Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
File: jmOEMlhq5gL_Datn0JsZUVJOggU.mft (raw, json)
Hash identifier: SrKCEaUkeNkVcjHaRMQaytSrYmw4/2YoY/Ar+eNmw54=
Subject key identifier: CF:D5:42:1A:08:56:03:03:39:F7:31:4E:89:F9:0F:7E:70:E7:76:05
Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
Certificate issuer: /CN=8e638432586ae602ff0dab67d09b1951524e8205
Certificate serial: 019A503DCE8EF5CABF44E1B0CB3A16A98D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
Manifest number: 0130
Signing time: Tue 04 Nov 2025 19:00:19 +0000
Manifest this update: Tue 04 Nov 2025 19:00:19 +0000
Manifest next update: Wed 05 Nov 2025 19:00:19 +0000
Files and hashes: 1: jmOEMlhq5gL_Datn0JsZUVJOggU.crl (hash: HCqSkX0GcFIlM0DQ4dBGeBzYZmKw8PcZXB1WO+l2zmE=)
2: lRoCCR7d7sV8zan-pzAzhXIb0yk.roa (hash: zsjWkEr7wbMEPevuos7iGWcpCUsff/MP3ODrwkUVgTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:ce:8e:f5:ca:bf:44:e1:b0:cb:3a:16:a9:8d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205
Validity
Not Before: Nov 4 19:00:19 2025 GMT
Not After : Nov 5 19:00:19 2025 GMT
Subject: CN=cfd5421a0856030339f7314e89f90f7e70e77605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:4d:78:7d:69:e7:31:dc:d6:27:5a:2a:41:
3b:06:fa:03:0a:28:10:a5:b9:2a:08:b3:a4:47:2e:
57:ab:f4:13:c2:bc:6d:40:5d:ea:d0:a1:03:13:0b:
75:8b:99:d2:30:63:cf:3a:bd:cf:00:b9:75:f0:b6:
20:9b:f5:da:32:a3:68:72:e9:d1:5d:06:f7:80:ad:
71:6b:63:2e:1c:7b:64:4b:24:5d:81:d4:ac:63:a3:
60:b4:b5:d5:dd:71:47:ea:97:eb:17:f9:cb:d4:b3:
64:dd:a3:27:f5:ac:2a:b6:8a:87:48:12:3f:51:8c:
47:c2:b0:1f:35:8f:dd:be:cd:8c:06:53:fe:48:6a:
65:b2:63:bb:fd:3b:3b:c8:ae:1a:91:54:3b:65:02:
35:e0:ec:ec:9e:6e:b6:d1:0d:99:5c:03:0a:14:74:
8a:fc:bd:24:b7:1f:e3:33:29:62:cb:0b:43:2a:17:
61:ca:43:46:0b:52:7c:93:c1:0d:5e:7a:4a:a1:f2:
26:fd:95:28:20:ed:66:6c:76:93:b7:3b:60:86:d0:
96:fc:b2:63:e9:9b:52:83:c6:35:cc:36:41:45:1e:
42:e3:a2:14:bf:85:97:d5:36:13:87:4f:ba:78:be:
ae:ce:63:50:13:31:2d:f9:d7:b7:11:f2:5b:4b:9c:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D5:42:1A:08:56:03:03:39:F7:31:4E:89:F9:0F:7E:70:E7:76:05
X509v3 Authority Key Identifier:
keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e7:9b:fe:e6:93:86:f5:2e:93:19:e1:ae:1a:e7:33:8d:e7:
ae:64:2b:df:59:b4:12:0a:58:60:f1:c2:1e:d6:5c:6f:77:de:
84:e0:38:a5:32:6a:b0:e0:6f:79:d4:d5:28:e7:6a:b6:d4:8b:
3a:14:df:ed:3c:53:93:58:07:ff:fb:ea:2e:5c:9f:fa:2d:dd:
58:71:b6:f7:a7:9a:d1:89:1f:71:e3:fd:97:2c:44:02:58:de:
2f:b6:2f:06:de:31:3b:6d:ff:b6:f0:d0:db:46:06:d0:dd:12:
76:bc:28:c6:ca:5d:55:4b:ff:6b:ed:f6:05:c4:c3:e6:62:93:
e1:d8:a2:0f:06:7f:ef:96:c8:23:ae:90:8e:f7:f6:30:c6:3e:
3f:84:fb:6c:a7:0e:41:24:23:0f:8c:e3:f5:83:cc:10:f3:61:
5b:a3:9a:ad:f9:65:0f:f8:17:3e:e2:d9:0d:3b:b7:6a:d4:7f:
1b:01:ce:32:17:24:e9:2f:0a:30:ae:6d:00:32:65:8c:ed:65:
92:a8:c0:a0:8c:f0:d0:f6:c6:fc:ea:87:3c:d4:de:eb:b7:b6:
88:e2:60:46:af:78:92:2a:db:62:9e:ae:ed:68:61:cd:c7:6a:
e8:4a:08:1d:78:bb:db:48:13:81:e3:84:e3:c6:44:7e:45:b9:
37:7d:53:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPc6O9cq/ROGwyzoWqY2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjM4NDMyNTg2YWU2MDJmZjBkYWI2N2QwOWIxOTUxNTI0
ZTgyMDUwHhcNMjUxMTA0MTkwMDE5WhcNMjUxMTA1MTkwMDE5WjAzMTEwLwYDVQQD
EyhjZmQ1NDIxYTA4NTYwMzAzMzlmNzMxNGU4OWY5MGY3ZTcwZTc3NjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnZNeH1p5zHc1idaKkE7BvoDCigQ
pbkqCLOkRy5Xq/QTwrxtQF3q0KEDEwt1i5nSMGPPOr3PALl18LYgm/XaMqNocunR
XQb3gK1xa2MuHHtkSyRdgdSsY6NgtLXV3XFH6pfrF/nL1LNk3aMn9awqtoqHSBI/
UYxHwrAfNY/dvs2MBlP+SGplsmO7/Ts7yK4akVQ7ZQI14Ozsnm620Q2ZXAMKFHSK
/L0ktx/jMyliywtDKhdhykNGC1J8k8ENXnpKofIm/ZUoIO1mbHaTtztghtCW/LJj
6ZtSg8Y1zDZBRR5C46IUv4WX1TYTh0+6eL6uzmNQEzEt+de3EfJbS5yEowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/VQhoIVgMDOfcxTon5D35w53YFMB8GA1UdIwQY
MBaAFI5jhDJYauYC/w2rZ9CbGVFSToIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEt
ZWQzOGM0N2ZiYWM2LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEtZWQzOGM0N2ZiYWM2
LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+eb/uaT
hvUukxnhrhrnM43nrmQr31m0EgpYYPHCHtZcb3fehOA4pTJqsOBvedTVKOdqttSL
OhTf7TxTk1gH//vqLlyf+i3dWHG296ea0YkfceP9lyxEAljeL7YvBt4xO23/tvDQ
20YG0N0SdrwoxspdVUv/a+32BcTD5mKT4diiDwZ/75bII66Qjvf2MMY+P4T7bKcO
QSQjD4zj9YPMEPNhW6OarfllD/gXPuLZDTu3atR/GwHOMhck6S8KMK5tADJljO1l
kqjAoIzw0PbG/OqHPNTe67e2iOJgRq94kirbYp6u7Whhzcdq6EoIHXi720gTgeOE
48ZEfkW5N31TDg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:30:23 2025 by rpki-client