Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
File: JmceUvfpei6lP17KvWuUvIwHWmo.mft (raw, json)
Hash identifier: DLvd3UIycuhhDP/mmVb/HPKIxZpzGqMLbu7bQuMwR3A=
Subject key identifier: 79:CD:84:B5:DB:93:E2:FF:77:E3:C8:A3:CD:25:DB:DA:DD:34:6A:E8
Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
Certificate issuer: /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Certificate serial: 019A4FD0029400AEA45207B5BA10E788A611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
Manifest number: 1228
Signing time: Tue 04 Nov 2025 17:00:23 +0000
Manifest this update: Tue 04 Nov 2025 17:00:23 +0000
Manifest next update: Wed 05 Nov 2025 17:00:23 +0000
Files and hashes: 1: JgbQOde8dBoJm081qWbMUAe-4ck.roa (hash: cPb9R2Jy8VhYx4mnUxTDnSqP1F9DRsJ4eRz8x4iEUpo=)
2: JmceUvfpei6lP17KvWuUvIwHWmo.crl (hash: dyW0eGfXBbeFhXQTr0kez+HLQhuIbDL3qfmjOvg4WJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:02:94:00:ae:a4:52:07:b5:ba:10:e7:88:a6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Validity
Not Before: Nov 4 17:00:23 2025 GMT
Not After : Nov 5 17:00:23 2025 GMT
Subject: CN=79cd84b5db93e2ff77e3c8a3cd25dbdadd346ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9b:97:90:b4:5d:11:90:9b:e5:22:4b:6c:be:
63:df:3c:68:61:a7:47:a0:f7:65:28:ac:27:b8:ba:
e0:e8:2c:5f:16:34:6c:84:ac:d6:93:c1:2f:1c:ad:
f3:e0:24:77:28:55:75:4a:6b:35:82:d7:ed:c5:96:
2f:7c:a1:5d:4b:5b:7d:fd:a9:c0:30:8a:f2:09:a5:
03:aa:d5:b3:31:0d:95:10:97:c4:94:81:6a:c4:a1:
9c:5c:bd:ca:db:73:18:fd:b6:7e:57:86:ee:1e:46:
05:1d:41:8c:81:99:08:7d:a9:b6:32:31:67:17:51:
4e:ae:5b:c7:e9:78:c3:7a:fe:0e:20:64:d7:c6:5f:
47:9a:5c:d6:a3:07:b5:d0:db:13:f2:0f:09:5a:6a:
0a:17:11:67:5a:24:d5:4a:da:18:6e:64:f2:f5:1f:
3b:41:e7:9e:6f:f0:b3:cd:ea:a5:b9:15:17:97:a8:
c2:6f:cd:2c:cc:2f:59:37:1c:c0:79:28:7c:07:e0:
6e:33:e1:fa:be:4b:f1:2c:9d:43:08:96:fa:bc:ce:
da:15:00:48:6d:66:23:e1:2c:47:f2:60:69:6d:c5:
b2:92:49:a1:be:6e:58:c5:d0:4a:21:15:b2:40:fb:
19:e5:2d:ef:66:31:e7:99:f1:bd:8c:a1:23:36:b8:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CD:84:B5:DB:93:E2:FF:77:E3:C8:A3:CD:25:DB:DA:DD:34:6A:E8
X509v3 Authority Key Identifier:
keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:87:59:3d:69:d2:df:95:6b:37:19:2a:5c:c2:02:7c:22:69:
ad:2a:48:9e:05:13:db:d0:a2:15:a1:8e:43:fb:12:a1:43:1b:
db:99:7a:c4:56:e9:38:44:32:c5:a9:cc:3f:46:e9:c4:9c:ec:
c8:70:ea:49:d8:eb:3d:51:d8:a4:ec:e3:99:99:70:7b:34:2c:
70:c6:6c:1b:ac:83:08:3e:18:0f:6b:23:5f:37:ad:57:f9:1b:
d5:a7:60:30:2a:e0:45:e3:12:81:c5:80:d9:ec:58:27:fc:2e:
d4:c9:b9:13:f9:20:36:65:05:1e:d3:51:ef:06:a5:c3:39:c5:
b5:31:bb:7e:43:70:91:3c:c9:e0:1e:3a:4a:2a:41:d1:b9:2a:
fc:bf:a9:55:f6:70:0d:9a:20:59:f0:a7:b5:f4:15:35:7f:17:
0e:a3:87:90:ce:f1:9e:a9:62:43:d6:f6:00:50:23:54:a5:e3:
fb:b2:6c:df:63:70:b1:42:a0:72:6e:2f:2d:18:d1:c8:51:52:
1e:ea:7f:2a:ce:29:29:6f:43:37:5c:7d:f2:b9:5c:10:86:38:
e5:44:38:81:b5:58:07:9e:94:0e:c5:6c:4b:48:18:43:c8:30:
a0:3b:02:9d:67:0e:10:ac:d5:ef:d4:7a:39:b9:30:46:80:7d:
4d:c2:d6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:40:46 2025 by rpki-client