Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
File: JoLIFvcmhv967eU1OGGMwuiGEDk.mft (raw, json)
Hash identifier: G5tjIbD5hOl47rQ+uYJcr5Fy3N9B/clRMXYK9ryblqk=
Subject key identifier: 81:27:F8:81:BD:31:CC:EF:97:03:6D:00:13:75:6E:BD:1B:0D:F2:FD
Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
Certificate issuer: /CN=2682c816f72686ff7aede53538618cc2e8861039
Certificate serial: 019A4EF4DC912037C79E7BBD5C01554C00C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
Manifest number: 11AC
Signing time: Tue 04 Nov 2025 13:01:01 +0000
Manifest this update: Tue 04 Nov 2025 13:01:01 +0000
Manifest next update: Wed 05 Nov 2025 13:01:01 +0000
Files and hashes: 1: DS8Rbt69Y278qge_4Hmc5o4yuwU.roa (hash: tTLyP2JhBCp2p2WsUyjl7JOVm5G5UBP2M/82U2+yJ6c=)
2: JoLIFvcmhv967eU1OGGMwuiGEDk.crl (hash: naOB8mX0ijmUYF0jW1/Gt/d3LMq5N4f2Qh9Yzyvn2a8=)
3: U8zXsGEWCBH4_8YcgXmHjVER-wA.roa (hash: QGCHO7XwYCcbkNmS/y1pKg7c9YRHZM93ZZOJP0WiYK0=)
4: rzDuEXo0h15tN1onQfvdfKOerNI.roa (hash: Rm0BFvhI+es2ozBderkrcSg2LqNFRQ+VOueKD9tKZoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:dc:91:20:37:c7:9e:7b:bd:5c:01:55:4c:00:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039
Validity
Not Before: Nov 4 13:01:01 2025 GMT
Not After : Nov 5 13:01:01 2025 GMT
Subject: CN=8127f881bd31ccef97036d0013756ebd1b0df2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:8f:9e:75:9a:db:aa:9d:e6:69:32:3a:36:
28:5f:2d:e1:45:33:fc:cb:60:09:c3:78:67:45:ee:
e4:b1:ae:bb:eb:8c:e5:38:c2:d0:b7:5e:4d:0c:b1:
f4:47:f5:1d:ab:f6:ac:cb:dc:ef:1a:d9:79:f4:ba:
6b:c1:35:3a:db:ee:dd:85:74:e5:ba:57:54:6d:64:
f0:68:7d:bf:31:87:11:e2:19:fd:78:7c:f2:7a:ea:
c3:c7:72:3e:09:50:ad:3d:56:dc:9b:d5:61:b9:ce:
5c:e9:3a:3b:ef:ff:10:6d:4c:0b:4c:ef:66:38:3e:
87:2f:6a:fe:d5:9b:e1:59:b3:d6:9e:a9:e8:59:fa:
44:65:37:69:8c:89:10:2e:73:20:17:99:b8:34:51:
c3:01:1c:33:66:18:92:d4:37:ab:01:ce:8e:68:e6:
36:19:cb:f2:76:92:d5:28:da:2c:2d:4a:1f:91:6b:
aa:46:e9:65:47:f3:d6:90:09:ae:b9:38:43:1c:24:
c6:96:4b:39:bc:29:42:2e:a1:f6:8e:4d:79:de:ff:
a2:f9:ea:63:1a:b9:63:75:8d:c4:3a:28:97:75:91:
2b:72:0a:d2:cb:5a:98:32:0c:e2:61:f0:8c:7f:f2:
4f:67:28:7c:72:78:af:3e:cd:30:e9:95:d3:b2:71:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:27:F8:81:BD:31:CC:EF:97:03:6D:00:13:75:6E:BD:1B:0D:F2:FD
X509v3 Authority Key Identifier:
keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e1:c1:94:89:62:b4:95:9e:c4:09:ad:2a:97:c9:c5:f4:f0:
2b:9c:fe:a3:b0:0d:36:55:36:3c:5e:03:52:d6:a2:96:b5:a0:
ad:39:a1:fb:ec:c1:95:6a:38:7c:73:08:77:d1:53:b9:53:04:
b5:73:6a:4b:12:5d:e3:a6:85:04:76:31:44:4c:3b:50:7c:1f:
46:e2:3b:b0:d8:bc:f8:af:ca:09:cb:04:55:a4:2d:51:72:be:
82:6e:18:63:ce:d2:e3:a7:80:66:dc:c6:59:96:dd:7c:20:10:
eb:6b:3a:a8:8d:d5:df:0c:00:a9:a9:bd:0f:60:c0:da:73:1d:
02:1d:ca:81:18:4c:ba:a7:ac:20:7d:61:da:75:c9:28:a4:b4:
84:98:7b:3c:7b:61:87:7e:d9:c7:4f:cc:1e:dc:7b:a2:bc:14:
9e:a6:8c:5a:9b:18:c2:bd:c2:6f:7e:2c:b8:93:cb:29:ec:38:
e0:ba:e7:1a:4c:f5:11:58:a9:af:30:8a:63:ad:ca:58:e9:be:
de:6e:30:08:85:80:47:36:84:e1:4c:60:98:74:a3:67:09:89:
dd:b8:1a:d8:a0:12:28:90:56:5a:9e:a1:b8:37:1b:42:da:59:
3c:25:d4:8c:ee:70:49:fb:c7:d4:e7:13:a5:9b:25:14:03:82:
8d:a4:22:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:37 2025 by rpki-client