Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: IlVSB3ny0ToDY3kkPCzLU1BSmJqBffAW3DAcFH2Ll2s=
Subject key identifier: 9B:DC:17:51:4A:A9:66:0D:D9:2E:6A:77:07:28:6D:73:9F:F8:D5:88
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 0199FCC60B78562B4D125F527BCF54216105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 129D
Signing time: Sun 19 Oct 2025 14:01:01 +0000
Manifest this update: Sun 19 Oct 2025 14:01:01 +0000
Manifest next update: Mon 20 Oct 2025 14:01:01 +0000
Files and hashes: 1: 1HlDDcU_awP0Jg600b5QOV5zFyw.roa (hash: DII6lgfGgmt/XXzdShUFtsjKk90R+1ZgqPhGOseU9bY=)
2: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: 9QSpyzsm8C6tl5dbdIkoNagX0OWBE2OOhtEMyq1jUE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:0b:78:56:2b:4d:12:5f:52:7b:cf:54:21:61:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Oct 19 14:01:01 2025 GMT
Not After : Oct 20 14:01:01 2025 GMT
Subject: CN=9bdc17514aa9660dd92e6a7707286d739ff8d588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:07:21:b9:d3:67:b7:ec:76:6a:7b:05:3b:
6a:b8:95:32:48:ac:05:74:85:73:ef:f9:8a:81:af:
e9:f7:33:60:d1:57:9f:96:0c:ed:bd:ad:db:e1:8c:
e2:05:cc:9b:d0:71:52:88:44:34:a7:83:7a:09:07:
bc:e6:b4:bc:ab:83:5c:2e:63:4d:78:9c:ac:fb:bf:
44:da:a4:bf:32:8e:32:53:54:0a:a0:ff:da:78:4b:
30:f9:7f:cf:f0:94:85:98:c7:6c:79:a8:17:90:77:
d5:e4:43:14:bf:96:03:75:43:97:21:9d:d9:8f:67:
b6:d5:4e:5c:43:b8:61:fb:b9:64:2c:22:b1:f9:d7:
2f:0a:65:0a:b5:2f:01:3a:c5:6d:ae:ab:1a:1b:1b:
99:71:95:07:7f:d4:75:9d:b0:ad:87:d2:79:cf:7f:
81:cc:eb:eb:cc:80:d7:d3:51:35:62:2b:ee:64:c5:
fd:d2:87:31:a3:3a:d9:9e:8c:33:62:d4:be:ac:b9:
92:45:75:3f:13:e8:e6:d1:24:1a:0f:c9:c9:78:52:
02:31:65:c5:85:40:b3:e9:01:1e:5b:f8:c2:1c:8d:
65:bc:75:67:5b:24:c5:61:e4:1f:12:77:d0:ac:f6:
a3:cc:99:b5:ca:19:c1:9e:5d:fc:8d:54:88:4f:12:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DC:17:51:4A:A9:66:0D:D9:2E:6A:77:07:28:6D:73:9F:F8:D5:88
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:46:ae:f2:9a:53:11:40:4a:ba:b2:51:c1:d2:7b:42:31:19:
a8:af:98:11:c2:de:21:dc:7c:c0:b6:6c:d2:e7:cc:bd:3f:ee:
b5:ed:96:33:0f:c3:59:0e:8b:80:db:3e:26:8d:47:07:cc:dc:
53:a4:d2:9c:a8:ae:50:ac:2d:ff:b1:6a:04:07:e7:db:a1:24:
56:a6:b2:a9:e7:20:42:30:b4:6c:2d:d6:e9:b3:33:fc:e7:37:
0f:8d:4f:60:89:b2:81:d1:76:97:1c:20:82:87:95:c6:ae:cd:
02:c4:a0:da:46:24:fd:a4:b5:2b:98:36:ea:2c:28:eb:c0:5b:
ad:16:22:0d:29:c6:50:b1:a7:6b:06:12:e9:45:21:6a:71:b3:
ab:ea:29:91:7d:7f:ef:d5:7a:e5:ab:52:ad:08:f1:f6:49:0a:
2f:13:8b:8a:5c:37:0e:cd:cc:5a:9a:d4:d9:f1:68:98:1a:b9:
2a:ca:c1:54:09:88:81:61:98:9e:d7:a6:2d:b9:da:31:69:e5:
41:93:fb:f3:cf:b6:46:36:c6:40:8b:f3:b7:8c:a3:be:75:27:
e5:87:d2:22:7e:dd:cf:17:87:f4:d7:d1:ff:15:04:1f:bd:84:
c3:48:55:96:a0:ec:ba:52:f7:52:a0:69:9a:68:16:c3:d3:4f:
73:df:9a:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xgt4VitNEl9Se89UIWEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTk4YjYxMjVmNTI0M2UzZWQ4MzUwMTU5NjdjZGRiOTcx
NDhkZjEwHhcNMjUxMDE5MTQwMTAxWhcNMjUxMDIwMTQwMTAxWjAzMTEwLwYDVQQD
Eyg5YmRjMTc1MTRhYTk2NjBkZDkyZTZhNzcwNzI4NmQ3MzlmZjhkNTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF4HIbnTZ7fsdmp7BTtquJUySKwF
dIVz7/mKga/p9zNg0Veflgztva3b4YziBcyb0HFSiEQ0p4N6CQe85rS8q4NcLmNN
eJys+79E2qS/Mo4yU1QKoP/aeEsw+X/P8JSFmMdseagXkHfV5EMUv5YDdUOXIZ3Z
j2e21U5cQ7hh+7lkLCKx+dcvCmUKtS8BOsVtrqsaGxuZcZUHf9R1nbCth9J5z3+B
zOvrzIDX01E1YivuZMX90ocxozrZnowzYtS+rLmSRXU/E+jm0SQaD8nJeFICMWXF
hUCz6QEeW/jCHI1lvHVnWyTFYeQfEnfQrPajzJm1yhnBnl38jVSITxJJeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvcF1FKqWYN2S5qdwcobXOf+NWIMB8GA1UdIwQY
MBaAFCapi2El9SQ+Ptg1AVlnzduXFI3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZGJmYjAtZjkxNC00MGQzLWIyZTIt
YjkxM2U1OTY3MDdlLzEvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iZGJmYjAtZjkxNC00MGQzLWIyZTItYjkxM2U1OTY3MDdl
LzEvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkau8ppT
EUBKurJRwdJ7QjEZqK+YEcLeIdx8wLZs0ufMvT/ute2WMw/DWQ6LgNs+Jo1HB8zc
U6TSnKiuUKwt/7FqBAfn26EkVqayqecgQjC0bC3W6bMz/Oc3D41PYImygdF2lxwg
goeVxq7NAsSg2kYk/aS1K5g26iwo68BbrRYiDSnGULGnawYS6UUhanGzq+opkX1/
79V65atSrQjx9kkKLxOLilw3Ds3MWprU2fFomBq5KsrBVAmIgWGYntemLbnaMWnl
QZP788+2RjbGQIvzt4yjvnUn5YfSIn7dzxeH9NfR/xUEH72Ew0hVlqDsulL3UqBp
mmgWw9NPc9+aKw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:26 2025 by rpki-client