
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File: JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier: rnKBVDogRvgX+irm38furw+2z2aK9oUrbkpccLqEVCM=
Subject key identifier: 22:77:96:47:9D:37:03:D1:68:BC:6D:94:7B:13:57:CE:C1:93:0C:13
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer: /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial: 0199FB7C76E4A5D85436AAD49A2F834E4C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number: 0BD9
Signing time: Sun 19 Oct 2025 08:01:02 +0000
Manifest this update: Sun 19 Oct 2025 08:01:02 +0000
Manifest next update: Mon 20 Oct 2025 08:01:02 +0000
Files and hashes: 1: EGBRjPl07LC9IiSKlWfhoU-_Crk.roa (hash: bOSVTvIZ5LKS962rF/GAi5VGVNIMkbk2qTb5VU4uyO0=)
2: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: IedLYsPLRZ8vEwWd0xxYdBe9trp6hGs2ODqsf+UOD5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:76:e4:a5:d8:54:36:aa:d4:9a:2f:83:4e:4c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
Validity
Not Before: Oct 19 08:01:02 2025 GMT
Not After : Oct 20 08:01:02 2025 GMT
Subject: CN=227796479d3703d168bc6d947b1357cec1930c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:6c:b9:15:41:eb:49:0c:a6:41:37:6f:21:
f1:60:69:35:62:28:b8:fd:2b:b2:7f:85:67:fe:e1:
53:60:cb:15:60:9e:a2:85:2f:30:67:89:db:c5:7e:
88:c3:71:66:3b:33:91:58:37:d2:17:3e:64:5c:17:
e0:be:65:49:7e:43:65:af:62:22:fa:cc:d7:c7:89:
13:59:40:43:da:b3:70:c1:2d:0e:55:47:b9:d6:b6:
90:7c:c6:89:43:ac:0a:49:b3:22:b6:e3:01:44:d5:
2b:aa:30:cf:5c:83:11:d5:bd:05:1f:b8:2a:82:d8:
1e:f6:31:7e:4f:a5:a7:4a:36:da:11:e7:11:5f:ea:
05:ce:01:ed:7f:d5:fa:2a:61:fa:4e:22:c2:d2:e4:
ad:f7:da:48:13:2d:17:53:96:8a:24:81:db:dc:09:
46:b6:15:77:e8:9b:63:f2:db:0f:b0:15:e9:d7:a4:
33:42:0e:52:aa:61:11:ae:8c:5e:cc:cd:b0:44:2d:
4f:68:f6:6a:95:ee:dd:17:6f:ce:62:2c:1f:62:08:
6b:c7:cf:79:40:8d:ad:d6:39:b8:9c:37:4d:3e:5d:
fe:e8:1f:51:4d:e1:39:88:a3:eb:eb:26:16:a6:b5:
8d:2b:a5:42:d9:45:47:ab:d3:77:19:8a:b9:03:11:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:77:96:47:9D:37:03:D1:68:BC:6D:94:7B:13:57:CE:C1:93:0C:13
X509v3 Authority Key Identifier:
keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:51:cf:ed:c9:2b:d2:77:2d:ec:2e:a2:5e:bd:84:12:ff:21:
38:93:5c:df:81:f2:81:c2:7c:48:e3:60:5a:44:bf:f7:70:62:
f2:67:41:3a:12:67:5e:c3:a8:9a:9a:37:d9:4e:0c:e2:a1:46:
85:4f:93:4c:e6:db:a7:8e:0b:ac:60:a1:77:fc:b3:7a:45:fb:
d5:e4:bb:22:97:17:8f:0a:a3:31:b2:c2:23:b9:dc:76:e0:e2:
07:9c:a8:ac:9b:65:c9:7d:1e:f5:60:3f:71:e5:13:f2:ed:70:
02:5d:a9:e0:e4:e3:93:6f:fa:08:d7:42:0f:1c:ec:be:d1:a9:
54:06:12:e4:8e:80:c4:f6:63:f3:bc:1c:71:e4:20:34:c1:bb:
a0:af:dc:14:66:ec:4f:1e:ab:18:fa:00:0d:b1:72:82:33:18:
f9:bf:63:3d:fc:ae:aa:bd:3e:83:dc:a0:03:2a:10:9c:e5:e8:
53:b9:d2:60:52:19:41:49:56:f9:18:ee:f4:06:2b:2d:73:f7:
55:1d:77:1d:93:06:08:ad:ec:90:03:52:50:bb:d8:7b:71:f8:
38:e5:c6:5b:f4:a2:27:88:5b:e0:08:97:0a:da:50:7a:3a:b0:
5e:ab:c6:e6:a5:2f:f5:e0:08:93:f7:35:f4:b2:60:a3:dc:cb:
ff:7d:f9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:54 2025 by rpki-client