Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
File: jl3HMsooNJc1R8eA4cOlq0eAW-A.mft (raw, json)
Hash identifier: 0/e2SArFOvJLo+pJfBcHLXm76pbrtWUuTJ889k0iIe8=
Subject key identifier: AA:2E:45:E8:9F:1D:C0:29:36:D8:6C:E4:46:F8:DD:95:40:0D:40:E5
Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Certificate serial: 0198DA3C9A173F8DFB7B892BD935BE9AA1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
Manifest number: 1161
Signing time: Sun 24 Aug 2025 04:01:01 +0000
Manifest this update: Sun 24 Aug 2025 04:01:01 +0000
Manifest next update: Mon 25 Aug 2025 04:01:01 +0000
Files and hashes: 1: jl3HMsooNJc1R8eA4cOlq0eAW-A.crl (hash: x0j/oAhFXlsAhHMlgurAXX2arKcGMaWaB/DI5wXrJUI=)
2: jlfdZHmVvHdz_53apg0OZWLxSVw.roa (hash: jgBY+KV60Sm5+edJ00g2iCkNCnIW/XdZGLc1p19ckko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:da:3c:9a:17:3f:8d:fb:7b:89:2b:d9:35:be:9a:a1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Validity
Not Before: Aug 24 04:01:01 2025 GMT
Not After : Aug 25 04:01:01 2025 GMT
Subject: CN=aa2e45e89f1dc02936d86ce446f8dd95400d40e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ee:bf:8e:cc:ca:0d:88:84:41:22:7d:b7:f5:
af:9e:9f:ff:72:94:27:4d:31:a5:2d:f5:00:dd:f6:
05:04:e2:7f:26:b6:2b:f7:12:b5:7d:bf:2e:43:76:
32:af:a5:cd:19:af:c0:f1:02:fa:ec:3b:df:f9:a6:
68:9d:25:23:fd:4d:ac:63:f8:c4:1f:b9:e5:5a:c7:
e0:4b:8d:e3:8f:c7:d3:5d:f4:3d:dc:66:e5:82:dc:
1f:2b:f9:0a:82:b5:d0:da:f6:db:7c:06:7d:4e:26:
5e:3a:87:04:bd:98:0a:be:72:75:5c:62:da:c5:fc:
a7:ba:13:35:b2:d3:c9:d2:87:f7:e4:c9:d2:bb:63:
77:17:47:95:0e:fd:84:4f:4e:05:0a:46:8a:e0:71:
71:62:f5:07:12:7f:fc:a6:3c:5c:2f:99:ab:87:a6:
10:4a:03:89:61:12:a6:a4:de:39:be:f6:dd:59:28:
09:67:4e:17:6f:6f:5e:de:21:02:41:63:ca:80:af:
af:b5:dc:a3:04:d3:85:07:7a:2a:01:8c:c6:81:3e:
29:bc:23:be:5c:ec:7a:55:fa:ff:c7:7e:03:ba:fc:
4c:e5:3b:33:5b:fc:ac:f4:f6:80:8f:c3:4c:84:f0:
f3:0b:bb:b8:fa:e1:76:ee:22:36:42:33:42:b3:88:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2E:45:E8:9F:1D:C0:29:36:D8:6C:E4:46:F8:DD:95:40:0D:40:E5
X509v3 Authority Key Identifier:
keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:54:1f:03:fb:64:f7:de:a2:40:66:5c:72:64:eb:61:fa:b4:
ab:5d:fe:ec:77:44:b6:f8:7a:19:83:08:8f:59:72:3e:a6:8b:
77:93:cb:3b:0e:46:37:3c:cd:9a:96:e5:3e:e2:5c:7e:e3:53:
a7:8a:e6:9d:9d:ac:3a:2b:5a:83:5f:73:48:38:05:cf:59:21:
3d:54:b0:e3:86:d7:b5:b0:2f:6f:05:96:70:7f:d6:56:45:c1:
38:a3:c6:df:4e:0b:07:ed:57:b6:96:ba:f1:81:29:23:86:2b:
65:a2:36:b4:9b:19:70:a3:0d:17:ad:55:92:9e:c3:2b:c3:3b:
d9:ec:69:66:1c:d1:41:96:cc:e4:5b:37:f9:4a:f4:5f:01:ec:
c0:4d:9c:ac:94:65:b4:af:38:79:0e:97:95:b0:6c:2a:37:e5:
e7:9a:9d:91:15:8c:a6:8e:21:65:5b:41:b4:58:1f:ea:30:36:
c7:ef:ca:d5:d9:8f:95:83:65:e5:28:a2:4d:7b:ff:fd:95:43:
6f:5c:89:f2:2e:47:b0:2e:92:39:9a:74:38:a7:61:2f:98:92:
fa:b8:e2:95:23:49:b5:67:9f:1f:aa:ab:5c:f0:e7:1c:d6:1b:
4c:7d:f0:47:54:dc:0b:75:e1:2a:31:e6:8c:f0:05:d4:44:f8:
c1:a1:35:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjaPJoXP437e4kr2TW+mqHnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNWRjNzMyY2EyODM0OTczNTQ3Yzc4MGUxYzNhNWFiNDc4
MDViZTAwHhcNMjUwODI0MDQwMTAxWhcNMjUwODI1MDQwMTAxWjAzMTEwLwYDVQQD
EyhhYTJlNDVlODlmMWRjMDI5MzZkODZjZTQ0NmY4ZGQ5NTQwMGQ0MGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7u6/jszKDYiEQSJ9t/Wvnp//cpQn
TTGlLfUA3fYFBOJ/JrYr9xK1fb8uQ3Yyr6XNGa/A8QL67Dvf+aZonSUj/U2sY/jE
H7nlWsfgS43jj8fTXfQ93GblgtwfK/kKgrXQ2vbbfAZ9TiZeOocEvZgKvnJ1XGLa
xfynuhM1stPJ0of35MnSu2N3F0eVDv2ET04FCkaK4HFxYvUHEn/8pjxcL5mrh6YQ
SgOJYRKmpN45vvbdWSgJZ04Xb29e3iECQWPKgK+vtdyjBNOFB3oqAYzGgT4pvCO+
XOx6Vfr/x34DuvxM5TszW/ys9PaAj8NMhPDzC7u4+uF27iI2QjNCs4h3RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKouReifHcApNths5Eb43ZVADUDlMB8GA1UdIwQY
MBaAFI5dxzLKKDSXNUfHgOHDpatHgFvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamwzSE1zb29OSmMxUjhlQTRjT2xxMGVBVy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy82ZWYxNDYtZGFjNi00ZWE1LWJlNTgt
NGVlNjlhNzc3YmJlLzEvamwzSE1zb29OSmMxUjhlQTRjT2xxMGVBVy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy82ZWYxNDYtZGFjNi00ZWE1LWJlNTgtNGVlNjlhNzc3YmJl
LzEvamwzSE1zb29OSmMxUjhlQTRjT2xxMGVBVy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVQfA/tk
996iQGZccmTrYfq0q13+7HdEtvh6GYMIj1lyPqaLd5PLOw5GNzzNmpblPuJcfuNT
p4rmnZ2sOitag19zSDgFz1khPVSw44bXtbAvbwWWcH/WVkXBOKPG304LB+1Xtpa6
8YEpI4YrZaI2tJsZcKMNF61Vkp7DK8M72expZhzRQZbM5Fs3+Ur0XwHswE2crJRl
tK84eQ6XlbBsKjfl55qdkRWMpo4hZVtBtFgf6jA2x+/K1dmPlYNl5SiiTXv//ZVD
b1yJ8i5HsC6SOZp0OKdhL5iS+rjilSNJtWefH6qrXPDnHNYbTH3wR1TcC3XhKjHm
jPAF1ET4waE1Jw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 06:23:11 2025 by rpki-client