Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
File: Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json)
Hash identifier: VWR1L1ycpl3rwLlcfQTBmXDQYqL6jUPtZHOyA8bxDD0=
Subject key identifier: 9F:86:41:F2:BE:32:8C:54:24:81:DA:B1:6F:9B:64:22:80:5D:B9:44
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial: 019A5150BC743E0EDFF28E868403E931FA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 00:00:36 +0000
Manifest this update: Wed 05 Nov 2025 00:00:36 +0000
Manifest next update: Thu 06 Nov 2025 00:00:36 +0000
Files and hashes: 1: 8uqjL1Q7jgFdAvMEecW_AW4apnU.roa (hash: IZPA4o1k55p7lULIvDMGq6iadu+UZEquYpH4pdM728U=)
2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: Ad85SSevPF3c4wypJry2fvFMyO9bzuG2nPhTieurqCU=)
3: LrkB9dXr22HFK0At5t4rrNYD7PQ.roa (hash: pK+9flLjEvjRYAQ3vaW216H5wdCjdNXzoh5ryOe38KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:bc:74:3e:0e:df:f2:8e:86:84:03:e9:31:fa:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Validity
Not Before: Nov 5 00:00:36 2025 GMT
Not After : Nov 6 00:00:36 2025 GMT
Subject: CN=9f8641f2be328c542481dab16f9b6422805db944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:6c:67:81:26:e5:9e:f9:a0:44:b0:11:a5:
40:fd:e5:40:f4:7f:91:8e:3a:cb:74:06:20:e0:3e:
f5:39:71:0a:c7:fd:79:e7:99:56:9d:d4:f3:25:63:
c1:2f:a0:60:c2:0d:6a:09:8f:1d:bc:0e:15:81:7c:
57:f0:a1:84:94:ed:66:39:69:c9:10:32:00:66:1c:
ce:41:df:5f:14:1f:e6:20:c1:e4:2e:fb:92:5a:f8:
41:40:40:a4:5b:49:88:7c:6f:b5:85:f5:88:74:60:
67:b8:a2:4a:b2:26:b6:dc:8b:67:f1:a5:9f:37:c7:
bc:a3:b2:0d:30:41:1f:bf:e5:dc:9f:78:69:07:0a:
2f:29:52:7a:cf:c7:b7:d5:e6:b6:44:82:bb:35:46:
14:35:33:26:8e:4c:60:8c:2d:d3:3b:a7:81:c4:09:
7d:25:29:4b:e1:26:a0:97:97:43:5e:bc:da:11:82:
21:9a:3b:96:ae:bc:f1:cd:e6:9f:a5:b6:d8:ad:81:
50:23:59:fc:e9:dd:f9:33:11:cb:86:14:3a:d7:9c:
6f:4b:2b:e1:6b:6c:ea:87:ed:73:dc:84:1e:9d:28:
18:b0:7b:15:ac:c3:da:59:12:3d:08:8f:fe:4c:94:
f4:3a:bb:34:7f:a1:50:63:a1:e9:88:1f:19:71:51:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:86:41:F2:BE:32:8C:54:24:81:DA:B1:6F:9B:64:22:80:5D:B9:44
X509v3 Authority Key Identifier:
keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:44:b5:3d:82:10:ba:fc:8a:d6:e6:53:56:53:ba:65:ce:37:
87:02:94:40:05:08:28:5b:d4:3f:da:5e:35:84:01:54:89:79:
4a:7a:c8:58:46:26:59:7b:22:aa:04:f8:b9:88:14:2a:c5:b1:
a9:c9:a5:a1:c0:89:6b:1c:0b:6e:d1:e0:a7:a0:71:de:a0:46:
96:97:0f:99:76:ce:f0:62:55:d1:3f:58:d5:fa:40:27:3b:6c:
df:d3:8b:05:de:ca:2e:6e:f3:43:27:71:37:42:32:70:bf:30:
85:6d:cc:fb:96:51:46:16:88:e7:64:fa:03:8a:94:ea:8b:f1:
0f:04:6a:a3:e4:5a:73:e7:ea:dd:22:fd:2e:ab:3e:2d:6c:a2:
46:52:84:92:98:74:72:ba:e6:75:47:23:18:45:29:46:1d:74:
8f:63:a0:9d:bd:80:49:a2:8c:39:af:19:12:c4:33:1a:d4:a4:
58:2b:35:ef:e8:8e:2e:bb:f2:f8:28:9d:c2:77:af:b8:e6:ca:
bb:59:ca:30:05:b3:31:79:a0:56:42:3f:c7:b0:d3:fd:12:9d:
2d:27:27:8e:b3:ce:21:08:da:55:32:4f:ff:26:f3:32:89:17:
48:9d:68:81:89:14:49:60:e7:b6:5e:47:25:1b:83:05:b7:0d:
c3:66:a7:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRULx0Pg7f8o6GhAPpMfqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NmUwYzQwZTRlOTM3MGRiOTlhZDI3YTk3Mjk4ZDdkMDU1
OThmNzMwHhcNMjUxMTA1MDAwMDM2WhcNMjUxMTA2MDAwMDM2WjAzMTEwLwYDVQQD
Eyg5Zjg2NDFmMmJlMzI4YzU0MjQ4MWRhYjE2ZjliNjQyMjgwNWRiOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV5sZ4Em5Z75oESwEaVA/eVA9H+R
jjrLdAYg4D71OXEKx/1555lWndTzJWPBL6Bgwg1qCY8dvA4VgXxX8KGElO1mOWnJ
EDIAZhzOQd9fFB/mIMHkLvuSWvhBQECkW0mIfG+1hfWIdGBnuKJKsia23Itn8aWf
N8e8o7INMEEfv+Xcn3hpBwovKVJ6z8e31ea2RIK7NUYUNTMmjkxgjC3TO6eBxAl9
JSlL4Sagl5dDXrzaEYIhmjuWrrzxzeafpbbYrYFQI1n86d35MxHLhhQ615xvSyvh
a2zqh+1z3IQenSgYsHsVrMPaWRI9CI/+TJT0Ors0f6FQY6HpiB8ZcVFciwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+GQfK+MoxUJIHasW+bZCKAXblEMB8GA1UdIwQY
MBaAFCZuDEDk6TcNuZrSepcpjX0FWY9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm00TVFPVHBOdzI1bXRKNmx5bU5mUVZaajNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85ZTU3YWEtODkwMS00YmQ4LTgyOTUt
OWMxYTUzNTgwZTM5LzEvSm00TVFPVHBOdzI1bXRKNmx5bU5mUVZaajNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85ZTU3YWEtODkwMS00YmQ4LTgyOTUtOWMxYTUzNTgwZTM5
LzEvSm00TVFPVHBOdzI1bXRKNmx5bU5mUVZaajNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQES1PYIQ
uvyK1uZTVlO6Zc43hwKUQAUIKFvUP9peNYQBVIl5SnrIWEYmWXsiqgT4uYgUKsWx
qcmlocCJaxwLbtHgp6Bx3qBGlpcPmXbO8GJV0T9Y1fpAJzts39OLBd7KLm7zQydx
N0IycL8whW3M+5ZRRhaI52T6A4qU6ovxDwRqo+Rac+fq3SL9Lqs+LWyiRlKEkph0
crrmdUcjGEUpRh10j2Ognb2ASaKMOa8ZEsQzGtSkWCs17+iOLrvy+CidwnevuObK
u1nKMAWzMXmgVkI/x7DT/RKdLScnjrPOIQjaVTJP/ybzMokXSJ1ogYkUSWDntl5H
JRuDBbcNw2anvg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:53:01 2025 by rpki-client