Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
File: JmXBf6AosxNI9jD2tW30Is4GKzs.mft (raw, json)
Hash identifier: ycDxGUBOCenFo7+YeXaBgNUIgohI7AyBWSjQkvb1eUA=
Subject key identifier: AF:75:EF:28:1F:1A:F8:0C:43:FC:7F:28:4D:DB:A2:B3:6E:77:00:7C
Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b
Certificate serial: 019A51F560060CF919E717C6A2AC3F2CF927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
Manifest number: 1723
Signing time: Wed 05 Nov 2025 03:00:26 +0000
Manifest this update: Wed 05 Nov 2025 03:00:26 +0000
Manifest next update: Thu 06 Nov 2025 03:00:26 +0000
Files and hashes: 1: 18w4n4c0cDQGOifCmmXS0bSE8_s.roa (hash: SIMK8PNO0s5rEeFGwVzs3xf4SYDZZHqpyYYANgJ+BE4=)
2: JmXBf6AosxNI9jD2tW30Is4GKzs.crl (hash: 52IhAsYcGcPBcgHPxPFvBrPuIVj+450f1hB/6+hQhJE=)
3: al43kkWzKm0Zt_leXuwrvUcI71Y.roa (hash: NuSx8GRJa+corRLlCxsQTs+q7zRUHE8NRnHkfNJgBsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:60:06:0c:f9:19:e7:17:c6:a2:ac:3f:2c:f9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b
Validity
Not Before: Nov 5 03:00:26 2025 GMT
Not After : Nov 6 03:00:26 2025 GMT
Subject: CN=af75ef281f1af80c43fc7f284ddba2b36e77007c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:d6:25:09:db:5d:c8:22:5f:b4:dd:9b:51:
c0:55:22:6f:ad:f8:58:65:2f:ca:f8:f2:c1:3b:a6:
99:83:df:26:c7:5f:cd:fb:30:51:6e:a0:3e:0d:03:
c9:91:ef:6d:84:15:46:62:71:42:09:55:c0:ea:94:
e6:5a:82:fe:59:88:68:26:72:4d:04:b2:7a:96:eb:
90:cf:d2:96:45:c1:63:0e:be:e8:7e:a8:38:c7:45:
9e:f8:17:f4:20:2c:48:29:7d:0d:a1:be:e4:1d:31:
9b:07:23:3a:a3:4c:cf:1d:cc:57:d1:d9:28:fe:33:
78:36:0c:4b:df:9f:56:cd:20:af:a7:c9:53:38:ad:
ca:dc:30:bd:1d:58:ea:43:8d:d2:36:ec:56:12:80:
b3:06:c3:f1:88:16:79:4a:98:5c:2a:c1:49:e9:af:
4f:f3:ec:56:fb:54:b1:47:78:b3:a5:9c:0e:c2:8f:
9e:73:7a:1e:a9:19:f9:c8:b3:77:70:5c:e1:06:b4:
a6:d5:f1:0d:72:c5:27:47:53:f1:b1:06:5a:68:76:
36:6e:4c:7e:2e:7e:b9:63:03:dc:61:77:81:f7:b1:
59:52:cd:5e:9c:df:be:f0:24:ee:fd:1c:df:12:dd:
78:22:83:ca:9f:48:3e:5c:9d:4f:79:1f:af:96:75:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:75:EF:28:1F:1A:F8:0C:43:FC:7F:28:4D:DB:A2:B3:6E:77:00:7C
X509v3 Authority Key Identifier:
keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:93:6b:1d:5e:2f:42:0b:b9:6d:45:f7:86:a1:8e:e2:7f:d0:
30:d8:32:c2:f5:2f:84:01:05:a8:bb:d5:9a:9f:d9:77:3d:b8:
82:fe:c8:fa:cb:06:42:ce:e3:c8:04:15:bd:28:22:e3:64:86:
02:73:45:17:f2:ae:4e:ba:7e:1b:64:2c:31:cc:9f:4a:86:03:
e8:53:a9:82:d8:9c:aa:ef:91:8f:c2:a9:65:ac:de:95:30:ba:
9f:e6:ce:6f:40:fe:51:4d:4c:d6:d6:cd:cc:9a:55:c7:36:43:
9c:32:47:a1:77:0b:6c:34:24:f8:b4:b8:27:d8:58:80:ab:71:
ab:d2:fc:61:f9:86:21:d9:53:80:09:83:80:9c:9f:6b:79:ee:
7a:cc:97:5b:5a:34:64:89:32:f3:1a:22:05:c6:90:c9:a7:a7:
2b:fd:a2:50:b8:79:db:42:84:a7:49:70:1d:8e:32:c2:36:c3:
f5:ba:a0:f8:a7:a5:d6:71:db:9c:24:d1:26:ad:58:78:6c:75:
b3:11:f3:03:db:ae:aa:ad:8d:5a:c2:85:08:f3:6c:9f:b8:47:
06:b8:fe:17:ae:07:43:0f:a2:4a:f0:d1:71:e8:63:86:00:f7:
fb:cc:f1:8b:08:98:d0:88:90:0f:99:23:96:dd:0c:d0:58:5d:
cf:e3:ae:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9WAGDPkZ5xfGoqw/LPknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjVjMTdmYTAyOGIzMTM0OGY2MzBmNmI1NmRmNDIyY2Uw
NjJiM2IwHhcNMjUxMTA1MDMwMDI2WhcNMjUxMTA2MDMwMDI2WjAzMTEwLwYDVQQD
EyhhZjc1ZWYyODFmMWFmODBjNDNmYzdmMjg0ZGRiYTJiMzZlNzcwMDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9XWJQnbXcgiX7Tdm1HAVSJvrfhY
ZS/K+PLBO6aZg98mx1/N+zBRbqA+DQPJke9thBVGYnFCCVXA6pTmWoL+WYhoJnJN
BLJ6luuQz9KWRcFjDr7ofqg4x0We+Bf0ICxIKX0Nob7kHTGbByM6o0zPHcxX0dko
/jN4NgxL359WzSCvp8lTOK3K3DC9HVjqQ43SNuxWEoCzBsPxiBZ5SphcKsFJ6a9P
8+xW+1SxR3izpZwOwo+ec3oeqRn5yLN3cFzhBrSm1fENcsUnR1PxsQZaaHY2bkx+
Ln65YwPcYXeB97FZUs1enN++8CTu/RzfEt14IoPKn0g+XJ1PeR+vlnUNdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK917ygfGvgMQ/x/KE3borNudwB8MB8GA1UdIwQY
MBaAFCZlwX+gKLMTSPYw9rVt9CLOBis7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1YQmY2QW9zeE5JOWpEMnRXMzBJczRHS3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mYzkwYTAtODA0Yy00MGZhLWIyN2Et
YzM4M2E5MDEwMDA1LzEvSm1YQmY2QW9zeE5JOWpEMnRXMzBJczRHS3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mYzkwYTAtODA0Yy00MGZhLWIyN2EtYzM4M2E5MDEwMDA1
LzEvSm1YQmY2QW9zeE5JOWpEMnRXMzBJczRHS3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpNrHV4v
Qgu5bUX3hqGO4n/QMNgywvUvhAEFqLvVmp/Zdz24gv7I+ssGQs7jyAQVvSgi42SG
AnNFF/KuTrp+G2QsMcyfSoYD6FOpgticqu+Rj8KpZazelTC6n+bOb0D+UU1M1tbN
zJpVxzZDnDJHoXcLbDQk+LS4J9hYgKtxq9L8YfmGIdlTgAmDgJyfa3nuesyXW1o0
ZIky8xoiBcaQyaenK/2iULh520KEp0lwHY4ywjbD9bqg+Kel1nHbnCTRJq1YeGx1
sxHzA9uuqq2NWsKFCPNsn7hHBrj+F64HQw+iSvDRcehjhgD3+8zxiwiY0IiQD5kj
lt0M0Fhdz+OubA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:21 2025 by rpki-client