Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier: xGLo3JNvgB01Kxz7GtVwFYDcTgQ34yyUqPxw/njLsyw=
Subject key identifier: 16:35:05:44:33:E3:1E:71:19:0F:0E:35:78:CA:DB:0E:AA:C0:74:F8
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 019A4DAB0A744DBEB1FA775235CBA3F6BB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number: 1446
Signing time: Tue 04 Nov 2025 07:00:45 +0000
Manifest this update: Tue 04 Nov 2025 07:00:45 +0000
Manifest next update: Wed 05 Nov 2025 07:00:45 +0000
Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: AB79lBy232h2AhbEdq34vlNio4C6oY7l3hKxGkhLrns=)
2: xEsnJciiBq0cpARjJTgBj_Gwb0g.roa (hash: rNWLcgQzhcKlCZHWn2PfxjHWg6/hf63VmYuH/DFdDPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:0a:74:4d:be:b1:fa:77:52:35:cb:a3:f6:bb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Nov 4 07:00:45 2025 GMT
Not After : Nov 5 07:00:45 2025 GMT
Subject: CN=1635054433e31e71190f0e3578cadb0eaac074f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a3:f9:e3:47:cb:20:17:bb:9d:bb:5c:8d:78:
c9:cf:11:f3:78:34:0c:c6:2a:89:bd:0d:28:a7:48:
f5:55:aa:f9:28:46:ab:ce:42:7d:d2:75:e3:25:f4:
6c:a4:fd:dd:41:e0:c9:42:f9:e3:12:6d:4e:f3:ab:
4d:83:7e:f4:9d:8d:6c:82:ca:d6:54:ce:e3:68:92:
95:10:1d:e4:fd:56:23:c8:33:ff:97:b9:b2:50:38:
52:be:98:ee:fa:68:9f:e3:a4:94:4f:fe:3d:6b:9c:
c6:f6:84:95:ee:ed:b6:af:8b:68:79:0f:54:16:f0:
76:e6:34:fb:ef:24:98:2b:5e:19:25:6e:bd:0e:62:
26:94:74:ca:ef:1d:20:58:e0:4f:ce:cf:12:97:6d:
79:f7:79:a5:99:15:42:13:2a:7b:d9:09:e0:b9:81:
3a:7f:31:6b:9f:e4:fd:4b:e4:e1:49:8e:2e:d2:78:
db:2d:b5:f7:a4:79:43:80:a7:07:ab:1a:4c:2a:ab:
79:eb:8c:13:86:d1:9c:d4:12:e6:b6:4b:0a:5d:9c:
ed:20:d1:59:cf:51:e1:d9:c8:b0:d2:80:15:00:41:
f5:f9:fb:29:ed:ad:cd:89:1d:43:84:62:98:ce:a9:
04:22:00:44:07:47:2c:90:54:cd:67:c0:6c:26:76:
c1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:35:05:44:33:E3:1E:71:19:0F:0E:35:78:CA:DB:0E:AA:C0:74:F8
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a5:41:42:ad:41:16:cd:5d:a0:9c:f7:1a:3a:06:5c:57:c9:
d7:8b:01:74:81:e7:d4:bc:05:58:73:b3:37:d9:5b:f4:d3:42:
16:a9:af:2a:1a:cd:a6:5a:ea:df:83:f8:0e:04:59:f8:7b:5f:
9c:0c:a1:55:c7:85:19:99:0c:0f:98:85:b7:87:40:59:a1:a0:
2c:15:ba:a9:e8:e1:aa:59:e7:38:08:1a:c5:5d:04:8c:bf:55:
cb:db:e9:46:f8:22:ce:ee:ba:9d:50:ec:44:ca:f4:96:cb:d8:
97:47:c1:fc:d6:e5:eb:b2:68:37:21:a9:19:5c:4b:21:00:e4:
b4:a0:0c:8c:3a:b2:59:fd:04:ce:4c:f1:46:1d:20:54:12:6d:
73:4e:1e:1d:fb:2a:fc:d0:67:cd:75:1d:73:38:a4:6c:3e:e0:
ed:5c:3e:59:8c:97:f7:61:d3:bd:46:82:b6:30:c6:da:86:6c:
5c:28:9b:54:ab:a9:56:d8:48:f2:2c:54:23:b2:2b:4e:d4:50:
06:6f:cd:32:ef:87:ff:93:29:0b:ea:b0:66:ef:93:bd:6b:62:
cc:9c:a2:73:01:5b:e1:84:f2:db:6a:66:a2:33:fc:c6:4b:06:
7e:67:2b:fe:f8:d6:9d:10:c5:55:98:6e:3d:6e:40:96:00:c5:
4e:62:f9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:41 2025 by rpki-client