Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
File: JoLIFvcmhv967eU1OGGMwuiGEDk.mft (raw, json)
Hash identifier: MqlRLDpOys/mCC+V+F1/XSDeBn/EbriRyVwtZun8y4U=
Subject key identifier: 86:8D:02:A1:7E:8B:AC:D8:9A:08:E6:93:C8:54:9D:00:C3:4F:B6:04
Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
Certificate issuer: /CN=2682c816f72686ff7aede53538618cc2e8861039
Certificate serial: 0199FBEB2598AC8B4E48E7090751B7A8BB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
Manifest number: 1181
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: DS8Rbt69Y278qge_4Hmc5o4yuwU.roa (hash: tTLyP2JhBCp2p2WsUyjl7JOVm5G5UBP2M/82U2+yJ6c=)
2: JoLIFvcmhv967eU1OGGMwuiGEDk.crl (hash: VmeF1wrtftr+GWPqsI1x3xCh4/dXX+h8a/IB2Jy0crI=)
3: U8zXsGEWCBH4_8YcgXmHjVER-wA.roa (hash: QGCHO7XwYCcbkNmS/y1pKg7c9YRHZM93ZZOJP0WiYK0=)
4: rzDuEXo0h15tN1onQfvdfKOerNI.roa (hash: Rm0BFvhI+es2ozBderkrcSg2LqNFRQ+VOueKD9tKZoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:25:98:ac:8b:4e:48:e7:09:07:51:b7:a8:bb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=868d02a17e8bacd89a08e693c8549d00c34fb604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:94:a6:3d:df:f4:c2:e2:9c:36:a0:22:f7:
26:e9:fc:e0:6f:77:11:42:fe:2d:33:ed:62:1d:40:
4b:6e:dc:35:41:ce:a0:a1:50:2c:00:c9:b4:36:b5:
cc:6d:9e:60:8a:db:77:98:f8:6b:9a:4e:d4:85:12:
a2:7e:86:7d:9f:5a:80:b8:52:2b:9d:e6:76:3b:a6:
70:06:99:99:2a:cd:e2:e9:33:36:f2:52:c4:01:90:
65:ae:76:06:78:98:a3:0e:bb:ce:6e:13:b1:9a:9f:
78:a1:8c:43:5f:00:7e:4c:64:3a:b0:c7:f8:5a:ba:
48:f2:2d:c5:ba:8c:e6:09:5d:b1:15:11:f8:00:08:
f2:a0:52:3d:5c:41:f0:2d:06:bb:a4:3a:14:c0:16:
17:bb:a7:18:8c:a0:07:80:8c:86:76:e9:60:72:c1:
be:ef:9d:05:22:83:d0:90:e5:4e:d4:94:cb:1e:05:
7a:6b:c9:dd:65:9d:92:b3:de:5a:0b:56:9c:54:f2:
cc:02:13:f0:3b:7a:c8:0a:71:84:77:4d:74:6b:77:
5d:50:f7:2f:14:41:82:46:44:94:aa:9f:db:29:9a:
9b:78:fe:26:94:3d:7c:79:e4:fc:15:06:2c:c7:3d:
88:03:ec:69:bc:77:57:eb:07:d4:06:f6:80:f7:66:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8D:02:A1:7E:8B:AC:D8:9A:08:E6:93:C8:54:9D:00:C3:4F:B6:04
X509v3 Authority Key Identifier:
keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3c:3d:b1:8d:81:a9:fb:94:60:08:f1:7e:a4:67:68:52:bf:
eb:f5:94:8d:a8:39:2c:7c:3e:21:3d:45:93:45:3f:bb:c7:f1:
ee:33:72:3d:f3:9a:7f:3f:ea:46:6d:82:f7:d1:e4:d3:e3:62:
fe:d0:96:86:d2:5c:69:03:51:9b:31:b7:17:73:67:e1:ee:7e:
b8:48:15:f3:c2:f8:ec:21:b1:86:dd:5b:53:f8:97:93:8d:a7:
8c:a0:4e:d6:22:ce:f1:ba:d0:29:4f:41:c2:c2:6f:d9:94:41:
ef:19:fc:cf:30:3d:99:b5:cc:e2:22:0e:5b:09:78:32:6b:5a:
93:d7:60:df:01:dd:20:25:a7:de:6d:07:29:b6:9b:6e:2b:2b:
cc:b1:b9:d4:fc:f8:8e:f9:28:5f:02:8b:84:5d:ac:2a:a4:50:
9c:74:88:1f:ce:3e:96:f3:29:82:a1:6d:71:33:8c:e2:e7:08:
7c:72:14:03:21:8b:7c:22:ef:e4:9a:1d:d3:33:9f:1f:59:24:
b5:4f:e1:9a:cf:0a:13:6f:d7:29:4c:94:14:9c:40:09:ce:04:
05:ed:fd:02:aa:b8:79:d7:60:fe:dd:78:27:82:25:bb:06:c0:
6f:0b:09:dd:b0:78:d6:9a:91:2c:98:d0:8f:c1:59:e3:c1:b6:
a5:ce:d0:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yWYrItOSOcJB1G3qLtIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ODJjODE2ZjcyNjg2ZmY3YWVkZTUzNTM4NjE4Y2MyZTg4
NjEwMzkwHhcNMjUxMDE5MTAwMTU1WhcNMjUxMDIwMTAwMTU1WjAzMTEwLwYDVQQD
Eyg4NjhkMDJhMTdlOGJhY2Q4OWEwOGU2OTNjODU0OWQwMGMzNGZiNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVaUpj3f9MLinDagIvcm6fzgb3cR
Qv4tM+1iHUBLbtw1Qc6goVAsAMm0NrXMbZ5gitt3mPhrmk7UhRKifoZ9n1qAuFIr
neZ2O6ZwBpmZKs3i6TM28lLEAZBlrnYGeJijDrvObhOxmp94oYxDXwB+TGQ6sMf4
WrpI8i3FuozmCV2xFRH4AAjyoFI9XEHwLQa7pDoUwBYXu6cYjKAHgIyGdulgcsG+
750FIoPQkOVO1JTLHgV6a8ndZZ2Ss95aC1acVPLMAhPwO3rICnGEd010a3ddUPcv
FEGCRkSUqp/bKZqbeP4mlD18eeT8FQYsxz2IA+xpvHdX6wfUBvaA92YvXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaNAqF+i6zYmgjmk8hUnQDDT7YEMB8GA1UdIwQY
MBaAFCaCyBb3Job/eu3lNThhjMLohhA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hMDAwOTAtNjY2My00NmExLWE1ZmIt
NjYxZThmZTNjMWU5LzEvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hMDAwOTAtNjY2My00NmExLWE1ZmItNjYxZThmZTNjMWU5
LzEvSm9MSUZ2Y21odjk2N2VVMU9HR013dWlHRURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozw9sY2B
qfuUYAjxfqRnaFK/6/WUjag5LHw+IT1Fk0U/u8fx7jNyPfOafz/qRm2C99Hk0+Ni
/tCWhtJcaQNRmzG3F3Nn4e5+uEgV88L47CGxht1bU/iXk42njKBO1iLO8brQKU9B
wsJv2ZRB7xn8zzA9mbXM4iIOWwl4Mmtak9dg3wHdICWn3m0HKbabbisrzLG51Pz4
jvkoXwKLhF2sKqRQnHSIH84+lvMpgqFtcTOM4ucIfHIUAyGLfCLv5Jod0zOfH1kk
tU/hms8KE2/XKUyUFJxACc4EBe39Aqq4eddg/t14J4IluwbAbwsJ3bB41pqRLJjQ
j8FZ48G2pc7Q0Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:10 2025 by rpki-client