Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: HLTOmxdd1ggf3J27MgRPAmBvkroqkijo2HDbW1/O1XE=
Subject key identifier: F0:7F:80:9D:1C:77:84:5F:A8:B6:31:A4:8C:21:8E:BD:C7:49:6A:B5
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 019A51F5B0122EA1695119F934171D52B4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 03:00:47 +0000
Manifest this update: Wed 05 Nov 2025 03:00:47 +0000
Manifest next update: Thu 06 Nov 2025 03:00:47 +0000
Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: /48RZZ66zlYAmq872H1G63qmE05l99gk7MpI6OLNznA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:b0:12:2e:a1:69:51:19:f9:34:17:1d:52:b4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Nov 5 03:00:47 2025 GMT
Not After : Nov 6 03:00:47 2025 GMT
Subject: CN=f07f809d1c77845fa8b631a48c218ebdc7496ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:d5:93:ce:da:3a:c8:06:6d:b3:97:29:ce:
44:30:53:2b:f6:90:0f:b2:33:cc:d5:b1:d6:e9:73:
82:29:c5:ef:0c:84:31:05:81:aa:38:a0:dd:c8:7d:
03:1f:79:77:96:3f:21:83:bf:63:60:b4:5c:37:92:
70:ea:34:71:be:71:bf:ea:cb:94:c8:11:9d:1a:6f:
8c:3f:0a:6c:57:23:5e:ab:4f:d7:da:9f:92:bb:e7:
6e:ce:06:e5:5f:98:41:15:57:4f:22:aa:6c:74:c5:
c6:5e:d7:9c:b7:cf:89:50:e0:b8:ba:5d:36:12:2c:
17:05:d0:8d:ba:98:6e:1d:ca:f4:b6:d0:f5:ee:82:
10:6c:33:e8:b5:16:91:0e:f8:90:3b:4c:46:3f:8e:
81:c0:21:65:3a:07:7b:ff:57:ef:0e:ca:e5:7f:a3:
38:e0:58:e8:b9:74:f6:e4:53:6c:31:5d:4b:5d:a0:
6d:f3:86:60:03:f8:25:ce:e1:a7:d3:90:86:57:5f:
40:d9:f6:32:68:ab:25:82:e2:a9:73:d2:a5:5a:da:
2f:80:4b:f0:ff:94:7f:09:7c:80:65:3f:61:9b:2e:
f1:f4:ec:ab:aa:dd:86:08:bb:a7:bd:45:b4:d8:6c:
0f:6e:30:8f:f0:47:82:ed:ac:de:75:87:ac:bd:56:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7F:80:9D:1C:77:84:5F:A8:B6:31:A4:8C:21:8E:BD:C7:49:6A:B5
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:46:6b:eb:91:8f:90:7b:bc:5e:73:f9:9e:6a:c2:ad:37:67:
53:9e:6f:22:e7:02:6d:9c:a8:a2:bd:9c:92:f6:af:50:05:c3:
47:8a:42:98:45:38:2e:38:7f:59:9c:76:65:42:fd:05:46:21:
80:1c:8e:d8:5f:b0:33:67:7c:96:ef:56:ee:a5:fc:17:97:22:
b3:70:65:0c:84:43:3c:8e:b5:23:c0:81:8c:da:e1:56:2b:0a:
e8:e9:c7:aa:65:41:3b:6a:33:9c:93:5a:9b:db:41:34:3a:32:
a8:ef:64:8e:17:25:0f:f8:a3:e9:9e:d0:22:dd:45:30:cc:f2:
d5:27:7f:6c:bd:8d:10:07:35:1c:35:19:6d:47:c4:75:8c:28:
10:45:2e:83:46:39:d0:34:01:85:d6:f7:05:7b:42:8d:a3:f3:
91:f1:38:9a:78:16:95:e1:5a:74:53:3e:63:eb:14:40:5b:b0:
fb:21:4d:f3:f8:49:f1:a0:df:e8:5c:7c:5f:42:86:ce:30:09:
b7:11:a7:9c:a7:a9:cf:82:eb:27:c8:b8:42:45:58:25:cc:f3:
ce:fc:90:fc:ec:b7:11:21:a3:26:ee:93:2c:47:83:d5:1a:7f:
32:73:1e:d0:df:21:22:c5:80:43:a6:f4:aa:1e:04:60:e3:da:
a2:89:ee:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9bASLqFpURn5NBcdUrSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTAxYzdjZmZkMTlhNGZlYTc4Zjc5YjEwMDQ5OTkyNjZk
Y2MyMjQwHhcNMjUxMTA1MDMwMDQ3WhcNMjUxMTA2MDMwMDQ3WjAzMTEwLwYDVQQD
EyhmMDdmODA5ZDFjNzc4NDVmYThiNjMxYTQ4YzIxOGViZGM3NDk2YWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/jVk87aOsgGbbOXKc5EMFMr9pAP
sjPM1bHW6XOCKcXvDIQxBYGqOKDdyH0DH3l3lj8hg79jYLRcN5Jw6jRxvnG/6suU
yBGdGm+MPwpsVyNeq0/X2p+Su+duzgblX5hBFVdPIqpsdMXGXtect8+JUOC4ul02
EiwXBdCNuphuHcr0ttD17oIQbDPotRaRDviQO0xGP46BwCFlOgd7/1fvDsrlf6M4
4FjouXT25FNsMV1LXaBt84ZgA/glzuGn05CGV19A2fYyaKslguKpc9KlWtovgEvw
/5R/CXyAZT9hmy7x9Oyrqt2GCLunvUW02GwPbjCP8EeC7azedYesvVYm9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPB/gJ0cd4RfqLYxpIwhjr3HSWq1MB8GA1UdIwQY
MBaAFJiQHHz/0ZpP6nj3mxAEmZJm3MIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYt
Y2JjMjc5N2MxZDBhLzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYtY2JjMjc5N2MxZDBh
LzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEZr65GP
kHu8XnP5nmrCrTdnU55vIucCbZyoor2ckvavUAXDR4pCmEU4Ljh/WZx2ZUL9BUYh
gByO2F+wM2d8lu9W7qX8F5cis3BlDIRDPI61I8CBjNrhVisK6OnHqmVBO2oznJNa
m9tBNDoyqO9kjhclD/ij6Z7QIt1FMMzy1Sd/bL2NEAc1HDUZbUfEdYwoEEUug0Y5
0DQBhdb3BXtCjaPzkfE4mngWleFadFM+Y+sUQFuw+yFN8/hJ8aDf6Fx8X0KGzjAJ
txGnnKepz4LrJ8i4QkVYJczzzvyQ/Oy3ESGjJu6TLEeD1Rp/MnMe0N8hIsWAQ6b0
qh4EYOPaoonuvA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:26 2025 by rpki-client