Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: grOelP/VNNFPO3qEEUF4gfMcU/TE5O7Nf3mxudWS1wI=
Subject key identifier: F2:43:0D:62:8D:9D:3F:A0:01:71:DE:1D:49:FC:15:4E:8D:BD:66:CA
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 0197CACCBC0649696D1F1093738713DCF83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 15BE
Signing time: Wed 02 Jul 2025 11:01:44 +0000
Manifest this update: Wed 02 Jul 2025 11:01:44 +0000
Manifest next update: Thu 03 Jul 2025 11:01:44 +0000
Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: 7wT8CLIwIarcOEV3iqO3xV6MSKrqYLr8ulVjFA2iUNs=)
2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:bc:06:49:69:6d:1f:10:93:73:87:13:dc:f8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Jul 2 11:01:44 2025 GMT
Not After : Jul 3 11:01:44 2025 GMT
Subject: CN=f2430d628d9d3fa00171de1d49fc154e8dbd66ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:02:44:9a:0a:d2:9e:00:ce:0f:3a:f9:43:
ba:27:89:b0:ad:67:ee:b0:4a:f6:24:90:41:0f:ad:
98:dd:2b:59:d7:48:da:47:96:2a:2d:25:b0:0c:14:
a4:3a:73:e3:c2:00:ba:28:25:72:06:f9:bc:5b:de:
a3:fc:45:9d:52:54:3c:57:f5:77:2f:3d:1a:75:b7:
2e:30:2c:8e:55:cd:05:6d:72:51:3e:52:ce:cf:f3:
d9:da:5e:0d:df:24:b0:25:b5:b3:78:4d:d4:34:0b:
6d:7b:bc:fc:6a:d6:0f:39:44:3c:50:aa:ac:d0:4b:
78:85:f7:25:5a:17:a5:7c:c9:7b:d0:dc:7e:06:4a:
23:d2:d2:b5:23:8a:57:ff:d3:2e:5c:85:88:59:4c:
ce:42:39:cb:29:7c:33:77:47:70:ac:11:6a:36:ba:
1f:71:46:ea:11:7a:95:58:a7:82:be:a5:63:b5:b3:
61:a6:69:4b:e6:cf:f5:8e:e5:af:c6:6a:e5:17:3a:
e4:56:de:75:b9:03:a4:dd:41:8b:b2:7a:03:7d:0e:
92:3a:f1:28:1c:37:af:85:de:01:6c:52:a2:71:e3:
dc:15:01:53:89:f4:cd:06:38:39:7e:fd:33:2c:a0:
54:bb:26:29:aa:d3:5d:cd:d8:d3:aa:79:7e:2c:5e:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:43:0D:62:8D:9D:3F:A0:01:71:DE:1D:49:FC:15:4E:8D:BD:66:CA
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f0:91:1d:fb:5c:3a:e2:41:19:81:c3:8b:d5:23:49:ad:5f:
04:c0:45:b0:ab:57:a4:46:ec:86:4b:18:8e:bf:fc:59:19:45:
02:55:02:44:19:1c:5d:5b:ed:ce:2b:b1:2c:d7:77:65:a6:8a:
e9:01:48:88:10:b0:a2:d9:6a:75:8c:a1:75:ba:80:89:63:ec:
a8:dc:a4:63:7e:3c:5d:6f:7c:b5:01:78:69:5e:35:c5:53:e3:
9f:b1:c5:24:c3:3a:84:e5:07:d9:50:d2:65:f2:2e:8e:08:b8:
a7:43:81:3d:d0:bf:fd:86:42:7e:0c:1e:77:1b:33:38:53:c2:
0c:f5:ee:82:55:07:3f:04:d2:00:f3:d4:b3:d9:00:05:f0:fc:
82:9e:51:f7:b9:7e:e4:ed:a9:97:a5:04:c5:aa:0c:d4:96:f7:
b5:26:b1:f6:04:f5:b1:1c:b4:02:1a:38:48:9d:ca:5f:d9:55:
03:3a:93:4f:53:b9:cf:f3:44:cf:7d:3f:a9:a7:25:c4:2d:3b:
b5:fd:77:6d:1a:c9:1c:97:c0:4c:25:49:b1:f0:2b:c7:f2:a8:
63:e8:08:72:2e:68:49:e8:e4:3a:af:80:57:e8:39:c2:22:9f:
fa:de:73:c5:70:1a:2e:b0:ba:03:4d:08:73:5b:fd:aa:bc:f1:
07:58:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:02:23 2025 by rpki-client