Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: TatWxbwfobv/P1n4+yW6bCBe16jv7Evi9X/v3kajhic=
Subject key identifier: 70:C3:C3:22:58:D0:07:F9:1E:03:C7:5F:F1:98:59:FF:FF:FD:85:01
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 0199FC2174C3F87A5AC76C2F576E68350474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: vmcPpPyCecCjgYOKQCbfJ5TCSrmmtUubmSHyHfjo9mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:74:c3:f8:7a:5a:c7:6c:2f:57:6e:68:35:04:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=70c3c32258d007f91e03c75ff19859fffffd8501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:d5:8c:00:c5:43:31:f7:3b:18:f9:44:75:
d4:05:78:e2:50:72:93:23:28:2c:ef:3c:0a:b6:00:
aa:96:f3:c1:6f:56:e4:82:a3:e2:59:88:2f:a9:58:
70:49:11:98:96:98:2e:e7:0b:b6:00:4b:b1:4c:c4:
15:8f:27:bb:83:5f:a4:41:61:91:d6:f9:e4:bb:c3:
05:52:cb:03:77:b0:46:01:ee:e7:92:b3:e9:05:4b:
2e:61:c1:68:cf:9a:0e:5a:af:e2:06:f7:ef:e6:3f:
e9:80:09:3f:c8:65:da:9c:30:54:a6:8b:c4:77:71:
a8:7c:9e:25:88:00:33:e5:cc:41:82:e7:5f:70:1d:
27:77:84:c9:6e:a6:b8:38:a4:88:2a:12:28:89:2a:
42:64:cc:7b:cb:0d:e6:3d:32:9a:56:99:58:f1:33:
6a:51:17:e5:a3:30:a7:46:70:94:f2:34:43:2f:e4:
0b:3e:0d:66:65:91:f7:c3:66:53:08:4b:eb:fc:f9:
ed:90:54:37:a4:8f:e2:79:f2:08:4e:09:de:2d:63:
43:69:04:83:ab:d7:5e:f5:c1:af:db:b8:4d:40:d2:
07:a4:5f:67:2b:46:27:20:50:6c:84:1f:a9:ea:65:
0f:bd:59:de:75:72:5d:a7:66:41:57:8c:ee:89:03:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C3:C3:22:58:D0:07:F9:1E:03:C7:5F:F1:98:59:FF:FF:FD:85:01
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a8:a6:71:16:ae:4c:5d:44:ba:b2:e9:ce:ab:54:e0:95:08:
b6:81:0d:65:53:cb:ef:d9:70:e6:ad:12:54:4c:88:65:56:1f:
47:61:1e:38:b6:d2:63:a1:19:69:6e:18:4a:5c:e7:f0:85:b7:
43:72:7b:72:80:4c:6e:2a:9a:d7:31:6e:30:ad:50:21:bd:53:
84:8a:35:e4:c2:a6:f1:1c:20:b1:0b:2e:6e:58:7d:de:d6:ec:
ca:95:22:e5:97:fe:54:e3:df:d0:83:36:1a:5a:48:71:d1:ec:
1e:48:60:57:33:b7:46:25:98:19:28:a4:0c:c4:ad:6a:64:57:
dc:7e:e1:91:e3:10:4b:34:93:55:a4:8f:56:80:17:17:76:e0:
d6:87:5d:e2:76:42:93:e5:0d:3c:1f:34:68:71:33:0a:55:1d:
4d:93:8d:0b:89:01:10:f6:8b:c1:5e:e6:92:6a:b1:f3:eb:81:
aa:86:2b:f2:b1:c4:42:ad:70:6d:55:57:f9:9f:9a:86:08:ef:
30:d0:24:86:9d:c9:bf:df:6b:8e:00:5f:59:fe:17:85:ee:6f:
86:07:44:d5:09:ed:ba:e1:80:d7:2e:68:03:f8:12:b6:97:34:
d2:5a:44:a3:c2:e9:ae:48:b7:8f:ef:27:8c:1a:6b:dd:a5:5b:
0a:af:93:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:25 2025 by rpki-client