Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json)
Hash identifier: howDeHPTOngMnmGYcwcYdJJpJBKbspmjs26kB2vuOwA=
Subject key identifier: 00:1E:EA:11:98:C3:91:9D:86:1D:59:F6:C2:8C:00:60:6D:85:F5:53
Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b
Certificate serial: 019A52D1813BDA1B1BD0B6343D6AC434E918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
Manifest number: 01FA
Signing time: Wed 05 Nov 2025 07:00:53 +0000
Manifest this update: Wed 05 Nov 2025 07:00:53 +0000
Manifest next update: Thu 06 Nov 2025 07:00:53 +0000
Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: d2WNWjXh/uQuKKR0rOQumZekT8IkVI7EMDhMjIL1vyE=)
2: KG8CBSi1ldaOc_7McAlQkyEmOQA.roa (hash: DpzAqMaMhdv82TzpA9vIGD7n6zlPP/KwSYGZ3tPypWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:81:3b:da:1b:1b:d0:b6:34:3d:6a:c4:34:e9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b
Validity
Not Before: Nov 5 07:00:53 2025 GMT
Not After : Nov 6 07:00:53 2025 GMT
Subject: CN=001eea1198c3919d861d59f6c28c00606d85f553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:0c:e5:1c:36:22:0d:5a:b6:0a:91:8b:cf:
b2:94:76:d8:49:7a:09:b1:23:0b:e2:23:1e:a6:3f:
9f:22:27:e2:46:6c:5c:1d:91:2e:94:54:38:4a:16:
f5:c5:18:08:4c:a0:1b:f5:10:85:9a:f9:24:02:33:
c9:8d:f0:74:a8:8f:55:5c:7a:44:fd:32:c8:b6:99:
73:b6:02:99:bc:49:fa:16:54:e9:71:b0:ef:f5:85:
65:63:e9:aa:fa:da:11:42:63:23:b9:7c:fc:11:c3:
bd:ae:61:a5:87:d1:1b:74:d5:aa:af:36:db:e7:01:
73:e1:0a:32:96:f3:a7:78:dc:55:70:a6:34:f6:b2:
3d:2d:e7:7d:74:75:ec:df:6c:a5:8b:11:d4:07:52:
23:e2:29:2b:d4:54:e7:0a:85:fc:0a:57:37:9f:4a:
12:c2:2c:c8:20:60:f9:18:06:ec:f0:41:14:3f:f8:
92:b8:e2:75:d7:38:e3:e3:5b:14:33:f6:4c:89:58:
8a:5d:4b:4b:15:71:c4:ae:c7:b1:d4:da:bc:b8:9b:
67:a7:3f:08:b3:de:3f:c2:44:e8:13:43:75:5e:06:
98:8e:cb:8a:21:bb:77:29:d1:37:2a:68:24:5c:97:
32:53:03:ef:25:9f:61:d6:30:9d:72:d7:20:38:a5:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1E:EA:11:98:C3:91:9D:86:1D:59:F6:C2:8C:00:60:6D:85:F5:53
X509v3 Authority Key Identifier:
keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:69:bb:cd:a0:c5:2e:0a:6f:a2:da:21:2c:a5:58:39:cf:ac:
52:69:ad:6c:86:44:f4:4c:e7:09:c9:28:e4:ee:29:e9:01:e3:
0e:28:6a:cb:0b:09:c6:68:56:ec:17:c9:e4:57:42:c7:de:f3:
c0:fc:34:f0:9b:8d:17:05:62:1d:bb:f5:18:90:9e:0f:7b:ad:
83:0e:40:50:83:cc:b2:dd:43:e5:f6:2d:43:c2:0c:3e:9a:cd:
ee:ec:dc:ab:83:9e:76:7a:7e:53:a4:9c:04:ec:0c:eb:ac:de:
b0:9f:9c:05:35:6a:98:f8:49:b4:c7:74:4e:be:19:e7:0c:ce:
33:f1:68:2d:a7:9e:5c:e6:65:82:9a:3e:40:53:75:fa:9b:81:
b3:19:87:0c:52:69:9e:3e:d3:49:83:d1:ab:85:24:9f:8f:f2:
80:b2:25:27:98:93:89:73:4d:9d:b5:6d:bf:c5:fa:16:b9:85:
2e:e8:7e:c1:cc:51:c1:7c:92:ac:e4:b9:0e:62:2b:81:89:88:
0d:dd:e7:71:de:6b:00:fd:e6:29:71:86:bf:ce:dd:20:17:e6:
86:77:c5:3f:bb:c0:18:6b:74:f5:a8:9c:47:70:b9:ec:18:e1:
f7:f8:ee:d7:c5:e5:0a:9d:e9:a9:a4:ee:94:27:ab:3a:06:14:
ed:81:a6:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0YE72hsb0LY0PWrENOkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTlhZmZmN2U3ZmViMDZlMThkZTkyYzI3MzU2M2I5ODAz
MzMxNmIwHhcNMjUxMTA1MDcwMDUzWhcNMjUxMTA2MDcwMDUzWjAzMTEwLwYDVQQD
EygwMDFlZWExMTk4YzM5MTlkODYxZDU5ZjZjMjhjMDA2MDZkODVmNTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotAM5Rw2Ig1atgqRi8+ylHbYSXoJ
sSML4iMepj+fIifiRmxcHZEulFQ4Shb1xRgITKAb9RCFmvkkAjPJjfB0qI9VXHpE
/TLItplztgKZvEn6FlTpcbDv9YVlY+mq+toRQmMjuXz8EcO9rmGlh9EbdNWqrzbb
5wFz4QoylvOneNxVcKY09rI9Led9dHXs32ylixHUB1Ij4ikr1FTnCoX8Clc3n0oS
wizIIGD5GAbs8EEUP/iSuOJ11zjj41sUM/ZMiViKXUtLFXHErsex1Nq8uJtnpz8I
s94/wkToE0N1XgaYjsuKIbt3KdE3KmgkXJcyUwPvJZ9h1jCdctcgOKVgEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAe6hGYw5Gdhh1Z9sKMAGBthfVTMB8GA1UdIwQY
MBaAFCSpr/9+f+sG4Y3pLCc1Y7mAMzFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEt
NzE2MTIwYWIyZGIyLzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jZWNkMTEtYmM4MC00NTNhLTgyMDEtNzE2MTIwYWIyZGIy
LzEvSkttdl8zNV82d2JoamVrc0p6Vmp1WUF6TVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGm7zaDF
LgpvotohLKVYOc+sUmmtbIZE9EznCcko5O4p6QHjDihqywsJxmhW7BfJ5FdCx97z
wPw08JuNFwViHbv1GJCeD3utgw5AUIPMst1D5fYtQ8IMPprN7uzcq4Oednp+U6Sc
BOwM66zesJ+cBTVqmPhJtMd0Tr4Z5wzOM/FoLaeeXOZlgpo+QFN1+puBsxmHDFJp
nj7TSYPRq4Ukn4/ygLIlJ5iTiXNNnbVtv8X6FrmFLuh+wcxRwXySrOS5DmIrgYmI
Dd3ncd5rAP3mKXGGv87dIBfmhnfFP7vAGGt09aicR3C57Bjh9/ju18XlCp3pqaTu
lCerOgYU7YGmEg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:30:41 2025 by rpki-client