Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier: ZagN7/NlLZd4bRm4AUqvj2a14UsHpxOSQYta7RC1ouA=
Subject key identifier: DF:48:5F:E7:8C:26:CC:F0:1C:7C:5F:EB:EA:96:FA:DA:D3:6C:E0:43
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 0199FC8F2CC762401D5DBAA2A9BB984687AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number: 141C
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: sSB78McGfBohjNkRHcYxRWhwdCG99MhGguXuoYL42oc=)
2: xEsnJciiBq0cpARjJTgBj_Gwb0g.roa (hash: rNWLcgQzhcKlCZHWn2PfxjHWg6/hf63VmYuH/DFdDPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2c:c7:62:40:1d:5d:ba:a2:a9:bb:98:46:87:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=df485fe78c26ccf01c7c5febea96fadad36ce043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:e5:a7:49:89:6c:ea:b9:a3:ad:f5:14:40:
af:53:d6:79:ff:bf:9f:c3:59:bf:ec:63:7e:04:32:
ed:0d:5a:38:6b:46:94:28:c4:b8:68:d7:fb:13:a0:
1d:64:7e:33:b8:69:55:20:6f:82:89:89:16:13:ff:
4f:96:cc:38:a7:8f:d4:00:e6:b7:53:e8:dc:8c:76:
f3:81:5c:df:9b:ef:6a:5a:a8:40:74:7d:d8:f2:fb:
25:23:2c:44:96:b9:5e:d5:df:23:c8:17:6a:a7:7f:
7a:18:c1:d5:a3:77:ff:fe:94:12:c2:81:f2:45:36:
26:c5:35:47:1e:32:da:e5:3f:5c:74:2a:aa:b4:2e:
45:8f:a5:b0:91:99:34:aa:f9:c5:a9:c8:56:d9:03:
b8:1c:4f:53:ef:97:f2:0f:4a:9d:2f:69:6a:61:1c:
66:25:17:77:10:74:45:6f:59:05:96:7a:7a:18:53:
9f:65:cb:6d:f7:4a:9a:48:24:09:9e:0e:97:92:45:
3c:5f:46:40:9f:00:a0:fd:7c:be:2d:af:24:5e:34:
b2:f7:20:34:5d:78:08:a5:63:99:ce:21:42:51:ef:
6c:46:e3:5f:c3:d7:db:bf:cf:41:38:ed:cf:02:ff:
0d:0f:56:24:01:1e:94:a7:42:56:cd:ec:ad:c4:93:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:48:5F:E7:8C:26:CC:F0:1C:7C:5F:EB:EA:96:FA:DA:D3:6C:E0:43
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1c:53:d8:b7:11:61:e4:88:d8:ef:6c:ca:1e:90:a8:33:c7:
45:b5:3f:fc:7a:ac:ab:f0:9d:9a:f7:e3:dc:7a:6b:11:2c:35:
59:dc:d4:88:dc:8f:7c:4c:05:50:e6:79:2d:a7:f9:53:84:a4:
87:a3:cd:12:67:91:9a:c0:00:24:91:64:93:c5:43:00:ba:e0:
dc:f1:f8:1d:b4:08:44:af:af:82:a4:b9:04:f5:93:ec:05:c5:
5d:ac:21:1b:8e:b2:1f:bd:32:b2:f8:30:2c:07:c6:4c:ee:aa:
4f:33:ce:8b:d0:6f:ad:82:ed:fd:c6:57:45:6d:a1:d1:e2:d0:
68:6d:e1:77:5f:08:65:a1:9a:4b:61:e9:8a:f8:ca:28:9f:9d:
41:14:45:01:38:ed:58:f6:c1:ed:46:26:9f:89:91:6f:34:c5:
6d:2c:d2:7d:12:b7:d7:d9:62:b5:e3:fe:57:65:bb:5e:13:02:
ba:a0:ae:22:4c:5f:5e:70:c4:52:34:4c:13:61:32:e0:d2:6e:
45:16:a1:36:37:02:4b:40:a0:b3:cc:b1:80:ae:9e:19:d4:89:
93:a2:cd:fe:11:3a:06:98:f6:76:b5:71:c9:6a:d0:5c:c8:10:
d5:1c:2e:fe:c4:74:ff:a2:48:59:14:17:94:c1:5c:c1:6e:b1:
de:ae:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:19:57 2025 by rpki-client