Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: St4vzCDWNwXrjt6rZC1CDVlPQriVSUSmhuRJ2B7rqn8=
Subject key identifier: 11:CA:AD:D1:C1:15:E2:F9:ED:90:2F:4C:71:86:40:E8:AE:88:D7:BC
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 0197B77C8EFD3C3336A329DD65E38B9DCC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 087F
Signing time: Sat 28 Jun 2025 17:01:22 +0000
Manifest this update: Sat 28 Jun 2025 17:01:22 +0000
Manifest next update: Sun 29 Jun 2025 17:01:22 +0000
Files and hashes: 1: RpYPR1Gi-4IalDvM_FJ3EiJEySA.roa (hash: 5bL7bq1TTrrMHUlx6xb11JGKYBQ34VQ/azRdoDzlQjA=)
2: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: ULJvdY6+wLsm5qZReZ8KYb2ZO0aMOhDjD3nxSfga3Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8e:fd:3c:33:36:a3:29:dd:65:e3:8b:9d:cc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Jun 28 17:01:22 2025 GMT
Not After : Jun 29 17:01:22 2025 GMT
Subject: CN=11caadd1c115e2f9ed902f4c718640e8ae88d7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:93:a2:f6:b0:da:65:e7:f3:34:92:37:78:
b9:6a:98:b4:ce:fe:3a:53:9f:ee:38:2e:3b:c0:5f:
34:34:f0:7c:7c:fe:8d:04:3f:36:b9:b3:d2:30:69:
8e:c5:0e:dc:e7:81:1a:27:27:1d:60:1b:26:38:73:
52:d2:db:0e:47:0b:3c:cf:d4:fd:7d:ba:17:24:f8:
1a:6d:17:87:82:95:57:b4:9b:a0:f0:b8:90:6c:c8:
3e:4d:d4:1d:e8:3c:08:56:69:38:3b:04:08:36:d8:
c5:9c:92:83:b3:1e:f8:1a:fa:66:22:63:ea:03:13:
19:e4:7a:a9:7f:43:7f:27:06:74:fe:fd:20:7c:2c:
f5:58:43:a8:d4:21:2d:7c:dc:b7:8b:81:47:22:77:
5c:2c:29:96:3a:00:5d:9d:15:a5:6c:3d:63:32:b8:
5a:fa:6a:bc:39:77:43:c5:64:6b:a9:37:21:8f:70:
0a:97:42:c4:0a:df:74:88:9f:7b:2f:3b:9f:26:4e:
17:dc:9f:d8:66:10:e5:c1:c5:30:6b:a8:d4:f9:f1:
2a:a7:f4:f1:8d:c7:64:77:6b:1e:21:21:03:e6:fd:
cc:04:dd:e9:b0:c9:fe:a9:ae:dc:ab:65:c4:3b:86:
da:6b:13:d0:94:94:33:5f:e6:6a:79:94:6a:47:b6:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CA:AD:D1:C1:15:E2:F9:ED:90:2F:4C:71:86:40:E8:AE:88:D7:BC
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:85:01:a0:0a:1d:42:69:93:04:93:da:16:eb:47:bd:b9:b9:
8e:4d:8d:82:51:6c:28:1f:8c:c6:0d:f6:f4:ea:2f:0e:50:27:
3d:9f:99:be:d7:fd:8d:5a:41:ce:44:05:a8:c0:7a:61:86:01:
b1:f8:dc:f0:dc:4f:1b:c6:55:99:ab:1a:fe:2a:f6:b2:d5:f5:
c1:ca:f4:3b:2c:f8:89:82:ae:10:d9:88:15:c6:0c:af:41:78:
8c:94:42:00:9a:17:ad:f9:3f:c5:48:9d:fe:1a:1e:ec:40:62:
b6:4e:03:ae:92:aa:44:91:f8:c2:99:c9:13:b4:78:3a:f1:94:
fa:c1:41:1d:e3:0c:64:a8:d2:46:ce:b7:1f:79:37:f2:1c:e4:
53:51:19:98:21:3e:b6:2f:1f:ba:b6:90:97:f6:95:d0:14:57:
83:50:86:99:6e:ae:c0:8d:64:32:ee:52:53:99:96:c0:e6:7c:
6c:7f:f3:70:31:7d:a2:4b:29:05:39:da:9a:0e:88:96:2c:69:
74:49:30:b1:97:e5:71:be:dc:d6:60:f8:26:21:8b:39:54:aa:
d2:26:17:12:f6:d1:6b:0e:04:06:cd:a9:66:ec:06:b7:bb:05:
c5:92:97:1c:19:0a:5d:f4:ef:d9:a1:79:5f:26:a5:7d:3c:15:
fe:d1:93:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:53 2025 by rpki-client