Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: fTcZw6FQagsjBsu5TqAQZXjnZGSBmWK9Lxxg/T6iOjI=
Subject key identifier: EC:8C:19:FA:D1:DD:D6:EA:12:AB:AF:89:19:32:AD:5A:10:75:DC:E0
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 0199FF59B9B175F8C611C6A09FD63CE10CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 142B
Signing time: Mon 20 Oct 2025 02:01:34 +0000
Manifest this update: Mon 20 Oct 2025 02:01:34 +0000
Manifest next update: Tue 21 Oct 2025 02:01:34 +0000
Files and hashes: 1: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: OBvDjPVmf+/g0MiQxiq+x0JlGhhSZJJFfD8eI96Fqwc=)
2: vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa (hash: mmQc628tPl3bs34ALUnwk7MYS2YDfpoBWJfmEYCNwMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:b9:b1:75:f8:c6:11:c6:a0:9f:d6:3c:e1:0c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Oct 20 02:01:34 2025 GMT
Not After : Oct 21 02:01:34 2025 GMT
Subject: CN=ec8c19fad1ddd6ea12abaf891932ad5a1075dce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:84:ad:21:36:e7:33:7d:96:de:30:78:9f:
82:7b:98:05:0b:c7:72:9a:2e:18:80:72:37:fc:86:
52:08:64:d4:f5:c1:2b:98:18:52:b8:d8:5d:af:2b:
55:06:8c:4c:25:15:6a:de:22:54:41:b2:bf:18:0e:
f4:a4:fa:c2:76:c0:23:fa:f9:e9:d0:e2:04:38:d9:
cc:a9:ce:8f:dd:ad:0d:d6:64:e9:b2:8c:83:b4:e1:
f6:9c:0c:59:67:37:e2:4c:49:34:93:80:ab:0f:f0:
48:d4:e3:a1:fd:db:9d:4f:b8:a3:67:d1:42:24:73:
c3:14:a5:d5:2c:a0:26:02:cb:e2:a6:e3:4f:d3:82:
6a:e9:e3:c0:d7:25:85:1b:a9:6a:a4:2a:c6:7e:88:
e7:69:e3:e8:ee:04:46:2e:e9:4e:30:32:5d:b0:6d:
8c:e0:29:54:fc:15:e7:67:ce:8e:bb:07:dc:04:63:
40:7f:79:50:f2:b0:93:a9:2a:4f:6c:5d:eb:ff:e7:
d0:09:47:38:45:42:e3:68:28:b5:b2:b6:f0:4f:34:
69:4d:b5:7a:91:9e:64:f7:2a:d5:b0:ec:c2:d8:02:
20:a1:52:48:d9:ec:bb:44:ea:26:96:79:a6:5b:0f:
89:77:50:09:5c:b7:fa:12:13:6a:60:63:af:41:db:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8C:19:FA:D1:DD:D6:EA:12:AB:AF:89:19:32:AD:5A:10:75:DC:E0
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6a:35:d0:9f:18:60:69:4f:90:4a:c3:d5:99:5a:a2:71:7b:
83:2a:4d:b2:d9:19:0e:22:49:9d:d4:07:22:7f:3f:2e:0d:0d:
ec:ca:c4:b8:ce:4d:4c:58:5a:dc:ba:d9:81:a3:85:e6:86:23:
2e:c6:c9:0f:8b:33:9a:66:a1:74:5f:e4:7e:dd:68:2e:26:8e:
b4:bb:ed:f0:af:9a:df:c6:f3:c1:68:ea:4c:4a:93:c5:9d:c3:
b1:0e:39:6c:af:31:cf:c8:e3:11:15:ec:61:b0:04:87:27:dc:
87:b9:1b:24:9b:f4:f6:86:aa:50:6b:63:3d:26:e0:8c:29:e3:
b0:a5:85:5c:40:a2:0a:91:f9:60:fe:fa:ca:ba:35:68:90:39:
36:89:4c:d5:03:3d:1e:fa:03:b2:4c:85:c6:99:b5:e9:5e:5e:
37:24:1b:f6:f8:d4:20:ac:6a:24:17:51:5c:83:8b:58:33:6b:
fb:58:0a:6b:d9:fd:8d:46:fc:82:de:78:34:08:53:76:5a:1d:
5d:5c:b4:65:e5:97:c8:9c:fa:77:e4:9b:04:ac:21:0c:a3:ea:
dc:82:c0:6a:68:70:25:74:24:f5:e3:dc:44:52:16:e7:88:5b:
0b:20:f5:cf:8d:35:aa:90:df:db:e6:6c:c8:e6:2d:52:3b:38:
49:c4:54:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WbmxdfjGEcagn9Y84QzrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNmJkM2Q1NDVlZWIwYmU0MGYyODM4OTlkMjE4Y2Y0ODY4
ZTk0OTAwHhcNMjUxMDIwMDIwMTM0WhcNMjUxMDIxMDIwMTM0WjAzMTEwLwYDVQQD
EyhlYzhjMTlmYWQxZGRkNmVhMTJhYmFmODkxOTMyYWQ1YTEwNzVkY2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBeErSE25zN9lt4weJ+Ce5gFC8dy
mi4YgHI3/IZSCGTU9cErmBhSuNhdrytVBoxMJRVq3iJUQbK/GA70pPrCdsAj+vnp
0OIEONnMqc6P3a0N1mTpsoyDtOH2nAxZZzfiTEk0k4CrD/BI1OOh/dudT7ijZ9FC
JHPDFKXVLKAmAsvipuNP04Jq6ePA1yWFG6lqpCrGfojnaePo7gRGLulOMDJdsG2M
4ClU/BXnZ86OuwfcBGNAf3lQ8rCTqSpPbF3r/+fQCUc4RULjaCi1srbwTzRpTbV6
kZ5k9yrVsOzC2AIgoVJI2ey7ROomlnmmWw+Jd1AJXLf6EhNqYGOvQdtmBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyMGfrR3dbqEquviRkyrVoQddzgMB8GA1UdIwQY
MBaAFI5r09VF7rC+QPKDiZ0hjPSGjpSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDkt
YjEwYTIyZDBhNDc2LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDktYjEwYTIyZDBhNDc2
LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGo10J8Y
YGlPkErD1ZlaonF7gypNstkZDiJJndQHIn8/Lg0N7MrEuM5NTFha3LrZgaOF5oYj
LsbJD4szmmahdF/kft1oLiaOtLvt8K+a38bzwWjqTEqTxZ3DsQ45bK8xz8jjERXs
YbAEhyfch7kbJJv09oaqUGtjPSbgjCnjsKWFXECiCpH5YP76yro1aJA5NolM1QM9
HvoDskyFxpm16V5eNyQb9vjUIKxqJBdRXIOLWDNr+1gKa9n9jUb8gt54NAhTdlod
XVy0ZeWXyJz6d+SbBKwhDKPq3ILAamhwJXQk9ePcRFIW54hbCyD1z401qpDf2+Zs
yOYtUjs4ScRUew==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:29:09 2025 by rpki-client