Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
File: JmXBf6AosxNI9jD2tW30Is4GKzs.mft (raw, json)
Hash identifier: nL2ucG2bYkCY4tpoYQeSgt/pJyS+Mf+2B//t+Zllx3g=
Subject key identifier: B7:31:1B:FD:E6:41:1F:6C:BF:2F:64:57:A4:EF:A6:1F:59:D1:A3:87
Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b
Certificate serial: 019A72CA716714DFD06FF01E2DBCB4EF384C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
Manifest number: 1734
Signing time: Tue 11 Nov 2025 12:01:01 +0000
Manifest this update: Tue 11 Nov 2025 12:01:01 +0000
Manifest next update: Wed 12 Nov 2025 12:01:01 +0000
Files and hashes: 1: 18w4n4c0cDQGOifCmmXS0bSE8_s.roa (hash: SIMK8PNO0s5rEeFGwVzs3xf4SYDZZHqpyYYANgJ+BE4=)
2: JmXBf6AosxNI9jD2tW30Is4GKzs.crl (hash: +D/t7iYdPfKjdV3/uEDDrncp6UCsCKrRIQDF6uXjyFQ=)
3: al43kkWzKm0Zt_leXuwrvUcI71Y.roa (hash: NuSx8GRJa+corRLlCxsQTs+q7zRUHE8NRnHkfNJgBsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:71:67:14:df:d0:6f:f0:1e:2d:bc:b4:ef:38:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b
Validity
Not Before: Nov 11 12:01:01 2025 GMT
Not After : Nov 12 12:01:01 2025 GMT
Subject: CN=b7311bfde6411f6cbf2f6457a4efa61f59d1a387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:4a:a4:68:c2:7f:9a:c0:94:63:36:c2:3f:
ed:e6:81:f5:55:0b:df:5a:06:8e:97:2a:0d:1a:07:
f9:f1:de:a6:32:92:3d:0c:e4:c3:ba:36:61:da:60:
e3:06:e0:20:08:79:c9:3e:59:10:d8:f5:cf:11:73:
1f:e6:75:18:34:87:26:5c:93:63:a6:f6:89:ed:4e:
c8:e8:44:5e:73:e4:76:fc:33:b8:63:48:98:60:09:
78:fe:b1:29:06:ed:69:c8:d1:51:68:84:52:09:1c:
5b:4d:1b:25:b9:30:58:74:b6:d5:a4:24:fc:87:0b:
7f:0c:b4:df:bc:24:f7:0c:75:2d:c6:43:9b:20:eb:
00:0c:fa:69:ba:69:59:91:f0:e8:ea:4f:28:bf:f5:
e2:e2:a7:63:27:19:ef:5c:dd:37:6d:dc:bf:a7:21:
cf:75:fe:8b:e1:15:54:49:02:eb:c5:d7:36:29:63:
9f:a8:38:02:e2:7e:c2:7c:ab:30:16:5b:e0:e1:0c:
09:57:c0:2a:2b:e0:e0:8d:6e:bd:a8:c6:a4:8c:0d:
cc:16:d4:ad:99:96:07:85:19:04:89:20:94:4c:67:
87:fc:6a:09:26:5b:13:55:c3:77:f8:3b:f0:30:4b:
32:b0:f8:7b:aa:ab:37:fb:9f:ee:30:46:e3:56:bd:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:31:1B:FD:E6:41:1F:6C:BF:2F:64:57:A4:EF:A6:1F:59:D1:A3:87
X509v3 Authority Key Identifier:
keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b5:0e:1d:b8:89:fb:ea:2a:c6:7a:43:77:79:4c:58:71:cf:
a0:87:7f:5c:0a:83:7a:6f:91:ea:42:46:91:ef:db:0a:6a:e4:
e6:17:e5:ea:23:dd:bd:38:c7:2a:2f:7e:97:4a:eb:1a:f4:d2:
c3:35:fb:1e:70:9c:ae:a2:b1:f7:35:eb:1a:8e:97:0c:05:5a:
a0:44:25:d8:7b:f8:f4:69:38:b0:bf:82:dd:8b:fe:0a:0e:d6:
26:4e:b7:b8:c6:68:4c:d5:ed:00:89:19:88:59:a9:72:32:51:
1e:44:f3:1e:56:aa:aa:1d:ec:17:28:d0:19:2c:d1:22:c2:10:
e0:b4:dd:91:06:9b:33:24:fb:a4:18:e6:f5:f0:0b:05:3e:09:
19:60:6e:fb:03:e0:40:2a:0e:f4:83:1f:64:32:91:7f:cd:5d:
9c:b5:b2:d4:4b:9e:7a:68:af:f3:a5:69:f3:ea:d5:d2:47:e8:
05:6f:a4:99:43:c8:60:a7:b0:73:41:43:c4:c8:e5:96:35:63:
27:03:9e:27:8c:20:da:4b:7a:03:3a:19:22:bb:ea:91:27:63:
05:d9:34:9c:1e:9e:1e:b6:30:c7:e4:bc:25:18:90:89:8d:9e:
b3:71:38:fa:4b:2e:ec:5e:00:c2:5c:93:a6:4b:d2:5e:3a:f2:
f8:ba:1a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:20 2025 by rpki-client