Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
File: jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json)
Hash identifier: HRLjMCcIx5fi8pfsGLAsy3IUeQOoxgSTl2MgjPbmkdA=
Subject key identifier: 73:D5:8A:BB:25:14:22:23:1D:8D:76:9F:39:A7:EE:87:23:25:05:C1
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 019A5488564E842408E429CECB36B3A75E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
Manifest number: 0FF8
Signing time: Wed 05 Nov 2025 15:00:12 +0000
Manifest this update: Wed 05 Nov 2025 15:00:12 +0000
Manifest next update: Thu 06 Nov 2025 15:00:12 +0000
Files and hashes: 1: 0JcOAjVYzD7ATTRTY6zM_FW7ibk.roa (hash: ae6zh695aCdxOBAb92vW9Mqs/ewqcDH7wayEClXo5lU=)
2: DMHspTa-m7YS1bn5e9JmcIJBzcE.roa (hash: Tguv/ZlkRRgsKXeIni29cWwqnVhv5X7wO7u2hzkn37U=)
3: ZlUjZQcl9nR0SUVxsgzMhtk30HU.roa (hash: RueFoN4i6RiouAbfwEgZPqUPq4WVTXhPv6TjG8c7n5M=)
4: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: 2BzzhI5f0kbqdncOCvyCuw3mZx2hycaFqgSIxe1dXhI=)
5: ySGM40xeAZyu32ERIMnkJoio4hw.roa (hash: w5mMTd2fQSF1PurNOaDTdU1aGhD+Vitko+NZO/EWYYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:88:56:4e:84:24:08:e4:29:ce:cb:36:b3:a7:5e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Nov 5 15:00:12 2025 GMT
Not After : Nov 6 15:00:12 2025 GMT
Subject: CN=73d58abb251422231d8d769f39a7ee87232505c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:ec:ef:14:61:ba:fa:cf:31:0a:c5:48:8f:
91:a4:57:10:91:22:f7:36:da:ac:c2:71:b0:1e:44:
51:f2:69:c0:a3:ce:93:76:3e:df:ed:c1:94:d2:99:
32:f6:5e:e6:9b:de:cf:3e:c5:2b:a9:b1:cb:60:9c:
97:9e:8f:26:5b:2a:3d:5a:01:5b:35:9c:09:de:16:
d3:7e:1c:ca:f1:b5:c9:ac:82:aa:24:43:7e:d2:0a:
a1:33:c2:ab:52:55:b7:30:38:bb:3c:97:a7:e6:fb:
da:ef:7a:48:74:80:b3:8c:6e:15:65:ae:66:01:7d:
55:e4:a3:c4:58:de:21:34:e7:0c:cb:e4:aa:48:a4:
5e:81:33:92:4f:12:ea:31:36:6a:22:c6:41:9f:1e:
9d:a9:d8:88:03:63:18:b8:f0:d6:34:a4:af:66:30:
3c:06:99:ac:9a:12:e6:5b:31:be:50:b3:a5:ff:fc:
89:1f:03:35:34:b6:ad:0c:49:a9:77:41:84:f3:91:
77:9d:08:92:7d:c1:80:52:02:34:49:f3:96:59:e9:
bd:af:70:6f:2f:0f:5d:08:70:ed:55:df:64:45:15:
5b:08:79:0b:59:49:7d:4e:af:0c:96:be:38:67:35:
d6:34:34:89:0b:8a:2f:4a:09:d7:9f:3d:2f:84:60:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D5:8A:BB:25:14:22:23:1D:8D:76:9F:39:A7:EE:87:23:25:05:C1
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cc:c2:f3:c5:fb:ca:e2:bc:1f:c5:ae:3d:99:48:83:b0:c0:
cd:99:82:65:66:f5:65:5d:8d:b1:94:b2:23:17:35:e5:cc:b9:
95:47:77:80:48:6c:b2:e0:fd:29:c2:68:e9:49:24:66:24:54:
9e:0d:c0:f6:77:f6:b0:6a:71:0d:a3:ce:60:90:e4:15:0a:6b:
d3:40:09:d5:7f:93:11:b0:3a:14:aa:9f:b9:7c:fb:e9:2d:e2:
fe:d8:fd:4b:55:37:5d:b1:7c:c1:e2:91:4a:d4:60:75:93:48:
bc:d0:19:cc:b5:34:b9:3b:9f:90:fb:03:86:68:8a:db:55:11:
01:47:fb:25:72:e4:51:df:d6:9c:78:ce:d5:16:89:42:42:19:
a8:25:9b:86:ce:0c:76:0c:69:08:4d:6b:95:ca:ba:ba:98:e9:
05:6e:dd:f2:61:34:96:28:a7:f4:70:23:0f:04:cf:4d:6e:1f:
85:ef:5d:f3:c2:1f:d6:9c:86:c6:0f:1e:ce:bc:59:7a:3b:d9:
3a:4d:bb:ac:2e:87:35:70:fc:48:ba:39:66:61:63:bf:5a:29:
d1:98:ef:a3:b3:cb:eb:31:65:53:7f:6f:b4:74:5c:a3:10:a1:
f9:76:80:7d:70:b7:c1:0e:1b:b3:1f:42:52:7a:00:c1:e7:7f:
18:ab:ee:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUiFZOhCQI5CnOyzazp14dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy
NTc2MjQwHhcNMjUxMTA1MTUwMDEyWhcNMjUxMTA2MTUwMDEyWjAzMTEwLwYDVQQD
Eyg3M2Q1OGFiYjI1MTQyMjIzMWQ4ZDc2OWYzOWE3ZWU4NzIzMjUwNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3grs7xRhuvrPMQrFSI+RpFcQkSL3
NtqswnGwHkRR8mnAo86Tdj7f7cGU0pky9l7mm97PPsUrqbHLYJyXno8mWyo9WgFb
NZwJ3hbTfhzK8bXJrIKqJEN+0gqhM8KrUlW3MDi7PJen5vva73pIdICzjG4VZa5m
AX1V5KPEWN4hNOcMy+SqSKRegTOSTxLqMTZqIsZBnx6dqdiIA2MYuPDWNKSvZjA8
BpmsmhLmWzG+ULOl//yJHwM1NLatDEmpd0GE85F3nQiSfcGAUgI0SfOWWem9r3Bv
Lw9dCHDtVd9kRRVbCHkLWUl9Tq8Mlr44ZzXWNDSJC4ovSgnXnz0vhGBpRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPVirslFCIjHY12nzmn7ocjJQXBMB8GA1UdIwQY
MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt
ZTk3ZDFkMDIyMGFmLzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm
LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAszC88X7
yuK8H8WuPZlIg7DAzZmCZWb1ZV2NsZSyIxc15cy5lUd3gEhssuD9KcJo6UkkZiRU
ng3A9nf2sGpxDaPOYJDkFQpr00AJ1X+TEbA6FKqfuXz76S3i/tj9S1U3XbF8weKR
StRgdZNIvNAZzLU0uTufkPsDhmiK21URAUf7JXLkUd/WnHjO1RaJQkIZqCWbhs4M
dgxpCE1rlcq6upjpBW7d8mE0liin9HAjDwTPTW4fhe9d88If1pyGxg8ezrxZejvZ
Ok27rC6HNXD8SLo5ZmFjv1op0Zjvo7PL6zFlU39vtHRcoxCh+XaAfXC3wQ4bsx9C
UnoAwed/GKvubQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:49 2025 by rpki-client