Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: 0JbUmfXZ+xozI/AI6kVmVHlL1CNPQUlJ+Jrz2FbiuIY=
Subject key identifier: 1D:3F:83:B9:B0:A4:35:0E:94:89:72:57:6D:6B:FE:5C:AA:22:73:14
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 0199FBEBF6DC443A4056DDF6082686B5A6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 05A8
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: oufXjpjLzw4Q1aE++TQSt1h+KpxhMcgyXKD3up/TQKs=)
2: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (hash: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f6:dc:44:3a:40:56:dd:f6:08:26:86:b5:a6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=1d3f83b9b0a4350e948972576d6bfe5caa227314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:3c:20:57:90:d7:3d:e0:75:ca:e9:cc:00:
8a:7d:b5:61:46:35:fa:9d:68:21:7f:6b:22:c7:76:
d9:12:0b:b9:ee:c8:eb:cc:50:c5:d6:4e:c5:5c:9a:
8a:76:8d:d3:0d:91:13:43:73:d6:61:6b:f5:fc:b2:
02:87:07:94:30:a6:c2:45:e1:5c:2d:6a:a7:c0:0e:
bd:39:7f:bc:48:18:58:bb:d1:83:41:1e:73:33:39:
b4:91:58:5b:04:c3:89:b4:9c:56:2e:fa:a8:43:dc:
9a:82:73:a8:b7:c2:1a:47:0b:0c:d0:e9:f7:c1:dd:
e5:0d:6f:7c:30:25:95:6c:bb:fa:bb:6c:6f:07:d8:
35:61:f0:79:8f:41:59:80:6b:a1:25:08:74:35:bb:
d7:10:9f:60:9d:57:a4:35:12:a7:bc:45:5a:3a:c2:
1f:e8:ad:09:49:82:a8:d3:df:79:ca:43:f6:ad:09:
4a:00:ac:22:0c:fe:1e:b9:24:c1:41:b0:27:1e:f0:
5e:ec:fd:da:f7:db:65:59:19:6c:d1:58:10:f1:e3:
ab:bf:c8:54:17:ec:a6:53:b4:3a:14:44:73:5d:f9:
09:ad:9b:fb:d5:d5:38:27:a2:73:dd:19:4d:c6:c4:
18:d2:c3:ac:da:b9:98:03:39:03:a0:b1:6f:97:25:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3F:83:B9:B0:A4:35:0E:94:89:72:57:6D:6B:FE:5C:AA:22:73:14
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d4:65:68:b2:3f:c3:7f:39:ca:48:87:d9:26:69:eb:ae:94:
e3:e1:86:80:24:1f:f9:cd:96:a3:c3:e0:82:85:ce:a2:57:e1:
af:19:64:3e:2e:76:c1:4c:aa:2f:58:b3:4b:2f:89:c0:ef:cc:
be:45:30:c8:45:42:f4:c3:b9:6d:f3:60:17:ab:75:db:e7:a2:
f4:4b:71:2d:57:81:1a:84:2c:85:f9:38:68:9b:5d:2a:59:2f:
65:6c:82:85:ea:06:b9:6e:7c:85:b4:94:cb:23:2d:ad:9a:6e:
b2:ab:c8:ed:f9:da:2b:d6:89:ad:d0:b8:d0:eb:6e:e4:d1:6e:
9b:36:a5:05:c0:b6:08:11:a7:cb:9f:ea:6e:b2:6a:37:7f:7b:
b4:96:de:ef:48:37:5c:bf:34:b1:91:86:be:04:25:d3:1f:23:
db:aa:8a:76:e7:b8:55:69:ec:ff:61:06:f8:06:49:0e:8c:85:
40:79:c4:36:1a:1e:3d:fa:81:ac:b0:22:f0:d8:39:f6:6e:52:
68:fa:88:fd:c2:13:2c:c9:98:fa:76:97:35:6c:f5:b5:8a:57:
65:9e:b0:9e:ae:e7:c7:39:4a:47:99:54:72:9d:98:45:15:1a:
b2:1d:3a:74:02:1d:8b:70:8b:27:1c:46:35:3e:31:6f:ff:57:
bb:09:a3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:54 2025 by rpki-client