Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File: jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier: 9jwEQg9laJC1rBo/d+aTeOQMQ+se2/V4TBhEePUi0Gk=
Subject key identifier: 7C:36:F0:41:E6:22:01:EE:1D:85:0A:D2:8B:1F:3A:DD:C3:98:65:15
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer: /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial: 0197B6A053563B4E8D6DDA65F4B66C6C6D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number: 0CC3
Signing time: Sat 28 Jun 2025 13:00:49 +0000
Manifest this update: Sat 28 Jun 2025 13:00:49 +0000
Manifest next update: Sun 29 Jun 2025 13:00:49 +0000
Files and hashes: 1: Qc5cmd1l4zemEHfozY81Dk5Vg5A.roa (hash: 1e50whpvJStdUj8bNZvYvbgVa0jYFa3BmNTPWax7Fi4=)
2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: mWvvo3NGXRslkNhEZeGqRoPOvmHImfR+VNuu+jx9/vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:53:56:3b:4e:8d:6d:da:65:f4:b6:6c:6c:6d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Validity
Not Before: Jun 28 13:00:49 2025 GMT
Not After : Jun 29 13:00:49 2025 GMT
Subject: CN=7c36f041e62201ee1d850ad28b1f3addc3986515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:05:66:d6:ee:e5:9f:c4:74:76:e8:63:e8:
6f:59:51:36:1e:b3:88:b2:c2:22:82:a7:9b:4e:ec:
c5:dc:5b:1f:a1:c4:95:9c:9b:22:a7:4d:42:89:c1:
1b:56:fb:33:7f:c1:4e:3c:02:26:ae:75:ce:fe:da:
af:67:2e:31:a0:e3:bd:d0:15:d0:b2:87:6a:b9:10:
f5:01:9a:58:de:69:6f:08:5f:12:ee:6a:26:58:93:
bd:67:32:5b:2f:21:7a:10:cf:3d:fc:8f:e8:b8:cf:
6e:c1:41:03:f3:01:f5:39:05:0e:eb:42:16:ef:37:
be:89:b9:10:29:18:8e:f8:13:71:63:55:b5:82:77:
52:1e:99:f3:8b:d7:5e:4d:3b:df:20:f0:d7:dd:a1:
59:30:c3:3d:f2:20:2d:0f:ff:1a:87:99:1b:f3:a2:
4f:7f:e3:a6:31:2b:e8:a6:6c:81:38:37:b1:1f:f9:
d3:31:59:cd:f4:43:c4:1b:bd:d7:ec:92:e9:db:75:
de:62:47:b9:25:34:e6:ef:72:05:60:cd:07:30:75:
b3:cf:28:c4:22:79:6a:26:1a:1c:7c:64:d1:6e:09:
6e:98:cf:14:06:49:97:ef:f4:23:94:51:0f:b0:88:
73:e7:09:fc:91:ec:11:95:9d:93:0e:f6:11:20:ce:
76:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:36:F0:41:E6:22:01:EE:1D:85:0A:D2:8B:1F:3A:DD:C3:98:65:15
X509v3 Authority Key Identifier:
keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8d:d7:d4:9b:fa:6c:68:3e:5e:1d:c5:8e:d6:c8:4c:ce:cd:
bc:49:b4:d5:fb:a4:a2:0d:9e:bb:a1:b3:c9:27:1d:83:8c:b0:
9d:13:40:20:15:a8:5c:a5:95:0b:ac:ea:dd:f4:ed:26:50:76:
03:33:43:61:6a:6a:b9:fc:a5:c5:20:7c:74:e2:27:9c:f3:88:
9a:6e:91:59:7f:8c:0d:5a:05:58:36:1c:d5:8f:0b:7d:a3:5f:
76:8f:31:b5:53:a9:41:47:5a:47:9f:c4:c8:e2:b1:c3:7c:6c:
7c:7f:69:58:43:71:73:6c:99:11:6c:3e:7f:c6:83:d7:7f:0f:
ed:21:ea:25:b5:cc:dd:c1:33:71:05:26:71:f3:4f:34:93:61:
5f:ee:ca:69:c2:8a:f6:d8:1c:fa:6b:bf:a1:8b:1c:3f:8c:38:
a0:ea:28:c2:93:e0:92:25:90:a6:91:95:a2:8e:7c:ad:4d:13:
51:82:e0:db:7f:e6:9d:47:43:db:93:c4:b7:d9:e5:11:7b:22:
97:d6:6c:a5:45:07:b7:a1:3b:eb:4a:96:da:1b:5d:3c:e4:85:
a8:16:77:7c:9c:52:96:4c:8f:6c:ac:e4:a7:90:40:2d:29:97:
40:cd:35:03:5b:49:72:94:ec:45:0a:2c:33:7e:6f:77:6b:0c:
18:4c:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:28 2025 by rpki-client