Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: DsI4PVegixpOiRlhmRzD4+ieH9kPRFk1czQg+a0bGpw=
Subject key identifier: 78:C0:BC:35:6E:B2:FF:54:60:F8:4F:20:2D:10:D6:68:B0:7C:29:04
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 019A5074EDFDC5612690E6B60D1B51A5883C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 1455
Signing time: Tue 04 Nov 2025 20:00:31 +0000
Manifest this update: Tue 04 Nov 2025 20:00:31 +0000
Manifest next update: Wed 05 Nov 2025 20:00:31 +0000
Files and hashes: 1: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: k3kUjOO4+IJoTzB/0UrQ9ComhoDd7rLk745QL/133GU=)
2: vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa (hash: mmQc628tPl3bs34ALUnwk7MYS2YDfpoBWJfmEYCNwMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:ed:fd:c5:61:26:90:e6:b6:0d:1b:51:a5:88:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Nov 4 20:00:31 2025 GMT
Not After : Nov 5 20:00:31 2025 GMT
Subject: CN=78c0bc356eb2ff5460f84f202d10d668b07c2904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:71:3c:47:b9:56:d2:79:57:f7:11:c6:92:
5b:6e:14:bd:08:52:be:a5:cd:ac:fe:3e:0a:88:9b:
28:b1:c8:77:8b:34:60:a3:06:a1:12:df:15:8d:6f:
a6:0a:0d:77:64:9f:34:de:1d:6e:2e:b4:9b:69:03:
7d:ef:5a:de:6c:87:93:50:4c:8d:b1:0c:47:4c:02:
b2:0e:ac:8b:5d:65:35:85:64:f6:06:ae:68:42:e6:
ba:81:8f:fb:d8:97:de:e5:c7:bd:29:04:6e:7d:e0:
e2:54:24:a9:9f:cf:aa:78:7d:d2:a8:26:b2:99:c6:
8d:11:de:fa:34:f0:1b:13:f9:2f:dc:ba:3c:0d:73:
b2:2e:c3:54:4b:7d:bd:e4:34:1c:01:b4:f8:44:05:
d8:69:a7:81:99:b5:68:61:e3:0b:d4:2c:22:3f:0c:
f7:62:c1:2c:af:00:e9:cf:87:7e:61:b7:6d:15:e7:
59:7f:b2:6a:a6:8a:c7:3d:04:c6:37:48:26:7b:a2:
95:88:88:30:4a:56:e4:c7:d0:93:5b:62:33:ef:75:
cf:a4:16:39:2a:03:c5:30:b8:2d:cb:56:9b:08:e7:
e8:96:0a:05:a9:07:b6:a7:f1:bf:61:fd:ab:c1:26:
21:76:2a:11:1a:1e:7c:54:16:b2:1f:65:df:c8:a6:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C0:BC:35:6E:B2:FF:54:60:F8:4F:20:2D:10:D6:68:B0:7C:29:04
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:be:bf:79:19:41:bf:ad:93:6e:51:10:7a:d4:98:b0:ba:40:
21:3c:00:c8:3e:a9:7b:e8:2c:1f:91:ac:aa:8c:6a:c8:e9:18:
76:a4:2c:77:59:a5:d1:06:59:d6:e2:59:9a:ee:3a:ee:d4:c0:
8d:9a:ce:9a:e0:51:b4:79:f5:ca:bf:ae:55:ff:6b:3a:ba:4c:
b8:84:e9:5a:54:2f:df:67:81:17:0f:31:55:28:4e:55:81:17:
13:4a:98:f7:0e:15:2d:b7:97:d5:78:05:e7:b5:b8:21:9f:76:
3e:2e:3a:be:c5:da:02:db:59:c4:65:2f:09:e5:aa:20:fa:97:
23:21:89:85:2c:07:cb:47:d4:d3:8c:8e:30:4e:0a:02:c3:eb:
16:e9:31:67:7f:ef:44:9a:ee:a4:9b:a2:da:ba:4d:eb:0f:43:
fa:26:0d:4e:f1:1c:fc:da:8e:e3:7f:4a:37:3c:3b:96:51:c8:
63:52:e3:a5:d9:d1:6d:cc:97:7f:dd:a6:5c:e0:f8:09:ed:0d:
0d:98:30:19:57:7b:63:83:cd:a3:fa:12:25:56:2b:c6:9e:d1:
37:0f:aa:b7:1c:f0:fc:43:e8:b3:08:d3:3a:5b:9a:de:f2:3b:
21:73:bb:c4:80:f0:e8:4b:be:16:eb:39:f7:16:c0:a3:6d:70:
08:ab:2c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:26 2025 by rpki-client