
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
File: JmOMLLe4YM02lnnE0F1Q9wXgRik.mft (raw, json)
Hash identifier: fVUAbbgbfyppKhJDJ56Wq3daTZcUmFfJ+vIR/w2re3A=
Subject key identifier: 1C:FB:91:58:C2:47:D9:81:4A:8F:22:6E:05:31:17:AC:B0:21:49:AA
Authority key identifier: 26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
Certificate issuer: /CN=26638c2cb7b860cd369679c4d05d50f705e04629
Certificate serial: 0199FE4716BB247B5DF3A0080377846BEFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
Manifest number: 0F52
Signing time: Sun 19 Oct 2025 21:01:35 +0000
Manifest this update: Sun 19 Oct 2025 21:01:35 +0000
Manifest next update: Mon 20 Oct 2025 21:01:35 +0000
Files and hashes: 1: HRbR_khGq9xBOHLyUMt_H0_ZMOg.roa (hash: sAAGeZp9KGc0mAVbloa7q59m7jUPjTaroGNIZ50YXxw=)
2: JmOMLLe4YM02lnnE0F1Q9wXgRik.crl (hash: cNRdA/2XlaNqql+uNQ185cI0Hkv74F2vA0kSy6Mu950=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:16:bb:24:7b:5d:f3:a0:08:03:77:84:6b:ef:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26638c2cb7b860cd369679c4d05d50f705e04629
Validity
Not Before: Oct 19 21:01:35 2025 GMT
Not After : Oct 20 21:01:35 2025 GMT
Subject: CN=1cfb9158c247d9814a8f226e053117acb02149aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:11:36:a1:73:a8:cb:4c:ac:3c:ca:51:b3:
ca:05:bd:00:72:45:70:c9:8b:ba:5f:25:82:ab:d6:
06:09:b1:87:a0:94:45:9e:f3:98:b1:06:2d:28:4e:
4c:98:d1:41:67:c6:d4:e7:f0:cd:73:d7:23:ea:e2:
c9:24:85:e5:3a:25:4e:57:5b:54:5a:ec:4e:c0:09:
1c:29:f4:6a:6b:9b:5a:7a:20:85:31:b9:43:03:39:
85:b8:20:8b:23:1b:e0:7a:9b:2e:67:2a:0e:08:70:
88:ff:0d:1d:09:77:bf:98:7a:6c:71:d9:f0:fb:a8:
d2:4d:12:b5:69:fa:21:43:f6:f7:66:2a:47:1f:e7:
f8:78:72:eb:fa:af:26:e8:60:7d:0e:5e:0b:f9:63:
e5:f5:60:2c:0f:26:a0:f3:b6:87:25:7f:06:f0:9f:
b8:b1:0f:92:dd:cd:6b:38:69:fa:97:62:0e:48:89:
43:be:c3:21:1a:76:13:78:76:82:f3:f5:32:3c:88:
0a:65:d5:13:1c:a1:7e:d1:37:c7:21:a4:bd:b6:cd:
a6:0e:9b:6c:60:0e:e8:bc:c5:3d:20:c5:0d:05:c2:
9b:d9:40:94:b3:79:e8:d5:a8:c6:0d:2f:9e:a9:98:
23:dd:51:6d:9f:92:f9:23:a1:23:29:8f:6c:e8:ba:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FB:91:58:C2:47:D9:81:4A:8F:22:6E:05:31:17:AC:B0:21:49:AA
X509v3 Authority Key Identifier:
keyid:26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0d:80:19:72:d0:2e:ad:8a:f6:57:cb:bb:58:3f:b5:34:f5:
54:a0:b9:7d:22:8e:41:a1:0c:da:ce:fa:47:da:69:b9:55:c0:
82:19:b5:36:ea:05:f8:0f:83:81:a4:6f:9d:ca:21:bf:11:2a:
c4:3c:de:2b:95:02:30:87:c8:9d:9a:c4:e4:74:f2:7d:9f:ab:
a0:c8:1c:52:09:0a:ba:91:5d:e5:89:58:91:8f:14:46:e3:c4:
4e:20:ab:f9:99:8a:16:33:e7:87:4d:8c:7c:ea:1a:c6:c0:7c:
eb:4c:67:03:27:73:7a:ba:d8:0d:8d:a5:10:ce:8c:2a:c0:6c:
96:8d:b7:4b:2e:7e:45:29:be:89:bd:ee:5e:0f:d2:52:50:96:
7f:63:5c:25:31:5a:b0:32:93:d7:07:6c:a4:a4:7e:ce:c0:a9:
98:39:da:f0:4e:fb:3d:90:01:44:c0:8a:4f:5d:74:03:26:e9:
64:4a:e5:e5:85:13:3b:b9:e7:c2:0c:9d:3c:4c:4e:19:35:fb:
60:a0:68:49:21:e5:0b:ea:6c:24:bf:69:18:62:01:21:4b:14:
09:d5:74:59:48:ed:08:68:32:6c:cd:e4:ae:98:23:be:a6:67:
ce:89:d0:63:5c:af:21:fa:6b:e4:8d:9f:fd:78:b0:98:92:91:
3b:e9:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:50:03 2025 by rpki-client