Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: GiXkcErjJUWzjQdvgMbd+XJ+J7WU5P1/rrGgOErc3l4=
Subject key identifier: E0:5B:31:61:74:24:AA:32:A4:03:D7:BE:51:33:17:5B:A8:4F:BF:D1
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 0199FBEBD3B6111735D4BAF5625627BD52AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 11D6
Signing time: Sun 19 Oct 2025 10:02:40 +0000
Manifest this update: Sun 19 Oct 2025 10:02:40 +0000
Manifest next update: Mon 20 Oct 2025 10:02:40 +0000
Files and hashes: 1: ExwmpmCoQJo2OxTGvS9tBUVoCTI.roa (hash: 5uKveASNNkoz3m6Z/IoI5wPaRI1/s/iR92XdJr3b/vs=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: M4Mwff+Q5wuW2/BOryn0U7X05vi71NNyrBTy2aFhlE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d3:b6:11:17:35:d4:ba:f5:62:56:27:bd:52:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Oct 19 10:02:40 2025 GMT
Not After : Oct 20 10:02:40 2025 GMT
Subject: CN=e05b31617424aa32a403d7be5133175ba84fbfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:44:ea:70:31:16:6b:09:42:2d:71:e4:93:
ef:02:86:f5:95:2f:8f:d9:fa:a3:e4:8e:da:76:ee:
9a:96:e4:1f:70:8a:f4:96:fb:e8:84:37:8f:62:c6:
90:86:df:df:26:b2:9e:74:30:2c:04:bf:28:83:cb:
10:de:04:51:94:f6:f3:79:4f:e4:17:f1:57:6d:ee:
f1:ac:61:77:4e:f1:4c:46:77:5a:54:31:f0:4b:d5:
36:16:b0:93:c8:59:c5:d3:23:0e:4f:88:31:4f:f2:
02:26:52:76:39:06:dd:ad:32:d2:d0:2f:78:14:fe:
22:2e:e5:cc:b3:84:cc:2f:f5:a0:ab:9a:ad:45:77:
71:8f:9c:e7:d1:f0:ef:d3:cc:82:02:b9:fd:7d:83:
fb:c7:a5:96:5f:89:85:f5:be:c0:1a:4f:d1:3b:74:
0e:20:97:05:74:3d:c9:20:8e:ea:78:45:7f:65:22:
eb:04:82:ca:e2:f5:ab:8c:b0:e1:9b:e6:e5:c2:65:
b1:9c:0b:53:87:0c:00:75:02:c4:9c:96:9e:51:ed:
3d:f2:70:b3:94:fe:cb:46:96:9e:89:94:5f:ed:9d:
f8:cf:8a:08:86:28:35:af:bc:a4:04:d9:88:26:db:
d4:31:bc:b2:67:cb:55:96:f9:2d:1e:43:e1:78:db:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5B:31:61:74:24:AA:32:A4:03:D7:BE:51:33:17:5B:A8:4F:BF:D1
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1d:d7:49:16:5c:76:74:c2:77:bd:6e:37:47:70:04:6d:18:
9a:30:7f:68:8b:e9:d1:ed:e9:b9:b8:0f:d7:9e:46:ed:f4:43:
82:60:b5:50:ff:c1:d7:b0:11:66:a6:c2:8f:fa:fe:e1:f4:a6:
36:fa:33:b7:68:4b:6a:2d:a1:1d:22:95:74:c3:d2:11:d2:8f:
b8:5d:45:65:a3:80:e0:96:42:32:00:dd:39:21:21:68:d7:2f:
c0:06:34:d1:68:94:22:94:b9:f0:77:83:ee:07:1f:98:be:50:
ca:9e:77:1c:fe:c7:94:0e:aa:c7:f3:45:20:de:5e:0e:71:ca:
e8:9b:e4:9e:d8:6b:22:a6:f7:56:d6:04:54:f2:2d:0e:09:04:
26:77:59:f0:1f:c4:0f:cd:42:25:d9:75:47:06:5b:b4:df:61:
c8:d5:df:65:e4:d3:9f:65:d8:ee:45:bc:96:31:29:19:1e:14:
46:ea:55:15:2f:00:ce:dd:ff:73:7a:73:f1:11:a2:ac:af:ec:
97:dd:d2:f8:3d:c2:89:ad:73:59:66:fc:5b:95:cf:7e:90:6c:
0d:ea:7e:14:7d:87:4f:3b:49:6c:91:40:fa:4a:46:3b:64:f7:
e4:29:87:93:54:b0:09:74:d9:f8:31:ad:8a:d5:6b:0a:8c:9f:
f4:40:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:50 2025 by rpki-client