
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
File: JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft (raw, json)
Hash identifier: gMPweOksh6nklyQVum8znhjO1v9ajYTRd9g/wXWUgwA=
Subject key identifier: 3F:1E:51:1F:9E:A5:7B:8E:D2:1B:9E:E1:EC:09:B4:32:18:A9:E8:4C
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Certificate issuer: /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial: 0198D6CCF77BA85C94C815DE3CB1ED10C6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 12:00:13 +0000
Manifest this update: Sat 23 Aug 2025 12:00:13 +0000
Manifest next update: Sun 24 Aug 2025 12:00:13 +0000
Files and hashes: 1: JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl (hash: IyLHq9j9HefaTL44Rkiw0iYXra1fx12X47+vebcT2aw=)
2: OPRG5qVik0clg7wkwnl7SUN9jY0.roa (hash: ZN4J6ol4OC/X57nz18jc3tVUWSo2XvbIumwEP6WKJXU=)
3: pUkIJqBsM01F-i6Em2tr3Saf2sk.roa (hash: iY+eh+5NMCHozu8pjL4QFCTT1O1hYE+uhiNgfrNLxws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:f7:7b:a8:5c:94:c8:15:de:3c:b1:ed:10:c6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Validity
Not Before: Aug 23 12:00:13 2025 GMT
Not After : Aug 24 12:00:13 2025 GMT
Subject: CN=3f1e511f9ea57b8ed21b9ee1ec09b43218a9e84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:9d:c5:b7:a0:6f:60:6a:f5:4a:14:51:1c:
99:72:b2:a5:aa:bb:a8:74:78:2f:8d:f7:bb:85:2a:
97:0f:77:07:5c:d8:8a:ee:a7:54:b0:f7:a4:26:29:
c1:b3:b2:26:59:ff:ed:28:9c:6f:e9:08:47:99:fb:
69:0c:eb:19:fa:9b:4e:c4:da:40:9b:69:82:67:d2:
31:72:b0:4b:8c:b7:21:c3:a8:35:1b:ee:f5:86:6a:
36:bf:2e:50:95:52:74:eb:ef:b5:82:42:75:bf:d3:
7e:90:bd:67:b0:18:07:55:66:1e:02:ec:66:8f:b2:
af:f2:c3:5d:32:9f:21:19:9d:8e:90:76:f2:1d:c5:
4a:22:3e:26:13:74:e1:8c:9f:a7:ba:c7:8f:34:93:
81:cc:f8:18:b8:e8:ea:cf:07:5d:85:3f:db:32:c8:
75:19:f4:4e:d7:57:1e:6e:b5:44:64:30:b1:17:2d:
84:5d:09:e6:7a:bb:90:a9:9d:cf:35:0c:31:33:dc:
30:44:e6:17:42:a7:52:e0:87:5a:12:09:5d:d3:e2:
a8:1a:82:50:a4:6d:85:d1:84:60:90:51:35:4c:5e:
9a:1b:7c:6b:36:67:f2:86:98:20:a2:79:e1:d7:38:
46:fe:a5:56:e5:85:84:3b:a8:27:72:c6:f9:a8:75:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:51:1F:9E:A5:7B:8E:D2:1B:9E:E1:EC:09:B4:32:18:A9:E8:4C
X509v3 Authority Key Identifier:
keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d6:93:7b:f7:86:af:37:b9:82:64:25:8f:e0:e0:77:e8:ec:
78:50:40:d7:28:f7:66:49:da:be:b6:4d:26:6e:9b:a0:21:fb:
00:f3:90:6e:70:91:e9:5b:cd:63:2c:a9:00:31:16:7a:12:13:
8f:30:bf:65:e1:9f:cc:84:19:31:ba:bf:10:a9:fe:d3:f8:02:
1e:65:fa:a8:ac:71:9c:a8:5d:dc:6f:0a:37:0a:d0:47:a5:d5:
a4:fc:65:b9:59:01:9f:45:16:5d:4f:7e:4e:4e:d0:b2:67:23:
94:a3:1a:8a:c2:f0:36:40:ba:83:c5:4e:a7:24:3b:b1:ce:10:
60:46:fb:1d:59:29:2f:83:97:3c:49:ca:38:27:9b:a1:8b:a1:
78:e6:73:96:08:bf:b9:d6:9e:4a:f9:f4:dc:87:45:bf:d0:e7:
a4:b3:ef:ce:ab:9e:b8:2d:a3:32:24:be:78:17:b2:4d:44:62:
8e:b1:8a:75:8a:52:ab:1e:01:7f:bb:81:f1:c5:0d:41:7b:f8:
71:ec:7c:df:d2:59:1c:22:00:ce:36:74:d7:d2:4f:d2:01:ee:
3f:f5:b2:a2:fc:d2:2c:c4:82:fc:8a:14:c5:c9:6e:47:1a:ea:
88:41:8f:0a:66:55:7b:72:37:67:fd:d1:d5:09:e9:38:75:91:
de:e4:e5:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzPd7qFyUyBXePLHtEMbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZjM2YjVjNmNhN2ExNjk4ZTc0MjFhMjdlM2Q0YTZiNzY0
ODE0OGQwHhcNMjUwODIzMTIwMDEzWhcNMjUwODI0MTIwMDEzWjAzMTEwLwYDVQQD
EygzZjFlNTExZjllYTU3YjhlZDIxYjllZTFlYzA5YjQzMjE4YTllODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4udxbegb2Bq9UoUURyZcrKlqruo
dHgvjfe7hSqXD3cHXNiK7qdUsPekJinBs7ImWf/tKJxv6QhHmftpDOsZ+ptOxNpA
m2mCZ9IxcrBLjLchw6g1G+71hmo2vy5QlVJ06++1gkJ1v9N+kL1nsBgHVWYeAuxm
j7Kv8sNdMp8hGZ2OkHbyHcVKIj4mE3ThjJ+nusePNJOBzPgYuOjqzwddhT/bMsh1
GfRO11cebrVEZDCxFy2EXQnmeruQqZ3PNQwxM9wwROYXQqdS4IdaEgld0+KoGoJQ
pG2F0YRgkFE1TF6aG3xrNmfyhpggonnh1zhG/qVW5YWEO6gncsb5qHU8ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8eUR+epXuO0hue4ewJtDIYqehMMB8GA1UdIwQY
MBaAFCbza1xsp6FpjnQhon49Smt2SBSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZOclhHeW5vV21PZENHaWZqMUthM1pJRkkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83Y2MwZjYtNzRlZi00MjNhLWE2OTYt
NGEyYmY0YWIxOTlkLzEvSnZOclhHeW5vV21PZENHaWZqMUthM1pJRkkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83Y2MwZjYtNzRlZi00MjNhLWE2OTYtNGEyYmY0YWIxOTlk
LzEvSnZOclhHeW5vV21PZENHaWZqMUthM1pJRkkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNaTe/eG
rze5gmQlj+Dgd+jseFBA1yj3ZknavrZNJm6boCH7APOQbnCR6VvNYyypADEWehIT
jzC/ZeGfzIQZMbq/EKn+0/gCHmX6qKxxnKhd3G8KNwrQR6XVpPxluVkBn0UWXU9+
Tk7QsmcjlKMaisLwNkC6g8VOpyQ7sc4QYEb7HVkpL4OXPEnKOCeboYuheOZzlgi/
udaeSvn03IdFv9DnpLPvzqueuC2jMiS+eBeyTURijrGKdYpSqx4Bf7uB8cUNQXv4
cex839JZHCIAzjZ019JP0gHuP/WyovzSLMSC/IoUxcluRxrqiEGPCmZVe3I3Z/3R
1QnpOHWR3uTlzQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:37 2025 by rpki-client