:f6:0e:fd:fa:67:fb:17:2c:95:cc:da:98:b7:aa:
8d:60:80:d7:78:fe:6c:fe:6c:9f:45:75:2a:60:7f:
17:b1:04:6a:84:df:82:01:7a:4a:2a:a3:1a:4a:60:
84:08:f8:9a:ed:21:52:75:a5:09:88:6f:0f:ff:11:
f4:4f:f2:70:5c:a9:2d:11:f5:1e:b2:e0:04:e5:f0:
cb:48:53:b6:3a:29:c5:50:d5:25:96:69:14:04:0e:
1e:e0:f8:f3:31:d3:fe:0c:17:8a:9c:45:34:0c:ed:
ea:2e:9f:94:75:3e:70:5c:1a:e3:49:3a:aa:93:8b:
20:a6:fc:4b:82:66:f6:fe:5b:e9:15:08:c1:7b:79:
5c:d8:70:df:b4:b4:24:b5:17:40:fd:3a:f1:19:95:
ac:bf:fc:e1:b0:6d:65:49:8d:ea:1d:d6:d8:92:2d:
e7:fd:8f:2a:19:31:0c:ab:dd:52:ef:af:17:34:3c:
21:e6:0c:71:3d:cb:00:d4:68:71:90:81:c8:8b:81:
45:62:89:cb:71:cf:3f:3d:0c:ef:34:8b:ea:1d:df:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3F:6E:77:AA:1B:85:4E:32:30:5B:24:B6:25:4B:2C:9D:7F:3A:66
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1e:11:db:84:0b:01:23:d4:af:a5:c3:40:0a:ba:d4:ae:2c:
d4:0f:b6:a1:cc:73:7b:8d:ac:ea:78:b9:83:6a:86:81:5b:ce:
37:30:9d:06:77:4d:34:bd:55:7a:64:e6:4b:2e:16:dd:a9:94:
1c:c7:b9:6c:cc:a4:a9:69:6e:d7:0d:70:2a:ae:33:11:5b:52:
30:f6:c8:9b:16:6b:f6:72:80:e9:05:45:cb:ff:0e:06:c7:43:
96:95:9a:4d:ab:da:25:57:7f:1c:02:ba:17:88:5b:1e:bd:a1:
8c:bb:a9:97:71:75:75:99:08:02:eb:73:74:f4:4e:63:a5:a7:
d8:ee:90:df:e3:ba:5a:e7:f6:55:9d:8b:1e:d0:fd:28:80:d0:
16:c5:75:02:65:9f:1c:7b:4e:4c:27:7c:66:b0:b3:2b:79:0f:
6f:7f:b0:f3:7b:e9:76:b6:b6:8a:17:a4:da:27:d3:dc:e2:05:
f6:6b:58:3c:6b:62:9c:44:11:b6:c4:64:3e:65:57:b1:c2:0a:
38:26:5f:60:5f:79:c7:a5:85:79:37:e0:90:2a:e2:71:37:2e:
a8:82:43:01:5c:0c:05:f6:15:d0:cb:a1:4e:cc:79:3c:17:37:
8c:d6:9f:f7:3a:8f:cc:b2:06:d3:ff:f1:60:ec:2c:8b:1d:75:
b4:92:ef:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:57 2025 by rpki-client