Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
File: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft (raw, json)
Hash identifier: le1fyzsrJDIS5jZYlomV+MUA16wzsij0nmu2IuThy2M=
Subject key identifier: 91:60:3C:10:AE:FB:37:F4:E3:60:83:E3:B5:03:B0:B9:5E:01:EE:63
Authority key identifier: 27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F
Certificate issuer: /CN=27032f79023052100c4393c9e690f97d7896926f
Certificate serial: 0199FBEACC959626EED15152F101A875A26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
Manifest number: 16D9
Signing time: Sun 19 Oct 2025 10:01:32 +0000
Manifest this update: Sun 19 Oct 2025 10:01:32 +0000
Manifest next update: Mon 20 Oct 2025 10:01:32 +0000
Files and hashes: 1: 0CjJkWjNBNTUeoDrNQPuYSnwMLQ.roa (hash: rMAMLQ6zW01Wu80wVa2CdSK+UNAIR1vD+Et52F6+MjE=)
2: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl (hash: utoxiyBWK1zhKUX+5DZZC37yaqa/SEUrTryzQToMt+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:cc:95:96:26:ee:d1:51:52:f1:01:a8:75:a2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27032f79023052100c4393c9e690f97d7896926f
Validity
Not Before: Oct 19 10:01:32 2025 GMT
Not After : Oct 20 10:01:32 2025 GMT
Subject: CN=91603c10aefb37f4e36083e3b503b0b95e01ee63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:80:88:8c:9f:2c:f6:9f:2e:df:e1:6f:26:
f5:a8:94:08:fe:7b:42:ac:9f:07:08:44:87:dd:84:
36:ad:99:4a:42:9f:88:91:97:62:c7:96:5c:99:99:
45:2d:fc:e0:3a:70:c4:99:80:c5:10:60:6d:61:a2:
41:3e:11:5b:cb:eb:86:8f:6a:e7:e6:23:dc:b9:ec:
41:ae:9e:89:32:69:a4:0e:42:6b:7c:70:3f:69:f3:
e4:83:6f:c0:5a:d7:dc:8e:ff:f4:26:f2:c2:39:4d:
82:7d:be:43:fa:22:e6:cb:e9:fa:df:56:90:c3:62:
e9:db:ad:b6:ae:da:53:d4:0c:30:c7:bd:24:e5:6e:
97:ef:60:44:a9:19:55:78:52:9f:c4:37:96:58:3d:
f6:ee:c3:0e:75:d1:3e:e1:c1:04:1f:7e:6f:f3:c9:
a4:f0:14:19:01:b9:79:fa:a1:3a:44:8e:34:8c:b9:
d3:07:d1:93:4b:2b:d5:c5:ed:89:98:39:33:c4:36:
c1:52:89:2b:03:e8:d3:29:f5:76:7b:dc:13:a7:0d:
ff:aa:de:7e:d5:f1:ec:71:f5:ca:ae:95:6e:c3:04:
c0:4f:75:ca:58:d4:65:64:06:7f:16:ff:7c:cd:18:
90:2f:38:28:a5:0a:d1:6a:99:1d:5a:70:3e:62:0c:
94:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:60:3C:10:AE:FB:37:F4:E3:60:83:E3:B5:03:B0:B9:5E:01:EE:63
X509v3 Authority Key Identifier:
keyid:27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4d:96:f7:f1:3e:43:44:41:a6:4a:dd:7d:ab:a1:87:a8:c9:
b0:d1:00:f4:6f:a9:ca:78:0e:6f:aa:76:16:69:90:f6:2d:c9:
8a:8d:1c:d0:6a:83:42:c7:86:41:e4:03:bd:ab:61:6d:ea:f3:
84:18:66:f2:05:bc:f5:f8:60:93:4c:68:a1:ab:06:18:2e:3a:
59:30:85:9f:ff:dc:5d:5f:b8:d8:c8:a0:46:2c:6c:98:3a:19:
f8:3c:8d:05:6c:11:d3:15:a4:17:8f:6e:6b:54:ff:15:3d:02:
8c:b9:d0:2f:29:c1:de:05:4e:67:84:cc:0f:93:f6:51:6f:a9:
c1:11:3d:fd:26:59:1a:6a:3d:e2:6a:c9:36:73:01:9e:99:fa:
ec:65:b8:dc:52:d0:15:ce:59:0d:ba:2e:14:92:3b:99:ec:f7:
7f:ac:ab:b4:aa:b4:0f:ac:c1:f7:b3:39:17:70:55:32:53:0b:
92:ae:60:22:a4:27:d6:d2:14:2f:70:63:c7:bf:70:a3:e7:68:
f6:4a:5a:fc:f9:f4:93:52:07:bc:e7:07:e2:5d:1b:61:e5:71:
64:df:90:e2:ff:15:e8:4a:74:42:67:88:c8:f8:c2:f7:87:c0:
8e:7b:bd:85:56:1b:4c:47:cf:8e:df:eb:b6:e0:e9:49:08:d4:
df:d8:76:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:29 2025 by rpki-client