Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
File: JmXBf6AosxNI9jD2tW30Is4GKzs.mft (raw, json)
Hash identifier: PAVLeoGzI8iKU8IPwaJe0B6dEB+H+hrSrYvVOeLdRZM=
Subject key identifier: 1A:0C:AA:2C:7D:C4:CC:41:DE:48:23:31:EF:15:D5:48:96:CD:FF:8D
Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b
Certificate serial: 0199FD33FAAF1F2FF31B94F3FE266D82CEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
Manifest number: 16F0
Signing time: Sun 19 Oct 2025 16:01:06 +0000
Manifest this update: Sun 19 Oct 2025 16:01:06 +0000
Manifest next update: Mon 20 Oct 2025 16:01:06 +0000
Files and hashes: 1: 18w4n4c0cDQGOifCmmXS0bSE8_s.roa (hash: SIMK8PNO0s5rEeFGwVzs3xf4SYDZZHqpyYYANgJ+BE4=)
2: 3wC-OciCt04ukeFsX_DGsgpf9AE.roa (hash: bZfkvdvVf2EYkOsS8DEoS5ka6iYbsgornKhCNCFAAXk=)
3: JmXBf6AosxNI9jD2tW30Is4GKzs.crl (hash: DL4+ph92JfROn7L+Gzs+tRiVBubiC9n2BwlvuvdBmf4=)
4: wV9umEm47GUIRnHnVoDY5WzbsVU.roa (hash: PpWajWHFJexj7DjwV0RD1qLjLbRc4jVQSVNbZE4K1PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:fa:af:1f:2f:f3:1b:94:f3:fe:26:6d:82:ce:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b
Validity
Not Before: Oct 19 16:01:06 2025 GMT
Not After : Oct 20 16:01:06 2025 GMT
Subject: CN=1a0caa2c7dc4cc41de482331ef15d54896cdff8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:c2:77:5a:5e:4a:eb:84:d1:a5:54:3e:4c:
4f:82:3d:27:a9:44:32:23:b0:a0:b2:0a:a3:b4:1a:
72:57:29:10:a0:10:6c:2c:78:86:11:a6:da:a9:af:
5c:1c:5c:a4:39:81:73:ee:b7:0f:90:72:60:a9:20:
90:52:bb:e5:89:d0:88:0a:c9:8e:cf:15:fd:ed:05:
10:6a:57:d2:48:5b:e3:7a:85:ce:41:f5:80:a8:88:
2b:71:d8:94:2e:04:86:b7:53:27:74:bb:4f:d8:d7:
fd:ba:1c:cc:cc:73:64:80:cb:ee:af:95:69:70:11:
e1:9a:0e:cf:06:c9:5e:7e:2a:4a:8a:de:2f:6c:74:
0e:b9:c2:25:96:d0:d9:db:32:ec:d3:c7:47:53:ec:
8d:96:11:70:74:7f:57:ee:58:7d:07:d8:bc:a1:b3:
00:d5:08:7b:44:d8:16:b0:00:4e:7c:77:a2:08:4b:
b4:6d:e2:13:30:ac:7f:ca:4c:bc:87:5c:e1:9c:a6:
74:5b:cc:5f:39:f5:de:b4:ec:82:cc:f5:e2:93:8c:
49:82:c2:08:65:46:98:df:66:f1:8b:5e:17:13:a9:
55:d4:3a:53:5c:38:f7:2a:72:76:70:63:48:48:3b:
f4:bf:e8:02:02:58:a0:0c:74:0c:06:e8:bf:7e:e8:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0C:AA:2C:7D:C4:CC:41:DE:48:23:31:EF:15:D5:48:96:CD:FF:8D
X509v3 Authority Key Identifier:
keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2a:dd:c3:ef:5a:79:95:ac:e5:21:bc:7d:95:91:bc:c2:6e:
41:c6:8f:90:53:10:19:7b:d2:01:bc:b0:c7:d0:07:fd:fa:6e:
2d:b0:29:f8:0a:4e:d2:ba:41:b9:7c:87:71:5a:47:81:03:3e:
30:6a:8a:d6:1d:0c:9f:8d:09:2a:a3:f1:50:6f:fc:12:28:b7:
2f:82:4e:1b:b8:6d:00:9f:98:c2:77:c3:e4:e6:e1:31:52:eb:
08:70:35:36:51:57:e9:04:69:99:73:0c:f9:44:fe:88:95:22:
04:ca:d3:a1:c6:1c:8e:ec:f5:4f:70:9a:5d:83:3d:e3:64:8f:
4b:c4:87:57:19:dd:3d:7d:32:07:43:2c:ac:30:41:59:88:8c:
76:a5:e1:2b:2d:fc:bf:90:a4:24:4e:c2:fb:43:e7:fe:1f:1d:
94:f2:17:6e:a0:17:0a:f7:88:95:9e:82:2e:12:97:e1:06:1a:
d0:1f:9b:7c:ad:ba:95:91:60:a2:9b:a2:9e:9f:29:ed:db:5f:
d7:a7:35:e1:72:3e:6a:b4:96:21:d4:c4:f7:da:2d:36:2d:3d:
19:64:f2:9a:6e:03:af:1e:74:42:07:fb:42:0a:08:d1:d8:4a:
13:2e:b0:13:5d:1a:9d:54:9b:a9:5f:ae:52:6d:7c:2d:5e:e9:
74:92:f5:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M/qvHy/zG5Tz/iZtgs7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjVjMTdmYTAyOGIzMTM0OGY2MzBmNmI1NmRmNDIyY2Uw
NjJiM2IwHhcNMjUxMDE5MTYwMTA2WhcNMjUxMDIwMTYwMTA2WjAzMTEwLwYDVQQD
EygxYTBjYWEyYzdkYzRjYzQxZGU0ODIzMzFlZjE1ZDU0ODk2Y2RmZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pLCd1peSuuE0aVUPkxPgj0nqUQy
I7CgsgqjtBpyVykQoBBsLHiGEabaqa9cHFykOYFz7rcPkHJgqSCQUrvlidCICsmO
zxX97QUQalfSSFvjeoXOQfWAqIgrcdiULgSGt1MndLtP2Nf9uhzMzHNkgMvur5Vp
cBHhmg7PBslefipKit4vbHQOucIlltDZ2zLs08dHU+yNlhFwdH9X7lh9B9i8obMA
1Qh7RNgWsABOfHeiCEu0beITMKx/yky8h1zhnKZ0W8xfOfXetOyCzPXik4xJgsII
ZUaY32bxi14XE6lV1DpTXDj3KnJ2cGNISDv0v+gCAligDHQMBui/fugblQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoMqix9xMxB3kgjMe8V1UiWzf+NMB8GA1UdIwQY
MBaAFCZlwX+gKLMTSPYw9rVt9CLOBis7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1YQmY2QW9zeE5JOWpEMnRXMzBJczRHS3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mYzkwYTAtODA0Yy00MGZhLWIyN2Et
YzM4M2E5MDEwMDA1LzEvSm1YQmY2QW9zeE5JOWpEMnRXMzBJczRHS3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mYzkwYTAtODA0Yy00MGZhLWIyN2EtYzM4M2E5MDEwMDA1
LzEvSm1YQmY2QW9zeE5JOWpEMnRXMzBJczRHS3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCrdw+9a
eZWs5SG8fZWRvMJuQcaPkFMQGXvSAbywx9AH/fpuLbAp+ApO0rpBuXyHcVpHgQM+
MGqK1h0Mn40JKqPxUG/8Eii3L4JOG7htAJ+YwnfD5ObhMVLrCHA1NlFX6QRpmXMM
+UT+iJUiBMrTocYcjuz1T3CaXYM942SPS8SHVxndPX0yB0MsrDBBWYiMdqXhKy38
v5CkJE7C+0Pn/h8dlPIXbqAXCveIlZ6CLhKX4QYa0B+bfK26lZFgopuinp8p7dtf
16c14XI+arSWIdTE99otNi09GWTymm4Drx50Qgf7QgoI0dhKEy6wE10anVSbqV+u
Um18LV7pdJL14g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:14 2025 by rpki-client