Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier: yTL7Gf7BrQ2SLD+qkj8F0wgAtLRN/mF7MuNqmGEenDw=
Subject key identifier: 8C:A7:2B:B2:77:0D:01:CD:6D:D1:91:DB:6E:D9:72:AC:57:6E:59:4A
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 019A214010AEB7F3B5B4E968BF7D5F790F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number: 142F
Signing time: Sun 26 Oct 2025 16:00:37 +0000
Manifest this update: Sun 26 Oct 2025 16:00:37 +0000
Manifest next update: Mon 27 Oct 2025 16:00:37 +0000
Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: sw2Sdce3Y7AvOv96rr1j593yvr7axdhZWfj8DFn3e3c=)
2: xEsnJciiBq0cpARjJTgBj_Gwb0g.roa (hash: rNWLcgQzhcKlCZHWn2PfxjHWg6/hf63VmYuH/DFdDPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:40:10:ae:b7:f3:b5:b4:e9:68:bf:7d:5f:79:0f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Oct 26 16:00:37 2025 GMT
Not After : Oct 27 16:00:37 2025 GMT
Subject: CN=8ca72bb2770d01cd6dd191db6ed972ac576e594a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:9c:12:8d:7e:43:6f:fb:10:01:12:1e:59:
d2:83:b9:bf:97:31:0a:12:2c:c7:f6:27:7c:7f:48:
88:f3:9b:f0:13:5b:1d:a0:1c:dd:9e:f0:9f:24:d9:
16:a4:d1:6e:dc:08:91:8a:59:f7:6f:ba:c3:53:8c:
5b:ba:fc:2e:c0:c8:ab:8d:8f:27:67:90:28:b8:57:
ba:56:79:50:3a:e6:5a:73:05:42:43:29:1f:06:c4:
07:69:12:8e:29:ed:77:0c:f0:aa:7b:a6:c4:9f:5f:
49:e6:b3:64:ca:a5:e0:73:e9:b0:06:ad:5d:06:1e:
38:cc:90:07:24:47:60:70:10:2d:7b:d2:e6:91:28:
46:1d:98:52:be:32:8d:f0:b1:ab:5c:7f:13:b3:26:
58:70:96:59:38:fd:1c:87:45:bf:3c:4e:0a:df:ca:
f4:ab:86:3a:51:75:cc:fd:a9:f6:7f:0a:3d:40:a6:
d9:05:bc:58:80:03:7c:97:c4:18:9f:13:d3:72:fb:
26:f0:00:63:42:c7:21:99:25:3c:f8:4d:cd:65:b6:
a1:c9:1b:a0:35:78:d8:3e:d0:09:ca:2b:26:81:51:
8f:57:66:b7:3e:cf:f0:ec:16:57:bc:5a:16:3c:85:
c1:e5:5d:4a:11:78:8f:09:94:1d:78:6d:36:c4:2c:
6a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A7:2B:B2:77:0D:01:CD:6D:D1:91:DB:6E:D9:72:AC:57:6E:59:4A
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6b:61:5c:e5:50:f4:d9:e3:11:70:4c:19:fb:a6:e2:dd:e9:
80:9c:62:6e:89:16:08:98:af:d7:87:9c:1b:57:6c:08:a9:26:
73:fc:72:0e:36:f1:f3:75:6a:b8:a2:60:8d:34:47:30:65:06:
5c:3f:b7:be:e6:f2:bd:13:0b:b9:da:08:f3:66:9c:68:a3:d5:
89:75:bf:3e:e8:d4:4a:89:be:bb:9d:3e:e8:e7:2f:31:eb:94:
21:5a:e1:80:cb:80:5d:c4:e6:16:5b:19:5a:b9:4e:80:4a:10:
e6:f7:eb:b4:b5:f9:8a:13:b0:1c:80:f2:2a:88:d6:2c:73:65:
4f:c2:a4:ca:a2:24:57:75:01:b3:33:cb:c2:70:02:e4:7c:bc:
78:e9:ff:be:c5:d9:ed:85:ec:e7:81:a2:d1:6c:ce:b2:d3:5b:
46:1e:fd:0e:3b:0d:60:4f:24:0e:03:33:c3:be:41:ad:92:3c:
7e:ab:36:e8:a9:d0:46:21:f1:74:fd:b6:2c:ca:68:9d:63:72:
cd:7f:a2:21:c6:22:8c:a8:2d:f0:f8:5c:4a:94:76:56:08:42:
24:cc:24:88:1e:2f:f1:aa:6d:e2:9a:83:db:2c:f2:4f:c7:1c:
24:10:0e:7f:a2:7c:15:a2:52:ed:12:3f:66:a7:30:f1:68:d3:
8e:3c:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:09:41 2025 by rpki-client